Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          bcZEKA5pCvtTYQ42Op1bV3pn927+M6XSNHO4BKkA2yI=
Subject key identifier:   58:63:61:47:44:22:03:53:F3:E5:18:60:8C:85:94:1C:D7:B8:AC:E8
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       019A5187D3B9175817F168D35D309880AEB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          16A1
Signing time:             Wed 05 Nov 2025 01:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:47 +0000
Files and hashes:         1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: FGISkxJCTFRR9stvYbg35kCA0Z+6XuTWa+BOYeHks/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:d3:b9:17:58:17:f1:68:d3:5d:30:98:80:ae:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Nov  5 01:00:47 2025 GMT
            Not After : Nov  6 01:00:47 2025 GMT
        Subject: CN=5863614744220353f3e518608c85941cd7b8ace8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:dc:9c:4f:05:04:14:21:f3:82:db:65:1c:
                    38:45:db:b1:09:bf:85:d5:45:4f:4b:06:5b:80:91:
                    a2:83:09:8e:ac:57:68:58:1f:c2:26:ac:ed:5f:d4:
                    1f:4e:59:be:75:be:e8:47:7a:b3:f6:fa:58:19:22:
                    75:81:f4:b9:b9:d6:8a:08:f9:0f:36:bd:bb:b9:7b:
                    dd:7e:1c:4e:3c:a0:f2:a4:f9:63:65:34:d7:fb:ef:
                    f4:df:2b:80:c3:21:45:aa:8b:d6:ab:02:ca:28:07:
                    b1:ed:f9:00:39:da:84:ec:1c:d1:1a:9d:56:0d:8e:
                    2b:ad:68:b7:2d:1c:2b:0c:7d:19:2b:fb:c8:fa:df:
                    96:40:ad:26:c7:64:ff:fd:8c:b7:a6:42:03:c7:b0:
                    f4:86:0a:6b:ea:a8:13:d1:7a:e0:ab:f8:63:31:6a:
                    45:81:c3:77:57:97:ce:b5:99:6b:c6:83:2a:08:da:
                    1e:f8:2b:aa:5d:9b:36:e0:4d:bd:eb:db:4c:b4:ae:
                    80:b7:41:3e:fd:06:13:28:98:06:c9:84:05:f1:97:
                    aa:93:b6:8b:ed:b7:29:4d:33:49:c2:0f:6c:bb:6b:
                    e0:da:1a:49:2c:0e:8a:bb:5b:f7:4f:6f:26:f3:8d:
                    b4:e5:6c:ff:bf:2b:fb:bb:7b:ed:8c:fc:19:37:9c:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:61:47:44:22:03:53:F3:E5:18:60:8C:85:94:1C:D7:B8:AC:E8
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:1b:29:ae:ed:88:ec:3a:07:4d:1b:b2:22:42:f9:77:33:
         7b:83:a5:e0:67:46:27:05:ce:a7:26:46:1f:ff:69:7b:76:ff:
         d3:ae:52:f3:0f:6c:d9:0e:98:51:d9:9c:98:f9:77:66:98:b8:
         f4:92:65:fb:a5:a5:ac:99:49:6f:31:39:42:17:ff:46:4a:42:
         ca:65:69:0a:48:df:59:51:ef:58:5a:bc:3f:9d:ec:78:3e:ca:
         85:00:3e:aa:16:37:d6:8d:8b:e1:fe:c0:20:c3:76:ad:6f:53:
         1e:8c:25:dc:95:6d:4c:76:61:a3:a9:12:15:54:6e:ee:a5:e9:
         42:76:88:1f:3a:b0:af:3e:65:d1:e3:02:bd:29:96:05:81:23:
         a0:3b:d7:ec:a9:b4:d6:c4:4a:d3:06:22:7f:be:84:28:23:38:
         66:6c:f0:8f:dc:21:4c:5f:2a:e3:57:6b:a6:4d:da:23:e0:ea:
         6e:54:7f:94:8e:c1:a9:67:8c:b6:a4:a3:32:6d:33:b1:2f:8e:
         72:b6:d5:19:2a:9b:09:f8:04:92:03:3f:16:2b:fa:7d:2c:b3:
         13:04:c1:88:30:66:72:9e:af:66:60:0a:e5:9c:2e:05:40:f8:
         50:fe:b6:60:af:34:ca:c1:96:f3:a8:ea:6e:26:53:00:9b:ff:
         e5:d2:60:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:24 2025 by rpki-client