Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File:                     rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier:          WA7cz13pW0V+mexdrIbKDVu8jC4B7JKbu0fRGItFIis=
Subject key identifier:   E2:5F:5A:19:10:02:6E:E0:69:7F:45:43:DF:1B:8B:2F:3B:79:C1:D3
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer:       /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial:       0199FC2192C44B0EB4AD97E3A652F52DD08D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number:          0B8D
Signing time:             Sun 19 Oct 2025 11:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:22 +0000
Files and hashes:         1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
                          2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: 8NhAxCwlerfUPY0RzcL61LjSlvlYUvohSEmxtM8VWRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:92:c4:4b:0e:b4:ad:97:e3:a6:52:f5:2d:d0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
        Validity
            Not Before: Oct 19 11:01:22 2025 GMT
            Not After : Oct 20 11:01:22 2025 GMT
        Subject: CN=e25f5a1910026ee0697f4543df1b8b2f3b79c1d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:68:54:a5:ce:49:55:f5:77:ac:9f:10:55:
                    d6:27:75:30:ed:65:3d:cd:3d:d3:b6:49:14:e3:4f:
                    6d:28:0b:aa:06:95:67:3a:eb:9f:80:a2:38:cd:92:
                    49:04:a4:e5:c2:3e:d8:66:51:a0:fe:c0:b5:98:f4:
                    26:90:14:bf:00:fb:12:97:f6:c2:d6:3e:0f:b3:3a:
                    ca:d9:4f:45:52:96:e1:74:29:1c:b2:17:cc:01:46:
                    a1:c8:c7:f4:84:0e:cd:89:70:fa:09:58:c1:17:b6:
                    17:90:15:2e:0e:32:a7:35:e1:e9:c7:3c:34:44:ea:
                    d7:7e:33:65:e4:06:77:e6:50:f9:46:6e:24:18:bd:
                    e2:fa:f0:4b:9e:8e:cb:dc:98:a7:60:2d:ed:27:3c:
                    8c:06:7f:04:85:4e:82:de:88:d7:30:eb:30:b6:12:
                    d3:43:f6:50:33:51:fa:b4:4f:c9:85:34:4e:16:e1:
                    cd:a5:6f:e9:fb:1c:28:fa:b7:c0:b1:76:9c:e1:41:
                    e0:4d:6f:15:f8:79:4e:ba:4a:ac:9d:28:99:d7:df:
                    76:2f:bb:89:4e:7b:12:ec:38:b2:64:f5:06:4d:2a:
                    29:20:21:dc:83:7d:6b:9b:b2:11:20:74:2e:75:93:
                    b1:41:64:37:04:2f:da:8b:18:e6:d7:d0:dc:b6:c0:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:5A:19:10:02:6E:E0:69:7F:45:43:DF:1B:8B:2F:3B:79:C1:D3
            X509v3 Authority Key Identifier:
                keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:89:7b:5c:09:da:cb:c8:78:cb:f2:c9:80:59:e7:5a:37:d0:
         83:a9:d1:c2:74:89:23:a1:af:07:09:93:e0:58:49:ef:b3:ce:
         c7:f3:e8:b3:c5:85:67:d6:d5:4d:7c:4a:c6:7e:e0:ba:06:34:
         7e:59:be:05:46:22:d9:8d:80:0a:e0:fe:b2:04:18:5a:24:2b:
         68:d8:ae:16:18:a4:9c:08:5c:72:8b:46:82:9d:7f:f8:ae:dc:
         a2:72:2b:b1:f9:ce:48:a4:1e:61:e4:16:ce:a0:e8:e1:50:87:
         ed:34:97:93:58:2b:45:54:82:6a:ab:1b:c8:b2:b5:76:83:78:
         8e:9f:31:13:08:32:cd:1b:f3:c6:10:20:26:05:ea:d7:a1:c7:
         a0:53:ce:3b:dd:06:bd:c5:ee:e3:2b:17:5d:38:fc:ce:f1:e9:
         1b:f2:a6:4c:03:1c:8f:78:0b:e2:9d:03:9a:4e:76:2e:07:ca:
         e1:b0:c3:2f:b5:0a:d8:dd:98:c0:03:ff:c0:08:f3:ee:19:c5:
         88:dd:cd:2e:5e:c1:cc:83:fa:00:8b:5f:b9:ed:07:33:5d:b0:
         1e:3f:2b:0c:a6:fc:5f:c8:7c:ae:31:fc:6f:6e:0b:9a:75:88:
         72:db:ff:02:7f:aa:3e:f0:13:f9:4a:13:d1:df:a5:cb:65:85:
         d8:0e:80:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:03 2025 by rpki-client