Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          sOsWxXLgbQkXOjpg4jHQgt4xHLwG8iFDe6SwpHyrV/I=
Subject key identifier:   0F:F7:09:6E:76:93:70:35:5B:4C:2D:CC:37:85:75:DE:BC:50:8A:E9
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       0199FC21D22AC93F50A4F452475A89FE56B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 11:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:38 +0000
Files and hashes:         1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
                          2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
                          3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: ZQKS2aCInYlvcYlfXuLIAYgdsJLP/TQcygVBgAyvOYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:d2:2a:c9:3f:50:a4:f4:52:47:5a:89:fe:56:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Oct 19 11:01:38 2025 GMT
            Not After : Oct 20 11:01:38 2025 GMT
        Subject: CN=0ff7096e769370355b4c2dcc378575debc508ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:84:c8:92:96:84:dd:3c:14:31:d8:88:f1:
                    37:9d:af:42:57:9f:e4:55:36:e1:26:93:33:91:7f:
                    e5:ea:ab:c9:07:74:cf:6b:9f:7c:1a:f4:81:32:ee:
                    9d:51:ca:99:ec:37:a7:f0:46:d4:df:63:53:75:0a:
                    05:12:e6:31:4d:39:d0:83:d1:c5:88:73:ac:d2:95:
                    cb:93:bb:a2:62:c0:d5:85:ba:d8:99:69:cd:90:b3:
                    68:43:a0:13:6d:92:96:57:fe:b2:8e:87:de:81:e6:
                    4d:00:9e:37:cc:2e:6f:f2:f3:7b:5a:89:a5:9b:4b:
                    81:af:f0:16:e9:6c:61:28:85:b4:12:df:88:8e:91:
                    44:a1:13:ae:81:2e:50:1d:52:6a:bf:a4:4d:7b:a7:
                    77:fa:3c:b8:32:f5:32:48:41:a8:33:26:45:8c:3c:
                    32:bc:cb:1f:8e:17:4b:82:5e:4f:6e:67:78:87:44:
                    25:9c:95:7d:87:87:df:c5:76:61:8b:16:cc:61:90:
                    43:d9:fb:c7:9f:fa:fc:ea:44:08:3e:3d:2f:d0:0c:
                    1f:e6:b8:4b:84:29:7f:75:43:5f:7c:49:09:00:57:
                    6b:96:c7:c2:d2:9c:a3:ba:f6:92:12:59:16:9e:b3:
                    17:79:ac:d5:fe:92:4e:90:cf:7d:c6:3b:7f:9c:d2:
                    79:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F7:09:6E:76:93:70:35:5B:4C:2D:CC:37:85:75:DE:BC:50:8A:E9
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:cc:1c:73:25:1c:1d:ce:90:ea:4a:84:a2:bd:eb:98:b3:
         cc:54:3c:ff:2f:3f:24:bb:cb:3e:a4:76:04:41:17:8e:f2:06:
         4b:69:8f:25:38:a3:6e:50:17:11:6f:7e:4c:72:cc:9c:55:8d:
         be:c7:55:b3:01:52:ec:22:d7:6d:1b:c9:10:6d:0e:45:86:b8:
         be:00:92:ce:78:d8:0e:5d:38:db:78:1d:08:8f:b8:fc:3d:b3:
         36:ef:51:7a:fa:50:9b:a0:0c:48:dd:e0:e3:f2:0b:a3:dc:20:
         12:eb:97:5e:cb:47:4d:a2:ae:71:a2:79:be:f1:db:a1:72:3e:
         31:02:7e:eb:8e:7d:e4:4c:d6:44:c4:ae:8a:cb:2d:11:07:b1:
         74:a2:2c:f8:35:ac:c2:14:d7:b3:5d:4d:78:5f:03:3f:f5:45:
         cb:e4:31:a9:fc:79:86:46:c9:95:89:9a:88:8f:bf:a5:51:f5:
         bc:1f:93:72:7d:91:d0:44:a0:b5:ef:10:02:d1:78:63:26:31:
         28:ad:cc:35:d1:79:a6:36:02:28:a7:db:38:1f:1a:a0:18:b4:
         55:eb:0b:36:73:7c:a9:69:0d:d3:1a:11:d5:74:16:be:6c:e2:
         dc:a3:df:96:03:8e:74:73:42:97:69:d7:02:df:aa:63:f5:df:
         c4:d1:92:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:30 2025 by rpki-client