Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File:                     vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier:          I15Q2FGBMVa5feNtHI8R48KtJ7qYBNMGZfvTAyEJqXE=
Subject key identifier:   19:6F:AD:28:98:E4:25:F2:33:06:3C:9C:6B:55:22:C9:AC:88:22:6A
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer:       /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial:       019A00DA6498439A71243823C419679D2D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number:          0483
Signing time:             Mon 20 Oct 2025 09:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:43 +0000
Files and hashes:         1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
                          2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: wLGZul3YDm7i+LF5wmS0oUtGoSXCQClpxbBn8Z9gmZw=)
                          3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:64:98:43:9a:71:24:38:23:c4:19:67:9d:2d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
        Validity
            Not Before: Oct 20 09:01:43 2025 GMT
            Not After : Oct 21 09:01:43 2025 GMT
        Subject: CN=196fad2898e425f233063c9c6b5522c9ac88226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:04:b5:46:3a:3b:7b:a1:7b:16:49:18:46:
                    f6:99:67:84:10:3a:8f:b7:8d:3d:62:0f:b9:8d:bf:
                    3d:2c:bd:4a:5a:bc:22:82:e3:0f:46:d9:58:56:6c:
                    0b:f6:a3:5c:45:26:74:0d:0e:1e:63:05:e0:32:1d:
                    3c:bf:7c:24:7e:57:74:8c:3c:c6:62:52:e4:de:9d:
                    17:1e:0c:4c:d9:98:72:9b:0a:e5:4a:59:6c:52:5e:
                    75:d6:b3:5b:f4:1d:4f:97:02:76:62:b8:c4:ac:52:
                    46:26:45:fa:8d:99:5c:31:82:26:c4:a4:c4:45:8f:
                    e7:4f:7b:10:dd:20:47:6c:2e:e7:33:25:ef:a2:fc:
                    35:76:97:7a:45:3a:94:4c:90:80:ca:ac:b5:9c:78:
                    0f:f5:d5:91:07:78:3b:69:a9:f5:a5:ae:f5:52:f9:
                    09:51:c9:2b:7d:c8:80:56:0d:52:0a:4f:0c:df:36:
                    47:e1:e1:f3:a8:d7:86:35:91:98:24:61:4d:25:61:
                    30:b8:73:92:f4:42:f9:71:8c:23:ef:f1:9c:36:c5:
                    0c:60:ec:1c:1b:90:fd:b3:33:d0:8f:b8:e0:1d:34:
                    44:74:89:a7:61:71:6b:d7:51:26:f2:c2:6a:1b:d9:
                    a2:bd:e2:82:7b:a1:a7:db:dd:33:bc:b9:72:53:f4:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:AD:28:98:E4:25:F2:33:06:3C:9C:6B:55:22:C9:AC:88:22:6A
            X509v3 Authority Key Identifier:
                keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fb:65:c7:0a:0f:0f:84:33:a5:97:cb:0e:93:a1:f0:f8:3d:
         e2:b5:0c:dd:2e:f5:0e:82:8e:cb:73:b6:a5:ec:d5:28:6c:90:
         26:3e:4e:83:ee:b5:92:b4:3e:f7:a0:7f:a5:2e:c8:e2:15:84:
         bb:3f:fb:56:aa:26:81:cc:84:90:c3:8f:ac:56:23:8e:10:29:
         59:a1:72:11:1b:00:03:2d:52:a2:71:ca:17:58:cd:8a:7f:43:
         31:f9:46:d1:ea:78:bd:94:cd:ad:9a:2e:e6:74:28:e1:1c:e5:
         1f:5d:15:a0:9c:fb:50:71:fa:37:3f:ac:50:52:db:5d:e7:cd:
         ef:39:7e:34:bc:00:fa:fb:e0:da:af:33:b9:ab:ac:de:21:27:
         d0:51:13:0e:12:45:d9:42:fb:fe:f1:ae:30:c7:1b:9b:52:89:
         39:07:34:09:60:e4:a9:00:b8:e0:73:a9:93:a1:34:c1:24:79:
         2e:9f:37:41:07:06:1b:8a:a7:a1:b1:79:6a:92:e7:56:b2:c7:
         c3:8b:d9:a1:00:50:7e:06:8f:06:08:7c:d4:e2:eb:50:ea:40:
         93:2c:2e:fa:2b:35:3e:86:02:7c:4f:96:f2:40:2b:15:3b:f5:
         ca:d6:e0:cb:69:80:55:52:1b:ba:66:f2:50:a4:09:c8:ea:03:
         10:42:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:08:39 2025 by rpki-client