Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File:                     vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier:          LsbWw5oXPekkC1grbdgRzbhvziCNE3QWXkdSkbm8jhw=
Subject key identifier:   AE:C9:E9:23:E7:13:18:15:D1:8E:DE:7B:C6:60:78:9D:91:B4:64:5E
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer:       /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial:       0199FAD834E076443CE2E791CFBBEAD840E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number:          0639
Signing time:             Sun 19 Oct 2025 05:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:37 +0000
Files and hashes:         1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=)
                          2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: 7Vcmv1pYTn7expH9L0cHg6fWFQ50A3RkRQCGSZ0zTHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:34:e0:76:44:3c:e2:e7:91:cf:bb:ea:d8:40:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
        Validity
            Not Before: Oct 19 05:01:37 2025 GMT
            Not After : Oct 20 05:01:37 2025 GMT
        Subject: CN=aec9e923e7131815d18ede7bc660789d91b4645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ed:dd:77:a0:fc:ff:d2:9b:f9:3a:48:3c:09:
                    49:cd:46:df:38:7b:67:c4:43:dc:9b:95:a1:6d:41:
                    af:d6:c6:fb:56:84:52:2d:7a:a8:3d:ed:f0:02:aa:
                    7a:02:b9:a8:6a:bb:8c:ad:9b:45:ca:12:c4:12:d2:
                    a0:12:3d:13:08:29:e2:16:17:b0:52:29:ef:a3:0f:
                    75:1a:c2:84:c0:18:ea:97:5c:fe:f6:ad:a2:ce:80:
                    5e:2f:b3:59:51:6d:47:2f:0a:52:df:a1:3d:89:fe:
                    20:94:c1:c7:40:b9:ec:b3:68:73:26:fa:92:86:7d:
                    47:50:93:3e:9f:cb:71:98:f1:b4:3c:83:20:14:33:
                    f4:0b:e6:b6:0d:b0:25:9b:31:d2:d8:cc:3f:5e:8a:
                    71:fa:e6:d7:36:5b:18:c4:22:e3:ec:40:7f:5f:27:
                    88:fc:00:32:41:4e:33:11:f1:cf:73:3b:0b:f2:32:
                    d2:6b:3c:07:c7:cb:40:f1:69:0e:63:85:d5:39:5b:
                    f9:1c:7f:bc:45:24:c2:e1:33:4c:ca:aa:5f:f4:5d:
                    9c:12:5f:2e:ca:30:e1:85:0b:fc:f9:cd:1e:e1:bc:
                    2c:48:2c:87:9b:66:38:30:7c:f0:ab:ed:f9:3d:1e:
                    52:81:3a:a1:50:cc:ff:fc:25:cd:8f:3f:1c:ba:03:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C9:E9:23:E7:13:18:15:D1:8E:DE:7B:C6:60:78:9D:91:B4:64:5E
            X509v3 Authority Key Identifier:
                keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:76:0d:fe:c3:cb:1c:1f:d4:a0:6b:2e:7d:eb:5d:8e:fb:87:
         01:eb:32:78:80:b9:d3:01:7f:91:2b:68:f9:0e:17:cf:46:3f:
         27:4a:85:e0:2a:fb:7d:66:ed:67:d5:53:3c:62:a8:58:8a:70:
         e4:39:cc:ba:25:5d:65:0e:00:94:5a:da:05:7a:1d:d4:3e:c3:
         7a:1a:b6:e1:d0:db:a2:00:87:8f:b4:67:19:ce:f7:4b:31:eb:
         40:af:fb:2a:92:c6:1b:b0:bc:a8:e8:0e:1b:81:d4:fc:f4:d1:
         82:01:d1:f9:03:5f:0b:e4:42:56:63:5b:7e:95:9f:10:e8:57:
         ae:5e:dc:27:aa:17:a6:76:0b:01:7c:83:4e:6b:b8:88:50:d0:
         cd:cf:46:62:29:37:28:a6:e5:af:dd:ea:13:e5:0f:68:d5:9f:
         f6:a5:17:78:ee:de:c7:df:1a:bb:d4:b1:ce:be:de:42:f3:ed:
         fd:79:5b:db:eb:8b:a6:3f:91:07:07:57:22:d5:df:aa:af:c8:
         35:f8:e1:2a:fa:10:6d:c9:44:3f:13:a4:ee:d1:4b:71:23:a9:
         0b:4a:38:65:a4:68:ac:d2:d2:30:19:1d:33:24:35:69:04:af:
         99:f9:5b:43:ed:5d:ff:01:fc:43:db:fb:ca:00:5c:d2:a4:5e:
         e5:c3:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:47 2025 by rpki-client