Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          WXSbyogjzTTIhZB2ufBfWJCKqqDfk9/3Esh+UK75nyc=
Subject key identifier:   40:B4:F6:BB:44:EB:79:8C:1C:AA:6E:6A:F5:72:57:DC:25:DC:45:6A
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019A0290A5A86D7533BFBA5DA31A6C708549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 17:00:25 +0000
Manifest this update:     Mon 20 Oct 2025 17:00:25 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:25 +0000
Files and hashes:         1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: KGHVxxqIAuVYTxJHR8Mbyb6iWRW1kw12+1QZXjGbtyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:90:a5:a8:6d:75:33:bf:ba:5d:a3:1a:6c:70:85:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Oct 20 17:00:25 2025 GMT
            Not After : Oct 21 17:00:25 2025 GMT
        Subject: CN=40b4f6bb44eb798c1caa6e6af57257dc25dc456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:d0:3b:ed:0c:29:b4:b3:20:bb:bb:03:d3:
                    bb:f2:83:79:c8:b3:df:e3:39:12:3a:58:81:29:39:
                    da:bb:6f:12:37:f8:26:e0:ba:76:7d:d8:f5:b9:2b:
                    28:64:23:8e:d5:b6:95:49:1e:5a:d1:98:90:0c:8a:
                    fe:cd:90:af:27:3c:ff:2d:2f:b5:fc:09:c0:59:39:
                    3c:d7:38:6a:ac:f9:30:1a:26:2f:2f:56:59:d7:7c:
                    25:09:7f:22:3a:31:65:69:20:7e:8a:14:cb:da:62:
                    c4:1d:8f:f1:61:98:2b:e8:a8:04:90:34:8e:be:00:
                    68:b7:8c:57:80:d4:6c:b5:89:c4:98:93:5a:8e:d5:
                    05:21:e6:cf:16:a9:43:cd:d5:83:0f:0f:6b:d3:37:
                    4c:69:54:58:62:af:83:67:00:d0:3d:b1:53:64:64:
                    8a:bb:0b:d7:c7:d2:8c:51:d7:7f:d1:89:e8:fe:5c:
                    23:0b:29:a0:da:37:43:f7:35:68:49:04:ac:9a:b0:
                    aa:25:ad:36:8f:74:01:b2:a2:46:bd:23:f7:e6:e6:
                    4f:cb:c8:3b:c1:b0:66:7f:5a:d5:9f:7b:d7:e9:83:
                    d5:60:e8:e8:74:cc:67:87:ff:aa:d1:1e:ec:50:7d:
                    63:f2:98:ab:ad:99:36:b8:2f:9a:ab:0b:f5:ad:af:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:F6:BB:44:EB:79:8C:1C:AA:6E:6A:F5:72:57:DC:25:DC:45:6A
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:04:71:43:64:5e:87:5c:97:ff:07:8a:83:c8:d3:46:60:2c:
         e9:05:98:e1:6d:6e:50:96:6f:3a:b5:02:28:f6:2f:9a:20:fb:
         5f:93:73:60:4d:17:95:26:c4:0c:41:5e:0d:5f:fa:19:4f:29:
         da:6f:27:2c:a7:65:d5:e1:b8:60:35:ec:0c:a0:91:43:e0:b5:
         c6:2c:52:6e:7a:9b:c2:83:8b:12:4c:1e:7b:c1:b7:3e:e5:f6:
         a9:ff:d8:aa:a3:97:70:4a:97:14:f8:95:03:94:3b:3a:6c:8b:
         e2:31:0c:c0:8a:6d:7e:50:70:62:4f:55:76:db:3e:4a:d0:67:
         f0:db:01:40:c4:81:1a:f9:ac:2a:48:21:15:7e:dd:86:30:e9:
         4b:ac:b3:2b:da:68:8d:91:57:a8:8f:63:0c:a9:6a:e1:84:0c:
         8b:a8:8e:80:58:b0:60:35:d6:85:76:8f:4c:c5:a5:17:fd:5e:
         89:17:28:3e:b9:ff:f8:8b:59:2f:fb:10:77:e3:0b:27:3f:0b:
         f0:5b:97:40:3d:4a:0b:ff:39:6b:12:22:d3:2c:28:63:f7:2e:
         0d:1e:8b:68:b9:c4:35:64:8b:fa:16:c0:ab:8e:75:05:9b:ec:
         e7:61:ed:22:f0:81:b3:f5:1a:10:e4:99:40:1e:ed:75:c7:0a:
         88:48:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:48 2025 by rpki-client