Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          eFgnTLE2vSTUyQnn6mtlw5Vk3eIhHXD3RLkdBKNnS7I=
Subject key identifier:   95:77:B9:8D:30:1F:0B:C2:0C:E1:B3:54:74:BA:00:14:40:32:42:EE
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       0199FB0F4BBA20414CA91FA12E7CC7E89C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          1495
Signing time:             Sun 19 Oct 2025 06:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:47 +0000
Files and hashes:         1: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: wC/rFY+BmYd+7eSDWah5ioAfvJguhVY2AU/ZwRn2Oi0=)
                          2: vHnKRxUajbywNAqL6nOx-jDQRUM.roa (hash: 9L1D0lkWg2QABU5Zj6IAqZoeAKA6O0lNRb8Xz0hsQns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:4b:ba:20:41:4c:a9:1f:a1:2e:7c:c7:e8:9c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Oct 19 06:01:47 2025 GMT
            Not After : Oct 20 06:01:47 2025 GMT
        Subject: CN=9577b98d301f0bc20ce1b35474ba0014403242ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:19:e8:2a:89:3f:6d:99:18:fc:8d:c7:53:
                    aa:5b:43:dd:4c:77:7b:99:41:bf:16:34:5c:43:85:
                    12:b9:27:22:9d:39:38:32:da:dd:7e:a9:f5:57:c0:
                    3a:09:b0:25:bc:a2:b5:7b:4b:b1:42:51:9f:23:11:
                    b2:0b:ef:50:85:e9:5c:9e:f2:00:4f:e8:80:f0:5e:
                    96:c7:6e:59:e3:55:32:43:aa:19:ae:09:a3:db:c1:
                    b9:6d:8b:5c:3e:d8:48:29:67:d7:87:1b:2a:92:71:
                    fb:4a:b5:be:a0:79:57:44:25:26:dd:76:d3:8f:ae:
                    2b:65:56:0f:0f:62:a5:ca:c4:f5:de:cc:4d:86:1b:
                    ca:ef:8b:5d:66:62:d4:ae:25:88:7e:32:df:ee:b6:
                    08:73:fc:a7:fd:c4:dd:e1:a0:f4:88:78:08:6c:04:
                    38:27:f5:cf:2a:23:3a:99:d7:dd:a8:4a:f0:8b:cc:
                    27:bc:bf:7c:e8:61:6b:36:64:bc:37:87:4d:41:92:
                    4a:f8:61:4a:7e:2b:94:b8:58:74:e0:cf:57:2c:12:
                    d5:92:8a:a2:c4:37:f1:55:f8:b4:36:e2:36:a1:bb:
                    9c:7a:77:49:be:de:8a:c1:69:a7:53:89:ff:d2:be:
                    78:24:8a:d8:0c:18:66:55:9b:a3:8c:44:9d:03:81:
                    b0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:77:B9:8D:30:1F:0B:C2:0C:E1:B3:54:74:BA:00:14:40:32:42:EE
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:21:9e:58:a3:4f:31:68:c7:8b:7b:26:0c:f2:61:67:21:ad:
         43:e7:f8:c6:fc:90:b9:89:7d:96:68:99:04:22:1d:04:56:33:
         d5:3d:da:dd:c2:ee:48:4d:ca:4d:94:a0:49:88:e2:73:31:78:
         7a:90:8d:e3:c2:96:82:13:77:28:40:43:51:94:3f:ea:40:4c:
         de:6c:be:c9:85:94:96:a7:af:95:48:df:70:79:6b:1b:e2:76:
         ec:1f:71:fc:73:c1:97:dd:1d:c7:ab:31:c5:3b:56:34:d4:ab:
         3a:c4:bc:7b:df:9c:d5:88:9a:c5:2e:78:f9:a6:e7:aa:3f:0a:
         94:99:9d:9e:7e:6d:15:16:29:7a:67:e9:51:bb:cf:01:1e:70:
         c8:68:7d:54:bd:f3:ed:a4:f0:73:7b:93:0a:7e:7d:a1:cf:ff:
         06:a0:25:4d:c5:08:8a:89:9b:f5:d1:c2:34:30:f2:92:1c:12:
         84:f0:69:d7:b2:60:aa:2e:93:ff:f2:d1:95:5c:8e:2a:46:28:
         6f:63:25:ea:5c:01:76:4e:cd:de:67:80:f0:32:c7:d2:99:f1:
         25:e1:0f:6e:0b:c5:cc:93:58:f9:3f:dc:e1:9a:14:6f:fe:b1:
         c0:ae:8e:67:bd:e5:bd:67:7f:c0:42:2a:0b:39:c9:b5:09:8f:
         1c:bc:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:11 2025 by rpki-client