Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
File:                     b-3wt2FSkK76zF9qprQdnRhD8bY.mft (raw, json)
Hash identifier:          xl/cs/BBvi8TNj5zswCaPZ5WHmFalQADeNXOHGNVOSk=
Subject key identifier:   DB:69:34:21:5A:3E:51:6F:E2:0B:0B:10:96:13:9C:54:3E:81:31:62
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Certificate issuer:       /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial:       019A503E26F36578049F63A5ADCB9EA3F057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
Manifest number:          1713
Signing time:             Tue 04 Nov 2025 19:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:41 +0000
Files and hashes:         1: Gvj6G0DPkkSLihnA46d1N0vjphQ.roa (hash: pbCy8dJvrT76LkZMMvrrN/iJW8bsTC8bBcjdgpqACVI=)
                          2: b-3wt2FSkK76zF9qprQdnRhD8bY.crl (hash: rwkilX/1GTKywtnqWHvIzYtVN3eTuse6HKVyls1d9Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:26:f3:65:78:04:9f:63:a5:ad:cb:9e:a3:f0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
        Validity
            Not Before: Nov  4 19:00:41 2025 GMT
            Not After : Nov  5 19:00:41 2025 GMT
        Subject: CN=db6934215a3e516fe20b0b1096139c543e813162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:17:b1:2f:d7:2b:2d:15:9f:f4:bd:45:71:a1:
                    03:93:c0:86:a8:1a:e5:12:f1:3c:f2:71:8a:49:08:
                    d2:b5:42:72:5b:6d:32:5d:3d:12:36:04:c0:e4:3d:
                    8a:0e:b6:f1:1e:17:ae:95:37:ca:08:31:f6:77:db:
                    3d:95:a6:23:98:64:87:b6:4e:35:5d:d7:19:51:8d:
                    da:7f:7f:f8:72:7c:35:7e:f4:08:57:cc:05:af:ae:
                    b3:49:bf:ad:d8:67:03:44:09:04:7f:94:9e:2a:22:
                    de:20:fe:f4:57:08:25:f0:d5:3e:0c:4b:0f:28:67:
                    c0:d5:50:c8:b2:87:38:ca:7b:a2:60:39:c4:5c:ee:
                    42:a0:10:06:3d:c4:8e:11:ad:68:a1:e4:e4:a1:09:
                    b4:67:86:80:b0:11:68:de:99:d1:38:8c:6d:7a:c3:
                    68:ec:5d:0d:e4:40:10:24:9d:c3:ef:61:df:f2:62:
                    bd:61:30:34:45:66:ea:1a:82:be:74:bb:01:a3:bb:
                    58:05:8a:4b:2f:97:30:9f:e3:b0:6e:31:0a:8f:31:
                    6a:26:cb:44:cb:4a:5b:a7:96:b2:21:92:53:68:9b:
                    ab:3c:cd:94:04:ec:5f:a3:4f:f9:28:20:dd:f2:7f:
                    94:b9:c9:34:f1:cf:33:f2:39:c6:7c:0f:98:fa:89:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:69:34:21:5A:3E:51:6F:E2:0B:0B:10:96:13:9C:54:3E:81:31:62
            X509v3 Authority Key Identifier:
                keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:73:2e:13:db:29:52:4a:2d:ac:97:f1:ed:44:15:34:9c:59:
         22:3d:d2:cb:fb:6a:81:b4:59:c1:70:ec:dd:9a:86:bd:54:8d:
         5a:4c:81:3b:b7:43:ec:ad:46:90:d1:31:e2:9a:9d:33:96:b0:
         f0:02:a6:a6:e2:02:b4:40:02:4c:4e:86:2b:07:00:3f:e1:95:
         82:1b:a7:ad:4a:f1:f3:04:5f:51:c9:7c:dd:13:d9:31:db:5f:
         ab:29:6f:7f:79:1d:2d:f0:79:de:d1:df:d2:fe:f5:0a:28:26:
         ba:3e:1e:50:5a:0c:50:a3:0e:e8:ca:a4:6e:ee:24:2c:1b:04:
         ac:a9:40:b7:e1:25:6c:64:5a:ff:69:06:f5:19:2a:ef:5f:cd:
         36:70:70:f3:62:02:91:41:f5:0c:b1:b4:65:c3:e3:1c:4f:78:
         a1:27:88:39:83:a3:11:a7:7c:4a:06:df:be:bd:0f:cd:09:df:
         ea:2a:0e:40:6d:37:6a:3c:bd:bf:64:f9:5c:5b:34:40:b7:f3:
         f0:72:d8:41:a1:5b:6b:ff:2b:af:7a:a0:2d:d4:3e:63:ca:e0:
         57:ce:bd:51:52:b0:25:33:60:32:1b:b5:ea:64:e3:04:ef:b4:
         fd:3c:a8:b4:f6:70:54:4d:2f:7c:16:0c:00:31:3a:57:0f:19:
         53:05:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:10:24 2025 by rpki-client