Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          cMIYH2Qe17qt6XjmYREujZT235OOv5oWxY0vmBBEFHM=
Subject key identifier:   28:2D:2C:01:DE:61:6C:5F:43:83:EF:A6:59:BD:0C:DF:E9:9E:B5:1D
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       0199FB458A584CB58699C2C7098D9AD2E7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          101D
Signing time:             Sun 19 Oct 2025 07:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:02 +0000
Files and hashes:         1: 20fHjC9bC6qDDeMiewApcaPTbCg.roa (hash: R/cESPp0hwn9gEfPxus2phTQiGzi40DoQQ+KimoeJ4I=)
                          2: 22lLDFU8nwc93-jfzNMpRH5sgrw.roa (hash: +NBjFjyK6WbMQY3zkQQYj9FPVF3OF9alYPIlrwi+mjY=)
                          3: 4-TMvOUidZ71CQ76gnKNOvLTQ9U.roa (hash: 0vbbhqiaDzTWpQRb4sXPCgzHyTU0SowfH7j/iajcMvI=)
                          4: 67f16VoktsMb0TGo3ZxLBjfcz4Y.roa (hash: n2ZVFQqZ0r56rs0BJjjR8hXNwGPxc3Zk28iS61MT+2k=)
                          5: IPImfFSLr48PnkrmzC6ajFmIFUc.roa (hash: LSFbNNnWrIkDZvjlyfjRLLzoDQQbky2pRfDTNEQe95c=)
                          6: OihnMqADYCl3o_f-cEn9z-d6QNU.roa (hash: h4mfAryNKMLZ+cLBNN9ToEHye+NJw4a1Xa8qSeqh6GA=)
                          7: S2lHpdEWr4mirz1oSpkE0KC76y0.roa (hash: h+wh+SL+iqQ3ZKWEdMW2CTCbGb/KIvrGbFf1yDqP0jU=)
                          8: _B8GwBiTFdIK4J8SxVFnKGjeQB4.roa (hash: Uz7SoPbGR/+GgXVRcIAynbR4wHfGxFEdNa8TRfSCHnE=)
                          9: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: NaNYWeDBYwSuZRWGV5gHqDLxArI1UjM3458az6od82Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:8a:58:4c:b5:86:99:c2:c7:09:8d:9a:d2:e7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Oct 19 07:01:02 2025 GMT
            Not After : Oct 20 07:01:02 2025 GMT
        Subject: CN=282d2c01de616c5f4383efa659bd0cdfe99eb51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0f:07:5b:0c:60:29:c7:61:8c:ae:6e:f3:88:
                    72:28:a1:6a:f9:f9:7b:d4:0f:11:48:4d:58:27:ef:
                    59:80:07:fb:d9:31:6b:fc:d3:0d:b9:da:2b:43:da:
                    a6:99:ea:f0:9c:15:33:5c:4e:2c:5d:bf:e9:f5:d0:
                    da:b1:b4:2c:8e:2f:c8:ab:8a:95:30:68:d5:14:b2:
                    2c:8c:26:41:39:58:4e:b4:ae:e2:98:0d:10:8a:fd:
                    3b:c6:6a:b5:db:e1:31:45:79:06:3f:89:10:e7:1a:
                    3b:5f:d7:7d:5b:b6:d1:34:83:20:68:37:e3:86:13:
                    92:82:2d:53:22:63:3e:08:46:0e:0f:c1:11:28:70:
                    9c:f6:70:b6:82:36:0a:80:b1:72:7b:2f:cb:7e:dd:
                    ca:84:28:cc:ff:58:6b:b1:a0:c8:d2:bb:cf:fc:3b:
                    84:76:67:e1:b1:f2:f6:21:b7:6d:3b:16:b5:95:70:
                    cc:e5:21:ef:c0:98:5c:a1:d6:32:5c:19:ee:0c:81:
                    4e:73:6e:0f:e0:4a:30:66:99:ce:fa:f3:f1:6b:79:
                    a1:03:f0:08:f8:34:9a:87:98:a8:dd:19:e9:56:6e:
                    ea:85:f1:78:58:ef:9a:c9:d6:ce:8f:85:8c:dd:f7:
                    0f:8b:b8:df:d1:8f:a3:6c:54:77:64:27:2c:a3:37:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:2C:01:DE:61:6C:5F:43:83:EF:A6:59:BD:0C:DF:E9:9E:B5:1D
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:02:61:d2:77:7d:ba:2e:2e:6e:61:83:bd:69:6f:93:d9:1f:
         74:ed:8b:94:48:7e:96:3b:df:87:ad:0a:5f:db:e8:d8:30:86:
         12:b6:c8:69:fc:90:16:0a:f1:77:4a:f3:ea:8a:d5:f3:60:78:
         86:22:f1:ee:40:52:52:01:64:95:fd:9b:d2:91:82:37:f7:f8:
         e8:86:73:74:90:2b:e3:5f:65:58:b0:85:b5:1d:3d:6d:16:a2:
         61:12:4c:d0:f2:f2:97:00:51:bd:b0:ed:c6:56:8b:3c:a7:70:
         00:02:a9:64:6c:0b:23:ce:e3:f6:bb:da:36:69:59:f1:6f:d6:
         53:66:55:35:da:95:e8:29:62:7b:6f:46:b6:39:c3:91:2c:93:
         85:0b:1d:ca:30:ef:57:1d:99:f5:8a:09:a7:d1:db:55:6b:a2:
         4e:f8:f7:e7:82:17:53:99:84:c1:1a:77:92:76:3e:f8:d0:fc:
         21:02:6d:7f:2e:9a:be:38:df:fc:51:b1:71:a7:ba:0f:bd:5b:
         f6:67:08:58:a8:32:b3:eb:c2:20:36:3e:9f:e7:1b:25:a3:a9:
         3e:ef:3f:37:b3:ed:f5:65:47:1e:8d:3c:4a:6a:3c:75:e3:a4:
         9e:e1:d0:61:f0:40:f0:da:71:3a:2c:9c:8f:f0:a0:0c:2b:42:
         b4:d4:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:42 2025 by rpki-client