Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File:                     CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier:          v4Jw9iKddyRbIgieuWof5PiWlviM0XGUjAavkNAVfZM=
Subject key identifier:   93:67:23:38:5A:E8:F3:6C:3F:C7:61:53:CB:F8:57:CE:74:AB:1C:9D
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer:       /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial:       0199FB0EF11B97150758234D77EEA6D09F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 06:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:24 +0000
Files and hashes:         1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
                          2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 8hX19cM01vbikDQnRPPV1l3XtyEBBQY0vlgzjS5Xgzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f1:1b:97:15:07:58:23:4d:77:ee:a6:d0:9f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
        Validity
            Not Before: Oct 19 06:01:24 2025 GMT
            Not After : Oct 20 06:01:24 2025 GMT
        Subject: CN=936723385ae8f36c3fc76153cbf857ce74ab1c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0b:e9:28:82:45:b1:ee:c0:ae:80:a7:de:ab:
                    06:10:fa:72:77:36:54:45:f5:1a:1d:3b:e8:8b:c6:
                    68:68:2e:8a:c6:83:86:01:49:72:bc:3f:d2:c4:6a:
                    d8:6e:ff:2c:5a:eb:3b:13:46:75:91:68:9c:ec:64:
                    53:e5:86:f9:a8:d3:15:ca:70:35:53:ae:82:bb:74:
                    eb:20:80:a7:41:4d:ce:c2:f8:3e:7c:03:2c:10:f1:
                    de:31:67:2f:03:a8:66:c8:c0:8b:3f:53:86:eb:95:
                    de:94:64:68:f6:68:8b:fb:a4:9d:6f:89:e8:bb:f6:
                    4b:84:6e:2b:f9:a2:be:61:10:49:f3:6e:4a:c4:10:
                    4b:34:2c:28:9e:1e:18:7f:1d:ba:2b:01:10:2a:ba:
                    74:3f:52:02:e4:ef:4c:56:21:1e:ab:99:5f:9f:f3:
                    72:60:db:63:e4:ad:8f:31:41:e4:d2:70:c3:2e:06:
                    27:c5:58:4d:d6:34:4d:b8:08:c7:7f:be:07:26:bc:
                    da:c1:50:77:36:55:bd:6e:0b:1b:c2:41:08:6a:35:
                    20:ef:5b:d4:9a:b4:0e:c8:c0:85:56:6f:06:92:dc:
                    e9:b9:3d:6b:c1:a3:33:70:e7:71:96:80:7e:f5:39:
                    c6:f7:ec:cd:53:12:72:6c:56:c1:2f:0f:3b:1f:25:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:67:23:38:5A:E8:F3:6C:3F:C7:61:53:CB:F8:57:CE:74:AB:1C:9D
            X509v3 Authority Key Identifier:
                keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:ef:e7:ef:8a:52:3a:2c:65:33:fa:88:f4:89:e9:63:c2:
         16:d8:63:93:01:4c:35:07:6d:5b:9b:54:0f:13:3a:c2:09:46:
         9e:4c:32:5f:db:77:bb:6f:8d:b9:6b:77:24:a7:aa:f5:76:23:
         38:9a:94:52:02:88:c5:47:8c:f1:82:9a:e1:5e:59:af:b1:cd:
         f6:f5:a6:78:0f:8c:70:f1:3c:1a:94:61:9a:63:43:84:1a:79:
         ff:06:1d:ed:dc:87:fd:89:e3:28:95:d0:09:05:10:ec:99:5e:
         e1:e7:5a:cb:74:37:e8:01:f7:3f:8b:a7:2f:c0:d8:5a:2d:b0:
         9d:fe:46:c6:ac:42:59:17:b1:53:0d:ec:33:2f:46:b3:c5:04:
         d8:cb:8f:de:dc:e9:95:84:46:7c:24:07:24:f4:e5:e8:de:2a:
         75:03:a0:81:af:9e:bc:d6:9a:29:f1:e2:53:af:22:20:65:51:
         5b:f1:24:3a:13:a7:17:a1:51:82:a1:85:f1:db:f6:58:08:a0:
         96:33:ae:20:8b:48:51:8d:6f:72:69:28:7d:78:a7:5e:3d:c7:
         c2:c8:bf:2d:7e:41:f4:dd:e5:bd:92:00:1e:d2:4a:27:81:ba:
         e8:7e:a4:f5:8e:4b:d7:12:d5:14:25:3c:e7:43:09:01:27:1c:
         ff:c7:3b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:23 2025 by rpki-client