Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
File:                     CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft (raw, json)
Hash identifier:          U9njfEaTdq/yOeMZTAuJYCSdOVkfwIJr1cbU5owWj+g=
Subject key identifier:   88:9F:4A:98:53:CE:01:A4:75:CD:55:CB:4D:AA:67:7B:DE:3D:83:56
Authority key identifier: 09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73
Certificate issuer:       /CN=09b4bf37f39eec62982c4b63709fab5d146c7373
Certificate serial:       019A1D635BE3FC1286A735972AC5D127592A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
Manifest number:          16F3
Signing time:             Sat 25 Oct 2025 22:00:42 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:42 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:42 +0000
Files and hashes:         1: CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl (hash: 1jiPmShnp+OPQOBAbtKv1Bgz52s/nVE+n/Emyu0UbWU=)
                          2: Jf9y1r-7U3oVE_0fSwlBWZfWEa0.roa (hash: GPOv3V78s13UPdmn9zsSWoQbLb5tsSshuu6xid5/0Es=)
                          3: Ovnkzgu3GObRw7FEQRBgXQjx5M4.roa (hash: nJnymsSFWBg9H1fUFjESgx2imNhbNeKcWoh7uta0L5c=)
                          4: UmI6d2m9R3iczzZVeRe1gk47NKM.roa (hash: RX415hlrT0LruVY1Id4UgU7KARGGjtNq2cWbFexDoVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:5b:e3:fc:12:86:a7:35:97:2a:c5:d1:27:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09b4bf37f39eec62982c4b63709fab5d146c7373
        Validity
            Not Before: Oct 25 22:00:42 2025 GMT
            Not After : Oct 26 22:00:42 2025 GMT
        Subject: CN=889f4a9853ce01a475cd55cb4daa677bde3d8356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:f0:e6:41:8c:10:29:65:33:7e:55:43:5a:
                    d9:a9:8d:09:82:39:37:a1:2b:ce:f8:d6:35:53:62:
                    a7:83:cf:f9:bc:18:9e:81:a5:f4:a5:2f:bb:9d:18:
                    fa:78:8b:6d:f1:46:95:24:19:92:4d:a4:bd:6b:e2:
                    d7:53:ad:67:46:af:f1:3c:6b:15:de:99:a7:ff:9b:
                    63:49:8a:0a:16:a1:87:84:66:0d:87:51:30:79:c1:
                    bc:66:44:85:b1:87:00:8f:a7:b7:a4:f0:33:3d:9e:
                    e8:78:70:20:41:98:18:a2:ea:52:01:57:92:a3:1f:
                    e7:62:06:75:51:5e:36:23:8f:14:17:6f:20:44:03:
                    ef:96:be:e9:96:6a:9b:64:67:d4:5c:52:b8:61:63:
                    56:0a:99:16:80:8b:21:18:59:bf:43:01:0a:22:50:
                    57:e5:9d:26:db:cb:46:c7:f6:1e:26:fe:52:f1:0b:
                    66:e3:bd:bd:3b:8d:4c:e6:bc:51:a6:83:1f:b6:c2:
                    05:2a:66:62:6d:dd:67:9b:b7:45:c2:96:40:22:11:
                    23:a2:7e:fe:58:c3:91:e8:05:b1:a3:40:0c:eb:f7:
                    0e:85:0e:4f:b7:26:d2:56:cc:91:38:a6:a6:cb:cf:
                    fa:d0:0a:ea:36:e3:f8:54:5f:a1:82:99:d2:07:8e:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9F:4A:98:53:CE:01:A4:75:CD:55:CB:4D:AA:67:7B:DE:3D:83:56
            X509v3 Authority Key Identifier:
                keyid:09:B4:BF:37:F3:9E:EC:62:98:2C:4B:63:70:9F:AB:5D:14:6C:73:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3716d9-473f-4af3-a1d3-24e6c0d4fad7/1/CbS_N_Oe7GKYLEtjcJ-rXRRsc3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ca:e4:67:ec:24:7f:00:38:91:e5:00:a3:ab:df:12:25:bf:
         a6:c9:7c:dd:b8:34:3e:f6:9f:ec:48:f1:80:1e:e6:bb:00:b1:
         6d:19:e7:c4:b2:6b:02:67:a0:e3:1a:68:13:6b:08:4d:d8:94:
         25:59:f2:5f:92:61:e2:9c:5e:cf:25:50:44:61:18:2a:47:1a:
         82:9b:da:6c:36:4f:2b:dc:5e:65:d7:09:64:01:17:e5:5a:49:
         c6:31:c8:de:d8:9a:91:8f:e3:de:7f:2c:84:58:53:4e:c5:43:
         19:f9:fc:73:ea:33:23:f1:b9:b4:b5:86:58:ca:da:87:49:6d:
         e6:10:b5:77:28:62:be:35:f3:d1:ac:0b:0a:0a:65:90:9e:99:
         17:bd:7b:4c:67:55:5b:06:3c:e6:96:0f:02:fd:c4:92:02:03:
         39:62:6c:07:ac:b3:22:e9:35:e7:6d:c3:8a:c1:c1:6e:0a:33:
         68:60:d3:3e:45:04:e4:ba:fb:51:cb:bb:61:37:8a:a6:ae:25:
         71:4d:e5:17:7d:57:21:28:2b:87:44:94:33:b1:fe:a2:80:3f:
         82:44:68:6d:79:25:cf:f7:1f:5d:5f:32:d9:f7:f8:43:d4:1f:
         25:b2:ce:0b:e4:6b:ea:ff:61:75:0c:fb:57:af:71:b9:6b:55:
         55:a1:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 00:03:25 2025 by rpki-client