Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File:                     k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier:          vpa0RiGhzv0t/QYBXBR3B7fkOVN8XaGY869Cny0nbvQ=
Subject key identifier:   1B:5B:F4:61:B8:1B:9B:3D:50:E0:18:A4:FF:D5:1E:A2:95:56:CC:DA
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer:       /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial:       0199FFC88F43CD1261FA483421EFD593F37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number:          0DF6
Signing time:             Mon 20 Oct 2025 04:02:37 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:37 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:37 +0000
Files and hashes:         1: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (hash: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=)
                          2: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: VLjWvJXtJmVuJ7CrcvB9KlLatruxaBXAa6h0Q62vDjc=)
                          3: uG74c7I0myUDPmZfaSmD4tc9rV4.roa (hash: gFdqnU7r/rSwGKvKSrZSTL5gnMsfd1TYUTvAqWItcO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:8f:43:cd:12:61:fa:48:34:21:ef:d5:93:f3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
        Validity
            Not Before: Oct 20 04:02:37 2025 GMT
            Not After : Oct 21 04:02:37 2025 GMT
        Subject: CN=1b5bf461b81b9b3d50e018a4ffd51ea29556ccda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:9f:f8:8b:d6:0a:25:af:c2:f2:c5:5b:11:
                    45:37:35:cb:a2:fc:d9:a4:01:d6:54:75:ab:9f:57:
                    4c:f6:ff:8c:d8:9e:6e:5c:ca:b6:30:38:1a:9a:f1:
                    69:73:6f:ed:31:a4:7f:31:09:04:38:58:09:4f:59:
                    e3:c3:7a:0a:c6:e1:73:8b:52:38:c7:3f:16:79:5d:
                    9b:c5:20:95:63:7f:a0:62:dc:dc:b1:fb:c1:c6:3d:
                    6e:7c:18:87:3a:c8:a6:94:68:0d:fd:47:72:98:05:
                    cb:09:ed:26:50:ac:89:d2:20:4c:d7:d6:aa:36:e1:
                    93:47:f1:5b:1d:58:ed:87:77:6b:c1:72:dc:a1:d2:
                    ae:da:5a:3c:a0:b6:65:d7:56:ce:a6:c0:2c:9b:7f:
                    c7:2e:a2:b7:f5:1d:21:bd:6e:86:93:5e:ee:e9:cc:
                    8b:29:81:0c:30:70:dc:58:14:96:21:2e:d7:65:5b:
                    47:5f:0b:11:3e:06:fa:3e:33:71:af:c5:08:33:9a:
                    61:f2:63:17:db:64:a9:0f:b8:98:84:b0:e3:e8:7a:
                    a5:9f:66:a5:e3:1e:44:98:05:a9:f5:3c:49:27:1f:
                    78:6b:89:32:30:85:29:ff:be:75:ff:83:2a:3e:f5:
                    3e:87:6b:fb:75:07:5d:69:7a:57:65:11:47:c0:ab:
                    b0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:F4:61:B8:1B:9B:3D:50:E0:18:A4:FF:D5:1E:A2:95:56:CC:DA
            X509v3 Authority Key Identifier:
                keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2d:ff:b1:9f:d1:95:13:24:69:78:7b:44:2d:c7:34:93:28:
         61:9a:7c:c6:6e:78:0b:d9:08:57:3f:1b:a7:82:e5:1d:ed:bd:
         a7:2b:11:cc:aa:32:60:67:95:0b:42:46:a6:1b:33:40:08:d4:
         24:8b:ac:67:b2:b9:e7:6b:d5:42:d9:1d:b2:db:22:18:24:9c:
         ad:77:6d:71:62:58:e8:15:dc:b0:90:4c:27:43:51:3c:6d:f7:
         08:bb:d5:47:b0:49:fc:0f:36:fb:eb:36:83:ff:c6:f5:69:02:
         cc:5c:06:e2:ea:42:cc:3a:cc:23:e6:1a:f7:73:49:5e:76:ba:
         d0:19:58:41:c7:9e:eb:06:e3:bf:0d:c1:22:87:b9:21:60:a9:
         d1:94:21:8a:de:e4:0a:4a:e9:5a:56:a5:f7:fd:95:bb:0f:c9:
         97:bd:ef:7f:74:1e:ae:43:e6:f3:bb:d0:84:59:2a:76:85:b0:
         08:06:f3:0b:4e:a2:e7:25:a2:d9:1b:95:99:6f:67:74:e2:d8:
         3d:a4:ce:3b:19:e7:ce:8d:d5:89:cb:a6:c7:e0:19:c2:f7:41:
         2d:d2:f6:20:fb:14:9f:6a:4e:7d:ce:a8:b9:45:5d:74:8d:da:
         8e:77:66:a7:03:e5:c8:ac:30:7b:b1:87:69:38:74:f8:8a:bc:
         d8:e6:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:30:59 2025 by rpki-client