Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          24AynDhd/pl3UF9ZnTLI0GPRF32EsO5Ebny/BghZD9k=
Subject key identifier:   7E:1F:8D:33:0F:83:4F:6E:C6:65:A7:D0:27:97:E4:D0:86:F0:61:10
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       0199FBEB7DB295D37971D24565DDB6F3EB2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          0197
Signing time:             Sun 19 Oct 2025 10:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:18 +0000
Files and hashes:         1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=)
                          2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: ouIYArgkuy5Yxs8SvIl429QZIwTXTABMsayvV4gqDv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:7d:b2:95:d3:79:71:d2:45:65:dd:b6:f3:eb:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Oct 19 10:02:18 2025 GMT
            Not After : Oct 20 10:02:18 2025 GMT
        Subject: CN=7e1f8d330f834f6ec665a7d02797e4d086f06110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:fb:90:9e:14:cc:dd:b4:bc:ff:d4:07:02:
                    a0:49:e9:1e:5e:af:04:7e:81:ec:e9:27:ac:dd:fe:
                    c4:ab:7a:1b:bd:f5:12:bf:62:00:9d:27:17:3c:d7:
                    6f:d3:2b:ff:50:a6:97:9d:93:ff:ad:b9:cb:bd:40:
                    75:e6:64:19:11:01:36:1b:07:d6:66:f7:b9:61:28:
                    ab:5c:d3:b7:ab:92:a4:8b:5e:4b:b6:f4:e2:2e:3e:
                    06:06:75:5e:bf:73:75:5c:4a:51:8a:6c:19:c9:7b:
                    08:b2:70:a8:62:5b:a9:64:38:f7:e8:ff:36:1d:f3:
                    bd:54:54:7d:4f:09:a6:c7:6b:fb:78:b3:9e:8a:3d:
                    95:c1:17:89:e6:dd:3f:dd:55:20:60:b8:9c:e0:08:
                    c3:90:e9:48:e9:29:f4:74:03:61:4a:b5:58:ed:1d:
                    27:57:f2:8b:53:7c:8f:3c:a5:96:4b:5d:fb:f1:73:
                    d9:cc:d2:b7:2c:39:29:69:0f:f8:89:f9:05:50:6d:
                    dd:c9:f2:87:73:51:07:3c:a2:16:b2:03:2f:a2:4f:
                    2b:4c:a3:95:32:8c:f6:72:a8:83:c2:39:fd:83:78:
                    39:1e:3e:45:ae:59:e3:71:ae:2d:e2:08:8d:27:93:
                    c8:94:4a:90:62:02:cb:69:67:95:79:04:2d:f3:4d:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1F:8D:33:0F:83:4F:6E:C6:65:A7:D0:27:97:E4:D0:86:F0:61:10
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:42:9b:6c:f3:18:91:0a:40:85:fe:67:7f:c4:65:55:4d:22:
         9b:72:a8:97:4f:6f:fb:c0:37:9a:11:2e:27:29:44:9d:5c:64:
         2b:02:65:75:b7:7a:2b:23:7b:af:f4:fe:05:b8:b1:97:88:6c:
         38:34:b2:77:fe:60:83:14:a7:37:97:b2:a7:36:43:af:02:3a:
         22:d3:6f:c8:b9:43:e5:72:df:ea:11:f6:55:23:07:a9:31:1f:
         75:9d:f0:8d:52:8f:dc:ac:d0:b1:45:4a:45:38:65:c3:2f:be:
         8d:bd:0b:1d:0f:8a:4d:29:f3:94:28:9a:1e:29:50:ee:e7:c1:
         00:e6:69:e6:1a:61:12:a0:df:9f:3d:56:d6:7f:e9:2c:17:f8:
         eb:4a:1f:1d:23:bb:52:43:64:a2:48:a4:3d:c3:70:50:55:ea:
         91:a7:a1:12:f8:81:3f:e8:16:04:f9:58:30:e6:07:57:bb:94:
         b7:45:8b:44:80:fe:4d:0a:69:a5:d0:fc:97:a7:0a:19:4f:cc:
         be:6d:8a:62:e1:b8:b3:56:47:df:2b:44:7a:c5:23:ad:97:c8:
         f9:23:5a:5c:ed:05:40:60:44:fd:bb:f9:6e:f8:fd:4f:be:b8:
         82:b5:f8:62:37:a4:fb:fe:39:1e:22:53:e2:4b:e9:21:c4:ee:
         0c:f5:5c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:48 2025 by rpki-client