Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
File:                     xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json)
Hash identifier:          VXEBGSU3mNWMuYtZV5eduIo+051SAjYum0oY3XGFAxk=
Subject key identifier:   D8:38:4C:72:3A:BF:A8:75:BC:92:59:99:43:9A:15:CA:BE:27:9A:FD
Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A
Certificate issuer:       /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
Certificate serial:       0199FBEB7109E9EAE0FCC3373F0D87258827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
Manifest number:          0630
Signing time:             Sun 19 Oct 2025 10:02:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:14 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:14 +0000
Files and hashes:         1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=)
                          2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: j4wNuSD6wLsypwu+TVn1/P2w27Dc1i9p1zN+fKneNnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:71:09:e9:ea:e0:fc:c3:37:3f:0d:87:25:88:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a
        Validity
            Not Before: Oct 19 10:02:14 2025 GMT
            Not After : Oct 20 10:02:14 2025 GMT
        Subject: CN=d8384c723abfa875bc925999439a15cabe279afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:69:db:38:58:c5:3f:ec:96:3b:b2:9e:8b:74:
                    29:bb:32:cb:db:21:c2:51:73:59:ca:d5:a4:b8:4f:
                    e7:38:27:1d:35:d3:99:92:1c:ee:84:cd:be:e8:61:
                    cb:d2:d9:cc:d5:a2:14:50:7e:88:6f:59:74:c2:81:
                    dc:1d:a8:a7:ad:28:95:40:d9:58:a9:6a:c3:7a:48:
                    b2:89:ef:e0:72:82:ac:42:f6:03:ba:48:3a:37:0c:
                    83:64:65:d4:b3:f8:13:28:f6:14:b3:4a:c2:f7:76:
                    84:95:be:66:0b:7c:80:ca:dd:75:ff:49:bf:47:b0:
                    3d:61:58:d1:ca:54:4e:4a:03:e0:b4:5a:71:0b:41:
                    2c:49:5b:d6:f7:c1:47:d5:7c:ab:f9:ff:2c:12:1b:
                    e9:ff:a6:fc:d5:64:ee:3a:9c:0e:ad:4f:29:c7:2f:
                    94:50:a4:45:fa:0d:e2:c5:7e:05:90:1f:d0:40:61:
                    cf:11:7c:86:93:dc:02:9b:a6:f2:bb:39:de:fc:03:
                    f9:f7:1f:a6:8a:53:6f:fd:2b:68:b5:39:51:e8:d1:
                    97:e2:5a:1d:20:3d:49:16:4d:fd:49:e2:fe:6b:9c:
                    69:90:bc:61:05:df:5a:12:a1:e3:aa:8a:49:92:f2:
                    6b:40:5e:08:e3:6f:19:c0:6e:e8:0e:e8:6a:0b:cf:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:38:4C:72:3A:BF:A8:75:BC:92:59:99:43:9A:15:CA:BE:27:9A:FD
            X509v3 Authority Key Identifier:
                keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:37:a4:15:b2:80:01:80:f9:64:2c:22:69:81:d1:10:a7:9f:
         32:2e:d6:89:41:fa:ea:9e:65:49:09:78:67:ea:55:c4:47:56:
         57:a9:0a:86:b0:1f:26:59:22:be:06:d0:f8:9e:94:01:76:79:
         9f:fb:cc:74:62:e6:36:91:9c:d5:8f:dd:7f:ee:57:2d:2d:4b:
         92:79:c1:d0:e6:f4:da:45:8a:0a:d7:47:9f:91:82:7e:b6:51:
         c9:dc:23:b3:6b:86:09:ea:60:b7:ea:3f:1c:73:b2:58:2a:8c:
         92:17:97:2b:01:73:f0:78:4c:7a:9e:42:60:6c:95:d9:87:3f:
         8e:0b:5f:76:be:f7:7a:ec:e3:14:a0:8c:c9:a4:20:44:62:bc:
         b2:54:7c:a8:05:4c:59:26:91:56:5c:52:32:2c:92:bc:2c:24:
         56:40:4a:f8:3e:e0:16:1b:e9:64:3b:05:42:ad:3f:39:83:c7:
         3c:26:e3:ad:d6:70:7d:3f:50:ed:d8:b9:12:5b:1d:f2:0e:9f:
         a8:b8:be:c3:4a:78:dc:eb:6b:cd:9e:48:f1:cd:04:56:ae:8e:
         6a:51:a2:cd:5d:c8:57:fb:b5:0e:0a:00:72:98:30:f3:16:ba:
         a3:6a:57:57:d3:60:2d:1b:22:5e:25:fa:f0:88:b2:53:c3:62:
         97:5d:d3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:55 2025 by rpki-client