Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          PoV42AdJF5Mq/kMUYdFNg1IQFdEekz23YMxAAEEYRzA=
Subject key identifier:   86:FE:5B:08:8D:F2:D2:82:7D:0E:DD:10:3B:3E:B7:B5:5A:99:A7:3C
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       0199FC8F7A7B7EBB581760224CF993F5B4F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0CF1
Signing time:             Sun 19 Oct 2025 13:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:25 +0000
Files and hashes:         1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
                          2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
                          3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
                          4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: vJxZQdoTINc22Sozysnk3Qd4GmfM9ixjgPjSMJSCyBA=)
                          5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:7a:7b:7e:bb:58:17:60:22:4c:f9:93:f5:b4:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Oct 19 13:01:25 2025 GMT
            Not After : Oct 20 13:01:25 2025 GMT
        Subject: CN=86fe5b088df2d2827d0edd103b3eb7b55a99a73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:71:1c:47:b9:36:87:63:a8:61:5b:2c:dd:7c:
                    cc:3a:79:c5:aa:94:39:44:9f:fc:80:b6:24:92:8a:
                    d7:7a:38:ba:d3:85:3f:7b:c0:8d:0c:de:4d:15:78:
                    06:16:c1:b6:0a:54:65:37:d7:16:a9:33:df:f5:5c:
                    7f:0a:85:1f:1b:0c:5b:1f:4c:41:38:20:12:4e:d3:
                    e5:7f:aa:89:14:32:dd:96:43:bf:42:7d:54:48:9c:
                    bc:ea:8b:b9:82:6f:67:c9:98:a0:9d:b7:d6:e6:a9:
                    ef:1c:0d:f2:e1:30:8f:99:20:6a:56:e0:dd:39:7c:
                    24:3a:f7:6a:3c:d0:00:4d:8c:98:cf:52:3e:f7:24:
                    68:9d:18:87:72:5d:54:a4:ab:52:54:03:99:8e:52:
                    5f:72:aa:bc:44:8e:c6:26:f0:c5:bd:c8:45:26:79:
                    c0:a3:c3:e6:0a:d5:d1:e4:56:d6:f6:45:ad:8e:04:
                    d1:62:56:c7:5e:4a:ad:c0:8c:99:7b:22:ee:8c:1c:
                    0f:6d:19:1a:e6:50:a9:07:cf:88:08:fb:54:a1:20:
                    41:5e:01:a8:a9:da:5f:f3:30:30:df:c7:a8:29:c1:
                    d6:6e:6d:fa:47:52:3e:18:25:bf:2c:8a:64:3f:96:
                    e6:8d:09:9e:81:7f:59:d1:82:4a:cd:2b:f0:7f:0d:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:5B:08:8D:F2:D2:82:7D:0E:DD:10:3B:3E:B7:B5:5A:99:A7:3C
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:53:0a:4d:8c:4e:31:2b:c8:22:3f:9f:45:06:6d:db:af:43:
         a8:3c:cd:6a:32:28:33:56:e2:e6:6a:b4:fa:a3:7b:4b:5c:81:
         2d:30:79:48:c9:4e:aa:ce:0d:d9:80:ed:76:f7:c0:6c:f0:67:
         9e:b8:a0:c5:eb:2f:2a:08:2e:76:70:8a:75:09:a8:5b:a0:6b:
         10:57:89:fc:4a:00:f5:64:f7:4c:9a:15:76:67:ae:b8:84:f6:
         2c:ed:36:ba:0b:bf:57:d0:3b:e8:1d:6e:d0:a0:8b:75:2f:9e:
         d5:40:1b:11:40:fe:f7:e0:67:b4:02:8f:a5:f3:da:a8:58:7c:
         60:22:f2:98:01:b5:f1:ea:07:cb:00:d3:a8:9e:1e:d3:bc:08:
         e9:b5:94:50:c3:25:70:7d:92:ed:18:b5:5e:35:71:90:83:4e:
         86:2f:5d:d1:f7:4b:22:7b:e1:36:79:e1:4b:e9:ef:df:d4:45:
         a5:3a:bb:ab:26:cc:74:f4:8e:ef:af:d9:4b:e0:4c:d5:99:6c:
         d1:bc:40:ce:05:07:f5:da:60:63:95:5e:9a:7b:8a:73:3b:38:
         3a:31:a7:05:c3:a6:94:21:c8:0d:23:74:f8:70:ab:fd:e2:fc:
         27:26:7a:c6:a7:f9:df:cb:d4:3e:fb:5d:d2:2c:ad:cf:a2:89:
         42:98:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:58 2025 by rpki-client