Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          YvA2Epr+XAIv9mN70PY1sUVke5OWg0Rtg32eOwbt/Hg=
Subject key identifier:   5F:59:7D:9F:20:45:56:94:73:26:1D:EA:23:8A:CA:87:09:7B:DB:4D
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       019A4E18ED5D0170956CF534FBB3A42226A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0D92
Signing time:             Tue 04 Nov 2025 09:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:47 +0000
Files and hashes:         1: 9HLS_NA10pMknjQ7wU49q_gjn1M.roa (hash: GSeJidvs+nbJKlNoZl5WB6JbvmgER8mg4y2DPiPnwI0=)
                          2: B6alie6EioBSI4GRuYA153USJyU.crl (hash: ehPJJrTpZaMKp4tZwE656hGm8B/DdR/LXJy/s+t1CCg=)
                          3: HKdVcnfVobsdIXBp0QDt_Z0qTCg.roa (hash: HCRvOv3w8ga9OyNraAL7FomJBvkDq6oZ4SO2+hazIX0=)
                          4: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (hash: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:ed:5d:01:70:95:6c:f5:34:fb:b3:a4:22:26:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Nov  4 09:00:47 2025 GMT
            Not After : Nov  5 09:00:47 2025 GMT
        Subject: CN=5f597d9f2045569473261dea238aca87097bdb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:6b:01:24:4f:08:23:bb:8f:8f:7d:a5:75:
                    42:69:5c:de:ea:c3:be:57:eb:3f:4b:22:66:09:ef:
                    a4:88:36:e2:15:12:f7:ee:68:86:3e:e4:a7:e4:c3:
                    4e:e8:8b:ba:8e:13:25:e6:b2:1e:ef:b0:5a:47:6d:
                    0a:31:82:31:e2:1e:78:f2:ca:08:c8:2f:ce:af:16:
                    53:33:f6:28:3b:60:c9:fa:6f:24:a7:f9:19:4a:6e:
                    45:98:36:53:59:d5:b7:8c:9e:41:86:78:b5:e2:c6:
                    14:80:39:0b:87:2f:a9:dc:69:c4:24:94:34:6f:0a:
                    34:5d:1e:6e:58:78:e9:91:e6:4d:22:e9:d2:c8:1c:
                    b5:cd:bf:6a:24:99:c2:58:7c:44:d6:5a:56:41:de:
                    ce:37:c6:9b:9b:58:31:e1:89:19:c4:64:6f:4c:df:
                    18:6b:d9:92:7a:ff:5e:16:6c:0c:04:fe:51:8c:c6:
                    1e:60:bf:c1:bb:14:84:14:cf:05:4b:45:23:e2:b9:
                    55:8a:e7:6b:bf:d4:b9:b0:76:3b:07:71:a3:62:c3:
                    cc:40:34:6a:f3:8c:32:da:d5:c7:46:84:09:b0:b1:
                    2d:d2:c6:77:83:8b:c4:29:d7:7a:f2:e1:00:87:34:
                    73:95:38:b2:2d:25:d5:e8:b3:52:60:e8:bc:07:44:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:59:7D:9F:20:45:56:94:73:26:1D:EA:23:8A:CA:87:09:7B:DB:4D
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:64:a6:4d:84:ab:34:0d:05:dc:88:8c:81:19:f9:66:4c:
         ae:da:86:b5:4d:7d:c5:d8:58:a5:c5:a3:53:5a:7f:bc:3e:b6:
         7d:c2:00:1b:5a:6a:43:95:5a:a1:19:89:fb:9a:6f:90:75:25:
         86:d3:63:ae:69:af:03:a2:28:ff:1e:b1:95:3a:00:10:ab:b3:
         fa:4b:a3:b3:5f:19:c4:cf:18:8c:0a:63:45:fe:c1:50:f4:4f:
         a2:6e:1b:92:42:3a:bf:ee:63:27:27:82:44:00:4b:56:e2:91:
         79:56:b1:4f:4f:01:b3:98:d5:14:8a:a9:31:f5:b7:71:fa:a5:
         72:c0:81:3f:86:6c:16:f4:ca:ed:dd:87:aa:57:31:e7:71:6a:
         ee:d7:c5:ec:ea:43:cb:c9:32:f9:88:e2:9b:25:24:52:ab:75:
         88:a2:57:07:c5:a9:05:34:bd:b5:6e:36:49:72:a3:9c:96:48:
         09:fb:71:c4:1e:8f:36:1c:ae:8f:c1:a1:bd:ea:c2:1a:9c:e3:
         f9:5f:94:3b:af:ed:6e:9a:66:70:a6:70:63:97:e2:57:b6:0b:
         c3:3b:dc:45:7c:15:24:6f:e5:1a:06:05:e1:ec:2f:ba:4f:b7:
         81:5b:af:37:b2:de:59:66:21:62:bc:ed:42:b3:7d:6a:f1:d7:
         fb:53:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:39 2025 by rpki-client