Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
File:                     pKB83NCVA-z-Pml8wyZphRga6Co.mft (raw, json)
Hash identifier:          XP2bA49BiuL4oiCyZR+dav/4d8KqXFxPyomxpa3fBA8=
Subject key identifier:   07:55:D9:18:4B:A7:DC:CD:C5:76:FD:E8:A9:EB:D8:AA:EE:D0:E4:59
Authority key identifier: A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A
Certificate issuer:       /CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
Certificate serial:       0199FAD83F8708B5F82C51907D0823926219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
Manifest number:          1383
Signing time:             Sun 19 Oct 2025 05:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:39 +0000
Files and hashes:         1: Hp2ljcULzg53pBCXbKt3KAlFkVw.roa (hash: qsDz5TZedLiWJnxlNWk1Ko36qqmg6+ybGLmJSNA11KU=)
                          2: pKB83NCVA-z-Pml8wyZphRga6Co.crl (hash: z3AuGXlopAUHKel3qz6q5fG39KCn1ZV/LMelLmYA8FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:3f:87:08:b5:f8:2c:51:90:7d:08:23:92:62:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a07cdcd09503ecfe3e697cc3266985181ae82a
        Validity
            Not Before: Oct 19 05:01:39 2025 GMT
            Not After : Oct 20 05:01:39 2025 GMT
        Subject: CN=0755d9184ba7dccdc576fde8a9ebd8aaeed0e459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:b7:fa:0b:84:e6:ef:5a:f9:ea:28:ee:ba:
                    14:2d:2b:13:9b:0f:8d:de:ae:b6:4e:6d:67:8b:94:
                    d1:87:63:1b:5b:14:c1:fa:88:d4:a6:95:3e:41:8d:
                    32:f0:07:13:8b:ce:cb:4e:94:8d:16:bc:85:f5:5a:
                    0c:f7:2f:d7:9e:9d:3f:4e:c9:89:73:54:76:c3:fb:
                    52:44:86:84:31:4f:87:8b:78:5e:f5:65:9d:95:5d:
                    38:ac:4e:28:7d:aa:e3:29:88:7b:85:0d:3d:80:94:
                    d4:54:f4:bd:30:4c:5f:d9:67:8f:47:25:50:c0:fe:
                    4e:1f:88:d7:6d:87:00:7a:3f:6a:29:72:fb:bb:15:
                    c1:fd:f1:06:9d:0a:c6:68:33:48:f0:4d:ec:5e:23:
                    33:e5:c9:17:59:ff:5f:3c:68:b1:7e:6c:db:6e:c3:
                    fa:8e:3e:31:93:79:0c:30:ef:70:32:33:0e:e0:e8:
                    96:57:62:5e:73:99:6d:da:70:0e:48:ee:9e:94:06:
                    2d:80:b8:1d:00:92:b3:13:d5:3b:eb:c4:28:8d:b7:
                    c8:9e:ea:41:80:42:91:1a:78:28:2e:50:b7:35:23:
                    85:50:b5:ec:ab:e0:e6:7c:15:44:94:3f:20:4c:03:
                    e2:21:c4:e9:07:f6:21:d6:e7:22:7b:a6:2d:81:db:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:D9:18:4B:A7:DC:CD:C5:76:FD:E8:A9:EB:D8:AA:EE:D0:E4:59
            X509v3 Authority Key Identifier:
                keyid:A4:A0:7C:DC:D0:95:03:EC:FE:3E:69:7C:C3:26:69:85:18:1A:E8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKB83NCVA-z-Pml8wyZphRga6Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d8548c-30b1-48a4-ae28-d6b0bc90f2f5/1/pKB83NCVA-z-Pml8wyZphRga6Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:b6:2e:21:b4:9b:66:d2:42:18:bd:a5:29:db:09:98:a8:07:
         37:a3:11:34:4a:b3:8d:3e:7d:11:be:8a:23:46:df:e8:5a:11:
         8a:82:18:8f:4e:c9:19:58:05:10:e5:92:04:70:f5:dc:d6:c3:
         7b:1c:76:44:19:78:f8:b4:58:66:27:19:5a:5b:e1:72:c4:d1:
         75:08:9e:d9:e8:e3:33:ab:ac:b4:99:51:2d:99:91:fa:d0:d8:
         ae:7c:4d:dc:a4:1e:99:d6:f7:da:22:26:2e:fd:d6:ba:26:0e:
         49:86:e8:bc:3c:6b:1d:1c:25:b8:6b:4b:db:ec:69:d6:d1:43:
         cf:d4:cc:3d:af:d6:e5:dd:98:df:f2:0c:d6:db:06:e0:ab:53:
         73:4d:0b:04:8e:6c:c2:53:64:fe:ec:aa:8c:e0:ef:c4:3a:68:
         bb:74:f4:ee:36:02:e0:91:79:e0:87:d9:74:64:f8:51:59:11:
         c1:7c:1f:8c:ef:37:aa:11:94:36:e7:34:af:64:61:fc:89:be:
         4d:3d:fb:23:32:fc:a3:b0:e2:92:46:49:57:52:7c:d1:a1:b7:
         16:53:7a:ff:bb:6b:67:27:26:e4:5d:5f:e5:31:41:57:16:18:
         88:27:e8:0a:4d:42:80:f5:54:f8:d5:ed:ac:63:d8:37:8c:58:
         3c:f3:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:09 2025 by rpki-client