Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          zIyT6BEkFYAd3yZ2XmpuAWRpMpQSjs3QVlIRGwkzUjw=
Subject key identifier:   28:D0:CA:B1:50:D0:DA:E2:BD:70:C0:A7:35:2E:2A:54:D7:4A:E6:59
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       0199FC8FAD39C328045D96F66F0A54752816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          0F69
Signing time:             Sun 19 Oct 2025 13:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:38 +0000
Files and hashes:         1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
                          2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
                          3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: NPu2/snAn2K2v2NVzvRVNEJ4rc6iOAlPFZ+LwIWc0cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:ad:39:c3:28:04:5d:96:f6:6f:0a:54:75:28:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Oct 19 13:01:38 2025 GMT
            Not After : Oct 20 13:01:38 2025 GMT
        Subject: CN=28d0cab150d0dae2bd70c0a7352e2a54d74ae659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:77:42:df:41:8f:e9:b3:db:31:4e:6f:b1:
                    c7:5c:0c:56:c1:67:f7:0f:28:96:68:22:0b:a1:0a:
                    8f:d2:0c:0a:12:a5:00:ee:ea:a2:06:2a:98:aa:e1:
                    3d:1e:81:b9:3a:d8:4a:55:c5:38:df:73:6f:69:4d:
                    a3:2a:28:aa:1b:bd:60:9f:ec:de:80:d6:33:e8:68:
                    84:f4:9d:1c:62:0f:b6:cc:2d:20:0c:9b:63:5e:fd:
                    ca:5d:5f:4f:dc:c9:01:a9:df:29:fe:82:53:68:dd:
                    7d:63:34:2e:21:a6:41:9b:71:39:54:74:70:8e:c2:
                    23:bb:12:96:b6:93:74:51:c0:0c:e4:ee:f5:65:93:
                    e8:39:bd:94:bf:24:12:61:96:8d:46:8a:d3:ad:82:
                    2f:04:cf:08:7a:d7:0c:51:17:61:8e:49:3d:ff:b7:
                    a8:db:5a:29:f0:86:71:b8:29:57:9d:16:ca:66:3c:
                    5a:bf:14:db:dd:d0:cc:32:42:b4:7b:3a:06:f1:91:
                    d4:67:c4:46:3b:02:00:2f:f7:81:b4:64:4c:15:aa:
                    f5:74:11:81:db:d1:5b:3d:ac:7c:0e:d8:ac:0b:b8:
                    62:a5:ec:2b:91:ce:4c:68:92:c9:c1:e3:70:c1:95:
                    f7:9e:69:26:12:c7:63:91:06:24:3c:c7:63:9a:e3:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D0:CA:B1:50:D0:DA:E2:BD:70:C0:A7:35:2E:2A:54:D7:4A:E6:59
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:6e:c3:0b:8e:18:bf:32:b2:b9:05:a0:35:26:9c:b6:65:
         e8:4d:b5:76:5b:0f:f1:8b:28:3f:13:f7:3b:d0:f8:ea:47:fb:
         84:ce:61:54:94:04:bc:51:75:97:cd:d9:6e:a4:4c:bb:b5:f5:
         d0:e9:d6:27:65:52:7f:ae:11:25:a6:1f:00:ab:f7:10:2b:12:
         bd:72:dc:cf:1e:a4:d1:ed:08:6e:99:78:61:2d:15:f5:c7:40:
         a4:1f:5b:54:5d:01:d7:01:18:99:14:7e:6e:d8:ab:66:35:56:
         6d:ee:c1:f4:6f:86:ce:80:21:3f:98:e6:aa:05:da:a1:cd:e1:
         4b:38:ca:38:2f:d5:b7:26:28:57:5d:00:af:a5:e2:4d:04:27:
         20:93:e4:c8:25:53:7e:de:a6:b1:47:84:3b:6b:10:cf:85:c5:
         36:1b:83:cd:90:a0:03:46:56:a7:a1:89:2b:91:93:a6:30:92:
         9f:5f:11:8a:7c:28:17:5d:0f:cd:71:59:99:57:30:ef:60:87:
         8a:0f:74:c2:9f:9a:42:f8:da:1a:9e:b7:62:00:ca:13:c3:48:
         d4:d9:04:3c:d9:09:3e:14:94:4f:13:9d:4c:6f:fe:04:e5:2a:
         db:f7:23:07:79:9a:a4:9b:19:ac:05:98:70:17:9e:15:fc:a7:
         26:df:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:46 2025 by rpki-client