Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
File:                     V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json)
Hash identifier:          uMlW7sySZZDMV2Tip0kF51JmVvr1A1oWkSPTrMTV3z4=
Subject key identifier:   EA:79:8E:65:F2:0C:B9:C9:B2:B7:9F:15:EE:23:8B:15:E9:5B:16:65
Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E
Certificate issuer:       /CN=57d993319dcc9297694318b246eb36f55ff1370e
Certificate serial:       0199FB7C79D9163EB2AB25D5A684E3322E25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
Manifest number:          10D5
Signing time:             Sun 19 Oct 2025 08:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:02 +0000
Files and hashes:         1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: xpnei6hIZbi9GOgVUVtWzMb+q3by0Y/65i7YJScbXBw=)
                          2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:79:d9:16:3e:b2:ab:25:d5:a6:84:e3:32:2e:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e
        Validity
            Not Before: Oct 19 08:01:02 2025 GMT
            Not After : Oct 20 08:01:02 2025 GMT
        Subject: CN=ea798e65f20cb9c9b2b79f15ee238b15e95b1665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:4f:f5:af:2c:15:9e:cb:cb:90:9b:4b:6e:
                    dc:2b:ff:8a:15:e3:1f:cb:92:68:f7:82:63:ea:5f:
                    2a:b0:74:38:36:f7:21:75:fd:02:6e:bf:ab:1c:7f:
                    a1:63:d1:c0:87:74:5b:2a:be:22:cd:c3:5d:b9:5c:
                    c6:99:b7:37:8e:f0:91:fd:da:4c:67:4f:07:35:b5:
                    a5:46:c4:bd:75:cf:02:2d:fb:1f:51:33:87:bf:2b:
                    47:da:3d:f9:4b:bc:0d:3f:35:87:4d:2a:0e:c6:b6:
                    22:eb:e7:8d:d2:a0:34:18:66:63:0e:b4:42:4e:24:
                    75:21:09:57:1a:c8:0c:eb:19:91:d6:bd:f0:e0:cc:
                    66:a6:c5:ba:3d:04:fb:44:88:6f:e3:c3:a6:0d:c7:
                    f7:c9:82:8d:09:3a:cd:6e:08:c3:7b:95:91:b4:07:
                    5e:5c:ec:93:f1:74:d0:65:e4:46:ba:b4:b9:a5:a5:
                    93:98:bd:ee:45:76:cd:27:f3:a7:e0:07:32:6f:0b:
                    f9:5e:be:41:a4:41:7b:7a:87:42:db:79:9d:99:7d:
                    c1:0e:bf:9f:a0:b7:f1:7a:16:b7:f8:a8:d7:7f:e3:
                    a5:ec:aa:51:cf:cb:04:2b:9c:1d:5d:7b:72:5c:c7:
                    7d:7e:54:46:a3:55:22:16:98:74:c0:23:d7:a4:b5:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:79:8E:65:F2:0C:B9:C9:B2:B7:9F:15:EE:23:8B:15:E9:5B:16:65
            X509v3 Authority Key Identifier:
                keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5d:f2:31:36:3d:5d:42:1b:ed:86:95:ce:01:06:1d:13:7e:
         f7:47:81:bb:13:fc:16:cd:86:7c:85:0c:83:4a:d2:a3:e1:43:
         0b:1e:65:f5:62:f8:13:f9:0c:e1:9e:a3:4f:71:42:d7:a7:bf:
         a4:35:b8:6e:00:b9:a7:07:37:d1:9c:09:e8:12:d4:1e:c9:28:
         cd:97:4b:8c:0f:92:56:dd:0f:f8:c3:3f:42:ff:7b:fd:ba:0f:
         05:63:96:7f:0f:39:fa:55:f4:29:51:70:87:b1:fd:b5:e1:d8:
         05:02:3e:17:de:95:56:d6:4a:e3:9f:59:63:ba:97:ee:5e:10:
         07:e1:39:42:46:2c:b6:10:1d:f6:6b:d8:88:c4:89:8c:2c:c5:
         cd:09:d8:2e:54:de:79:3d:ab:f7:81:eb:70:bb:2b:4a:ed:5d:
         c1:1f:47:09:eb:2b:43:e9:1e:46:de:05:e6:a1:03:02:15:51:
         30:58:16:c6:4f:d3:de:8a:bf:1c:61:12:da:c9:a4:32:88:7b:
         74:10:6c:6b:77:c7:1e:ab:e8:ac:30:10:e5:78:c5:99:e8:ad:
         78:14:61:36:43:9d:55:00:18:04:27:34:d7:f1:78:2b:2c:b6:
         0f:c3:f2:5d:d0:3c:77:6f:7e:27:67:c8:51:24:c5:26:e9:ae:
         1f:3d:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:49 2025 by rpki-client