Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File:                     rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier:          +A1ziD0T3BcTVXS0mNu32edT7+jYpdG/8uPhLcT0gzE=
Subject key identifier:   F1:42:82:2C:AD:38:ED:58:C1:97:D6:73:AF:17:BB:7E:B7:B3:00:71
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer:       /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial:       0199FE7D8668207E584BFB9FBF7003EAB71F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number:          075A
Signing time:             Sun 19 Oct 2025 22:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:03 +0000
Files and hashes:         1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
                          2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: 1/pnddpG7tpeyUV4/c58AlaTtW0ILii3v65E5QK/j5Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:86:68:20:7e:58:4b:fb:9f:bf:70:03:ea:b7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
        Validity
            Not Before: Oct 19 22:01:03 2025 GMT
            Not After : Oct 20 22:01:03 2025 GMT
        Subject: CN=f142822cad38ed58c197d673af17bb7eb7b30071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:dd:23:a4:7c:0e:26:c7:a7:41:a1:67:85:
                    ec:e3:88:1f:de:c5:4d:3e:05:f6:1d:21:db:07:30:
                    74:06:70:37:6f:06:96:0b:82:7e:96:58:bb:43:68:
                    1a:7e:da:66:e5:d8:a5:14:64:35:48:db:68:36:1d:
                    75:75:b2:97:6e:22:31:7f:91:a8:af:bf:fb:92:13:
                    0f:81:5c:12:c2:cf:6a:c6:14:ed:90:4d:f6:6a:08:
                    27:c1:35:e3:63:c8:ad:5e:57:1a:93:8f:04:95:c2:
                    5f:a2:95:75:a9:e1:79:44:fc:b0:11:80:65:ba:96:
                    97:07:f4:1a:58:45:bc:bf:f5:02:a7:f9:1e:56:81:
                    94:a8:95:44:58:4e:b7:46:65:d0:57:79:fe:18:fc:
                    f1:86:76:96:0f:fd:7a:3f:e3:24:76:2d:5a:37:aa:
                    16:a8:5b:a2:ce:87:56:44:d0:fe:8a:f3:33:96:b4:
                    66:05:b9:9f:4d:0f:8c:29:23:ea:8f:29:fe:75:48:
                    7d:5a:13:5c:1e:9d:3e:0b:75:3c:4f:2d:13:84:43:
                    35:d5:f8:3b:1f:ad:44:51:0d:63:63:51:cf:e0:f7:
                    43:b4:67:d5:a4:ed:71:dd:dd:01:2e:3f:d2:13:f2:
                    79:30:ba:ab:89:30:d3:27:ff:7d:c7:01:2b:81:87:
                    6c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:42:82:2C:AD:38:ED:58:C1:97:D6:73:AF:17:BB:7E:B7:B3:00:71
            X509v3 Authority Key Identifier:
                keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:66:97:a4:7f:92:1b:fe:10:fe:f2:6d:ba:1f:1a:23:b6:f0:
         13:0e:94:01:7c:9d:02:09:95:14:6f:2b:f2:1d:ac:30:4e:4d:
         80:12:10:a9:b4:f0:e6:17:5e:f6:28:14:ea:61:2e:c9:46:2b:
         3a:16:79:c7:5a:f6:44:54:fc:dc:20:96:0f:5a:a7:5f:2a:a2:
         b1:f3:b5:f2:29:05:54:3a:7d:bf:84:0e:a4:ab:a8:fa:f0:4f:
         60:03:9a:01:37:2c:33:f8:b0:08:9b:93:89:4f:68:c3:05:5c:
         8c:df:98:47:9b:74:0c:dd:8d:56:d2:d5:3c:ba:8c:01:1d:1f:
         7e:07:f8:ab:f7:ec:17:93:eb:e2:f3:60:cf:73:28:ed:81:26:
         1b:3b:ae:c8:c8:0d:88:52:46:7a:95:9f:d8:3e:e6:b3:9d:c6:
         68:d6:cc:f1:e5:56:10:7a:3e:81:f3:40:f3:51:5c:4e:26:b1:
         3d:c3:0e:e3:60:10:29:06:88:9f:03:f2:7e:2f:ea:c6:1f:dd:
         85:6e:63:f3:2f:03:0b:b5:b0:85:38:0e:c2:0c:de:74:d0:be:
         6c:43:20:8b:64:a3:5d:19:6b:09:3e:72:c0:51:56:16:73:ed:
         5b:5b:34:80:e8:6c:63:c2:89:dc:9f:4d:32:f6:d0:df:c1:b5:
         33:7d:e8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:19 2025 by rpki-client