Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
File:                     vRkRNDImIp0gPqMmqdadT8NGxXU.mft (raw, json)
Hash identifier:          h4D7mD8J2rYRMblYKTh6Zc3Ort30TtW8h1BkyH4PoIA=
Subject key identifier:   B4:E5:CC:E9:83:83:43:AB:F7:E0:97:8E:C4:96:8E:75:2B:09:F0:77
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Certificate issuer:       /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial:       0199FD3491BB033CAFE32A33F593DF5E431E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
Manifest number:          0B1C
Signing time:             Sun 19 Oct 2025 16:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:44 +0000
Files and hashes:         1: 8vm_891vteHi79TbQnGkI8cOQqI.roa (hash: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=)
                          2: vRkRNDImIp0gPqMmqdadT8NGxXU.crl (hash: jGeYHmXrAWD+kUZDzCd1Vn7HevrvosguSt0OwIuftkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:91:bb:03:3c:af:e3:2a:33:f5:93:df:5e:43:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
        Validity
            Not Before: Oct 19 16:01:44 2025 GMT
            Not After : Oct 20 16:01:44 2025 GMT
        Subject: CN=b4e5cce9838343abf7e0978ec4968e752b09f077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:f9:87:50:09:c7:8e:60:96:2c:c2:67:3a:
                    bc:0c:f6:07:af:9c:fd:ee:2f:69:5c:d2:c2:ac:c0:
                    0a:d8:00:fe:b8:7f:a8:a6:0a:39:da:4c:d2:8c:aa:
                    ef:da:96:f7:33:53:28:f6:e4:3b:3a:a9:96:7d:a2:
                    87:bc:eb:fb:c9:2a:79:8b:f5:84:56:65:18:f7:fe:
                    ff:1b:1f:62:f1:ff:87:09:f2:88:f5:d1:4d:55:07:
                    e1:82:91:0a:0b:b2:21:14:5f:03:d4:e9:f5:fd:67:
                    3e:bc:2f:c0:46:a4:41:61:10:ab:57:2a:69:cd:e1:
                    5d:50:13:1a:ca:51:58:e4:0e:4c:b7:dd:c0:18:62:
                    7c:5d:01:c5:03:e3:4a:c8:e0:d5:ce:65:60:d6:b4:
                    8a:b5:52:ee:1f:88:36:78:d3:63:ea:e0:6f:21:68:
                    56:2b:72:a0:90:45:2a:d2:46:5b:e7:49:d2:b0:c8:
                    49:b9:c0:3e:56:6b:8e:49:46:cb:54:f3:55:9c:cc:
                    82:c6:96:9f:e7:84:58:5b:d0:79:06:6b:d6:51:3b:
                    82:3c:66:98:28:6c:02:f1:39:09:d6:76:dd:1b:98:
                    68:59:99:a4:bd:be:bd:61:5b:c7:be:68:9e:e0:0d:
                    ae:6c:a7:da:06:04:7a:1f:ba:f5:c9:0a:11:a9:33:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E5:CC:E9:83:83:43:AB:F7:E0:97:8E:C4:96:8E:75:2B:09:F0:77
            X509v3 Authority Key Identifier:
                keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5c:2f:b5:0b:ba:0a:26:de:8c:0c:4f:79:07:37:c5:1b:42:
         f7:06:eb:7c:38:7c:f4:a7:1a:d2:3a:60:89:ed:72:26:ae:77:
         95:a4:88:68:c8:a2:61:89:7a:12:7d:0a:4d:ae:bb:2a:14:cd:
         fe:c9:4e:3a:04:fa:81:07:cc:22:6a:d8:f6:4d:06:8d:e4:d6:
         63:eb:a5:15:12:5b:3a:1a:85:25:10:cc:b7:95:6b:e0:57:13:
         67:d8:16:b9:98:dc:4c:0e:39:bc:c4:99:8c:0e:4c:04:13:83:
         29:8c:d9:33:58:c1:f2:78:8f:a7:3f:e3:64:fa:92:ef:33:49:
         b0:9a:33:8f:d1:51:d9:92:d5:57:7c:43:58:47:0a:24:20:06:
         2e:c9:bb:48:96:83:05:7c:68:25:58:fa:63:61:f2:1e:83:cf:
         6d:79:53:9d:c8:41:7b:4a:f2:78:76:ed:1f:8a:ff:df:82:b1:
         f7:24:13:88:3f:6f:77:db:45:b3:2f:1c:4d:41:95:38:87:f4:
         2d:c2:ff:94:b6:f6:76:a2:ed:04:f8:0b:f1:05:20:64:21:bf:
         c6:c1:b2:6f:de:b8:20:86:ba:f9:ba:d9:f7:e4:b5:56:57:34:
         5b:f5:d8:60:40:78:c4:44:21:f4:18:83:24:4e:c0:99:f3:a8:
         7d:4f:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:25 2025 by rpki-client