Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          CDlyqd7TIkzswAWrRDyH5IOY79A1ouC0iT0NUZXcMzI=
Subject key identifier:   C2:C3:94:1C:0E:56:35:72:14:6A:4F:E0:53:27:B0:8C:E3:5E:A4:A1
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       0199FB7C726E77E6B982B3E0B3FE5ABFDB73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 08:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:00 +0000
Files and hashes:         1: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
                          2: VJMTsLB0DoA7dIhG-PlGlwqEhfg.roa (hash: zqcr9YUGQTYEQLg2JeQTvIegn0/uHC3qCTzqhOaEtjE=)
                          3: fyx1ny3-_FInDq0dmTByBfBn0j8.roa (hash: oB7Zx3DOWzJhigoLM671xc6bT3MSHf/pGnlfM7WSuvs=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: dLZB6aPx2LdnsyeHCWiFWFSjJT9scUSGBumWD5VrKTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:72:6e:77:e6:b9:82:b3:e0:b3:fe:5a:bf:db:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Oct 19 08:01:00 2025 GMT
            Not After : Oct 20 08:01:00 2025 GMT
        Subject: CN=c2c3941c0e563572146a4fe05327b08ce35ea4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:1a:e2:83:a4:90:3e:a8:ac:30:62:93:92:
                    7d:6a:9f:63:57:9c:5a:9d:2d:b1:57:81:81:99:0a:
                    ab:e0:ed:ff:f2:7f:ae:c4:5b:b6:6d:f7:8c:5c:0f:
                    04:d1:98:a3:53:e7:52:9b:42:93:e2:32:e9:6f:d8:
                    be:73:54:f2:38:46:a4:9a:34:eb:ad:f0:4c:16:4e:
                    c5:91:f7:d1:d4:fc:7e:30:7a:9e:02:4d:b7:73:4a:
                    a3:af:b9:b9:cc:95:15:83:68:13:60:97:86:f5:5b:
                    54:88:23:2d:57:79:b2:db:a0:59:8f:40:c5:7c:7e:
                    db:31:82:cc:4a:dc:20:74:a5:39:c0:85:09:17:3e:
                    b2:d0:0a:c9:c7:2f:da:af:63:6d:11:29:f3:fc:4e:
                    cd:07:46:9a:cd:3d:11:c9:2e:6e:d9:2b:2e:3f:5f:
                    97:a6:24:08:de:4b:09:8b:f9:f4:51:cd:6d:c0:7e:
                    1a:42:18:77:52:e2:2e:69:b0:b3:a3:e1:65:ff:73:
                    2d:3c:4e:de:1c:79:f5:14:76:0d:9f:e4:03:8b:25:
                    8e:e5:ec:69:aa:0a:f9:27:87:67:56:97:11:89:39:
                    92:c9:bd:d0:fd:25:76:7e:c0:d5:9a:d3:c6:12:d2:
                    81:72:90:08:af:24:e3:a5:13:d2:b3:3d:f8:72:5e:
                    54:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C3:94:1C:0E:56:35:72:14:6A:4F:E0:53:27:B0:8C:E3:5E:A4:A1
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e4:8f:1f:ed:ff:db:11:ea:4e:39:e1:cf:1c:69:30:a5:54:
         b0:e5:d2:51:72:ed:a6:ed:db:56:e1:c4:75:96:28:a0:3e:99:
         dc:9a:21:bf:aa:f6:d0:c3:1f:09:b7:ae:35:47:13:09:40:1d:
         55:fa:33:63:54:84:2a:11:30:45:8c:19:61:b7:96:cc:fe:6f:
         3c:04:1b:19:36:6a:65:c5:83:40:64:7e:04:f7:1b:b6:74:f3:
         b6:5a:38:d6:63:44:c9:73:08:ef:94:91:81:dc:d2:fa:0a:05:
         f2:38:f6:d1:1a:32:29:67:c3:cf:fb:db:7f:ce:e6:78:c3:c6:
         a7:20:7d:73:aa:77:93:43:e6:43:15:b5:a5:06:be:86:4d:c9:
         b6:08:4b:d9:87:6d:be:b5:76:7a:1e:0c:03:1b:6a:1e:5e:ac:
         1f:aa:58:97:6e:1d:5a:84:67:10:c0:9c:24:8d:96:89:a2:0d:
         55:18:02:a8:20:fb:78:75:4d:f0:21:e6:1a:bf:69:fe:28:c4:
         12:f4:81:e5:64:7a:69:a6:09:23:c7:1a:4a:f3:e7:db:d4:8d:
         f8:51:13:de:74:4c:ca:a5:71:47:f3:8a:bc:6d:98:13:b5:03:
         63:cc:1e:36:dc:af:2b:af:45:96:74:b6:5b:e6:51:dd:fc:17:
         e7:41:d0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:56 2025 by rpki-client