Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          nUw3bN+Oy66eQcknrhh0retYe0NuKf9Jzu/g4fZwQlI=
Subject key identifier:   72:4F:DF:C5:49:AF:CE:CB:17:FA:42:D2:BC:1D:91:72:93:3D:3B:31
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       019A4F62E06D5B9D1454FB586A25FDC2A41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          170F
Signing time:             Tue 04 Nov 2025 15:01:11 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:11 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:11 +0000
Files and hashes:         1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=)
                          2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: QiVAGph06rV8RaCO6wLLENyzdTVLwWrBV/qJKJ6jQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:e0:6d:5b:9d:14:54:fb:58:6a:25:fd:c2:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Nov  4 15:01:11 2025 GMT
            Not After : Nov  5 15:01:11 2025 GMT
        Subject: CN=724fdfc549afcecb17fa42d2bc1d9172933d3b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:54:82:59:33:2b:df:bc:7f:4f:d4:93:c0:
                    0d:37:c5:5f:47:c5:c0:df:e2:95:22:92:7b:04:1f:
                    14:03:9b:84:9c:68:98:a9:29:b0:2d:1c:93:c5:28:
                    55:3a:b0:d5:f9:b6:aa:8c:37:d9:79:0e:dd:fa:72:
                    19:a1:f2:52:81:bc:99:8d:4f:90:b1:06:17:2c:ed:
                    21:2a:41:2f:46:f5:ed:95:35:c4:79:d1:e4:15:9a:
                    ef:e3:da:c4:93:bd:a8:46:97:09:74:03:89:5a:76:
                    28:d7:94:4f:8a:56:cf:a2:6d:a2:26:59:76:e3:02:
                    e9:a7:c6:78:77:d5:3c:b8:27:2d:79:02:12:19:8f:
                    d9:5b:73:85:54:11:94:32:0d:da:e6:d0:c0:be:b6:
                    29:bc:96:78:6a:ff:e3:4a:9d:aa:b4:58:3e:91:f1:
                    f3:e7:30:1e:d2:02:da:1c:03:69:96:be:e7:23:47:
                    ed:2c:96:d6:8a:63:4c:05:05:c5:8e:41:6c:70:bd:
                    69:04:cf:b1:34:bc:38:2d:6e:46:3f:f5:aa:44:50:
                    95:32:71:b6:2c:b9:92:51:7a:4e:b2:57:70:82:c0:
                    8c:04:0d:6e:e7:ba:b3:3f:ce:53:8b:77:ae:d1:1b:
                    00:48:5a:91:0b:41:90:93:2f:7b:33:23:1f:5b:5a:
                    94:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4F:DF:C5:49:AF:CE:CB:17:FA:42:D2:BC:1D:91:72:93:3D:3B:31
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:dd:66:02:a7:08:90:0a:c8:2c:dd:d1:dc:fa:26:0b:65:69:
         18:a6:b1:c2:52:9d:4c:41:1c:fb:c6:99:e2:92:04:41:b4:02:
         93:42:ec:51:7f:6d:20:d9:fe:58:b7:c3:43:35:78:5e:8a:53:
         8e:84:8d:93:3b:15:da:21:29:05:3f:72:6f:4a:de:44:ad:a6:
         7a:0c:d7:c4:20:d8:70:18:d5:b8:d9:30:8e:54:29:a3:6a:50:
         7f:ce:a0:3a:84:7a:f8:28:78:87:17:10:b1:6f:46:29:70:49:
         40:e5:e6:25:67:30:04:0c:b3:38:0e:d3:3b:42:7e:f1:94:43:
         f1:f5:58:5d:e0:fe:d2:f7:05:e6:e7:90:50:66:1b:aa:3c:3e:
         80:d9:31:23:c5:b1:a0:4b:fb:f7:ca:8a:40:ed:af:6c:49:51:
         0e:63:90:e7:5f:5a:f6:40:aa:ae:54:67:51:94:31:7c:01:93:
         b5:5e:90:52:c4:07:d4:a3:12:60:97:7e:56:72:74:bb:da:9b:
         aa:ca:d2:5b:d1:56:b5:bf:da:da:74:00:13:3c:59:bd:f2:52:
         4c:14:e1:04:a0:d5:98:53:b7:78:40:76:4b:7c:4b:90:3a:0c:
         cf:f9:ef:29:0a:8f:42:3b:e3:14:81:32:f0:98:fc:d2:67:70:
         75:51:f3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:18 2025 by rpki-client