Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          b5v0ZGi77WZX/tSrN0Rxa6vEvDgV0Ga04qSCgaoS1qQ=
Subject key identifier:   01:F9:B9:16:63:34:B0:E5:6C:9C:DF:31:BC:B2:1A:1E:E9:9C:A8:4E
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       019A4D3CBB498A6F2CAE95899C19D81BF547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          0762
Signing time:             Tue 04 Nov 2025 05:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:16 +0000
Files and hashes:         1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: H4kZL8BR2yAe8zKmQPj9qZKbJExLhR9QNgv3Rh0lsrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:bb:49:8a:6f:2c:ae:95:89:9c:19:d8:1b:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Nov  4 05:00:16 2025 GMT
            Not After : Nov  5 05:00:16 2025 GMT
        Subject: CN=01f9b9166334b0e56c9cdf31bcb21a1ee99ca84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a3:af:25:fc:17:51:12:63:72:61:5e:1f:0d:
                    d9:b5:4e:1f:2e:a0:96:ab:25:e5:a2:29:25:91:dd:
                    ce:a2:89:30:5e:dc:f9:12:f5:8a:9a:88:82:5c:ad:
                    a2:79:ae:ce:2a:7f:fa:cd:92:b0:4c:7a:89:56:76:
                    1b:e8:81:9a:91:4e:51:a4:5d:92:05:14:b5:77:d7:
                    f2:06:ca:19:04:4f:1c:e7:00:f2:74:26:e7:cb:3d:
                    07:dd:09:67:80:b4:0a:19:ca:11:df:c2:9b:89:39:
                    53:02:6c:30:5a:c0:89:4e:06:f6:7c:66:ec:59:97:
                    72:dd:2e:e3:c3:0b:cb:fb:59:f3:ec:6d:17:1e:e4:
                    32:c3:d8:a8:14:b0:61:47:74:1d:a5:6b:70:44:fe:
                    fd:e6:6a:af:f4:fd:cd:a9:60:a6:8a:e7:70:d1:37:
                    4d:c9:97:ee:7c:d2:23:3d:da:b3:d9:59:23:c8:6c:
                    c8:7e:42:14:27:49:a2:65:b9:04:81:b3:35:7c:76:
                    bc:aa:66:13:d6:83:d2:9b:fd:c0:21:b7:94:6d:77:
                    b0:b7:47:f1:e3:d3:40:39:f6:34:e9:e5:e5:f2:88:
                    18:90:1e:ff:72:33:ef:57:43:81:ca:b9:7b:69:b3:
                    1b:c1:82:be:ab:fc:d8:d1:34:76:97:2e:ba:cf:25:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:B9:16:63:34:B0:E5:6C:9C:DF:31:BC:B2:1A:1E:E9:9C:A8:4E
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d0:71:01:dd:c0:93:b1:d5:57:55:5b:8d:6f:c2:b7:ae:ab:
         35:c8:7a:c5:99:da:5d:3c:b9:25:d4:c2:58:2a:e7:df:cd:3e:
         3a:5f:fc:85:93:26:12:72:61:a1:1a:df:64:29:dd:12:e4:8a:
         79:4f:77:23:b6:f2:86:f3:45:70:c6:8f:80:2b:0f:8f:79:2e:
         d9:36:a4:9c:50:39:91:75:ff:9d:03:69:e3:5d:3c:e8:72:60:
         30:9a:cf:4f:e3:9f:0f:f6:16:c9:36:ff:2a:1f:f9:d5:48:ea:
         56:6f:16:24:29:68:35:8a:03:db:76:44:c7:9f:6c:81:45:fb:
         8c:4a:8f:e9:33:fe:9a:2f:04:5d:89:17:a5:b2:2b:6e:d3:51:
         55:21:11:c1:8d:55:84:a0:0c:53:51:d3:ef:13:df:73:a7:1d:
         b0:39:d5:9b:cc:fc:75:7b:37:85:6b:1c:90:41:b3:eb:ff:9c:
         31:3a:08:c0:c9:87:a6:36:f5:e9:cd:58:84:d1:c5:bd:c3:f4:
         0f:01:54:b9:a6:f8:4c:c3:97:53:5c:80:7f:02:46:2b:90:76:
         e9:db:4e:38:47:fe:d4:30:64:d8:8f:cb:e8:5a:a8:df:23:86:
         e4:5d:43:68:de:1e:de:33:e9:95:e5:1b:20:d9:3c:60:43:22:
         99:a3:82:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:33 2025 by rpki-client