Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
File:                     zVW0Jf7PefCeB0stbzphbHtoVwA.mft (raw, json)
Hash identifier:          gvXErDhuRKxjfMBVCTvDMZRP2YfRD/hghVvMNlkixzA=
Subject key identifier:   95:A8:0D:D7:17:79:6C:FA:AC:1E:47:06:FD:79:F5:D7:53:C1:D6:0D
Authority key identifier: CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00
Certificate issuer:       /CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
Certificate serial:       0199FAD7D14C47CD5184A2296877ED116292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
Manifest number:          141F
Signing time:             Sun 19 Oct 2025 05:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:11 +0000
Files and hashes:         1: EpL6n7YsTJUyCIMDB2XXj1UETF0.roa (hash: 0aITT3j5lY16SRph4DUvA4Lnw1Z/zDWpJihg1Nz305o=)
                          2: zVW0Jf7PefCeB0stbzphbHtoVwA.crl (hash: +Yt2Oa4tmCDVv8JFgQ3TUuZAfj3Hcx85ZtBwHau3gZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:d1:4c:47:cd:51:84:a2:29:68:77:ed:11:62:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd55b425fecf79f09e074b2d6f3a616c7b685700
        Validity
            Not Before: Oct 19 05:01:11 2025 GMT
            Not After : Oct 20 05:01:11 2025 GMT
        Subject: CN=95a80dd717796cfaac1e4706fd79f5d753c1d60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:ac:02:a4:8a:29:03:e9:b3:a6:19:ff:ab:
                    03:ee:33:f2:af:85:c1:62:7b:aa:ce:95:40:3d:63:
                    12:5d:83:ac:3a:dc:fb:27:ee:0b:c6:23:d2:c8:81:
                    31:fb:42:f4:f4:e6:c3:ff:82:65:e5:c9:fe:f2:2c:
                    38:ed:7a:3d:ab:4f:1a:4f:d4:5b:c7:ab:d8:3e:94:
                    ea:07:63:e2:b9:8e:66:ce:7e:73:b2:37:28:07:54:
                    38:d5:89:11:d8:09:c3:c5:de:ee:70:a9:85:df:5b:
                    d6:50:8e:09:d6:f5:60:fc:4c:88:c8:7e:5a:f1:cc:
                    1e:6c:04:98:8d:3d:ad:c2:13:c2:c8:ce:c3:fa:8e:
                    d6:0a:bc:9a:a1:8e:e6:3e:3b:2d:32:31:5e:3c:50:
                    12:ca:44:07:54:8f:0d:af:49:d5:2c:2d:50:4f:8f:
                    35:24:5a:c3:8d:ae:f6:9d:9e:46:8d:bf:ab:e0:50:
                    23:6b:4c:35:be:e1:38:19:78:93:a1:16:fe:2c:f6:
                    f2:8d:44:f6:f0:fe:58:0f:2e:81:ab:c2:85:ad:ef:
                    a1:ac:40:13:dd:03:46:14:ae:38:00:fd:d5:5d:4c:
                    87:82:07:9b:16:76:ce:74:e1:fe:21:ae:bf:0a:3d:
                    fd:55:08:13:9e:05:20:98:1e:40:8e:da:5e:7f:15:
                    04:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A8:0D:D7:17:79:6C:FA:AC:1E:47:06:FD:79:F5:D7:53:C1:D6:0D
            X509v3 Authority Key Identifier:
                keyid:CD:55:B4:25:FE:CF:79:F0:9E:07:4B:2D:6F:3A:61:6C:7B:68:57:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVW0Jf7PefCeB0stbzphbHtoVwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a05617-e808-4aed-be26-b87235b4d763/1/zVW0Jf7PefCeB0stbzphbHtoVwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:96:5b:50:fd:61:b9:07:86:c3:c5:c9:4d:72:e0:2a:33:
         7a:6b:28:a1:48:24:3e:59:1e:09:20:35:28:53:b5:67:bb:14:
         f0:b3:af:6b:bf:41:a8:c9:de:ba:8b:e9:d4:81:59:98:85:63:
         67:3f:be:33:af:4d:41:39:d6:f0:b6:6d:9a:41:82:e0:a1:44:
         7b:2b:9e:a0:5f:06:43:30:f6:52:2f:79:aa:91:ea:0a:90:fe:
         bb:db:cd:45:45:2c:cc:0a:50:1f:c1:24:0d:f3:16:f2:bb:a5:
         09:5e:0b:d3:39:78:32:9d:f8:c1:fb:a0:0c:94:17:3d:ef:83:
         75:30:ea:56:4a:63:66:2c:9b:a2:73:b0:7a:0a:eb:54:1d:81:
         a9:02:3e:1e:00:53:62:b9:b4:1f:b9:53:1e:90:01:05:18:bd:
         f1:0a:17:e9:c1:4d:ee:ab:15:89:12:e8:81:bc:8f:63:c1:9e:
         7c:4f:87:93:45:1b:db:5a:e2:66:47:19:a1:14:83:f7:9a:e7:
         26:5c:1c:50:1a:5f:a8:10:08:61:c5:bd:79:c0:79:2e:38:1f:
         39:5b:04:04:66:72:a5:6f:48:88:d5:1c:52:3c:f4:59:0d:d9:
         6c:ce:ee:53:50:1e:6c:06:3a:74:81:31:c8:02:3e:b8:34:68:
         70:b4:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:37 2025 by rpki-client