Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
File:                     v9eGsktLMCdbzI1SRONO4ASB15A.mft (raw, json)
Hash identifier:          8yBf5JwsPX04MjqrZVmfJ5+pnZQETMsnyFvTW+MVmzI=
Subject key identifier:   63:E0:FE:57:0E:5E:EB:87:8F:4D:DB:1C:A8:C4:79:4D:EB:D9:C4:7C
Authority key identifier: BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90
Certificate issuer:       /CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
Certificate serial:       0199FBEB2CB64F859DE16E5357D3C9D8118E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
Manifest number:          1266
Signing time:             Sun 19 Oct 2025 10:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:57 +0000
Files and hashes:         1: jvaFexoxtk4rKhDumsQjGLQsBLU.roa (hash: trR6TCS5RgKXy+FTVPF28Tq5uhqKg+8D3gvbODYNaCY=)
                          2: v9eGsktLMCdbzI1SRONO4ASB15A.crl (hash: eGoLTGiv138/QhZ8wfL47nwxXWdvRUy+ErGAKJwD3dA=)
                          3: zPseRt5WlA5PNoUFkbv3vmUfDV8.roa (hash: Ya/w9mpoqyM5Bw8KTqPuY/qxCTIk7UQN48ES6+Vh43g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2c:b6:4f:85:9d:e1:6e:53:57:d3:c9:d8:11:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd786b24b4b30275bcc8d5244e34ee00481d790
        Validity
            Not Before: Oct 19 10:01:57 2025 GMT
            Not After : Oct 20 10:01:57 2025 GMT
        Subject: CN=63e0fe570e5eeb878f4ddb1ca8c4794debd9c47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b7:36:6c:3f:e4:5d:62:e6:c6:d3:c9:24:83:
                    01:5f:64:24:a6:8b:3a:ec:08:42:6c:5a:a7:6d:80:
                    5e:36:83:53:30:de:dc:3b:87:e6:7f:88:38:bb:a4:
                    81:e7:33:64:5a:f0:d7:0f:64:6c:4c:8a:83:15:4d:
                    e5:90:28:a8:22:2c:e8:1c:99:7f:36:8d:ea:d5:a6:
                    a2:11:4b:72:0a:51:c5:25:23:09:57:80:17:a1:80:
                    7e:22:9c:29:73:99:76:36:d3:66:2a:31:4e:e9:0b:
                    fa:92:bb:5e:b4:69:69:fb:46:d0:c2:1d:a3:8e:3e:
                    25:c0:05:3c:11:89:f4:85:9c:6d:c8:69:67:ac:65:
                    65:ef:95:07:53:5d:fd:97:ab:55:fa:a0:94:94:13:
                    ff:4b:38:4a:46:75:5a:16:a2:b2:8b:e6:f1:b3:55:
                    5f:7d:e8:12:a2:67:1d:de:1e:a5:dc:66:19:dc:ca:
                    07:02:1f:14:bc:32:f0:96:83:38:b6:17:08:4b:68:
                    c4:18:e3:07:b8:90:a0:7c:d1:f3:66:0a:e7:c0:3c:
                    31:ce:8a:d9:11:9d:78:3f:a4:17:ad:e8:b3:4c:cc:
                    a2:8c:72:59:68:ea:a7:79:35:f5:7a:47:b7:9b:74:
                    c0:72:36:4c:5e:8c:e3:e7:d0:19:43:20:bc:e5:b6:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:FE:57:0E:5E:EB:87:8F:4D:DB:1C:A8:C4:79:4D:EB:D9:C4:7C
            X509v3 Authority Key Identifier:
                keyid:BF:D7:86:B2:4B:4B:30:27:5B:CC:8D:52:44:E3:4E:E0:04:81:D7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9eGsktLMCdbzI1SRONO4ASB15A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e14ebe-45dd-44db-b9b7-1a1f936454ec/1/v9eGsktLMCdbzI1SRONO4ASB15A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:1b:dd:a0:7e:da:95:01:4b:93:33:de:5b:53:03:9c:c5:
         1d:81:05:cc:21:2e:a5:e8:e6:22:cc:10:ec:4d:62:26:4e:85:
         86:16:6f:2a:4c:36:75:af:d9:40:09:79:b5:a6:6d:35:ae:a0:
         ca:8a:68:c7:11:06:8f:8f:3b:3f:ad:6c:76:09:0c:7d:b3:c7:
         e8:42:67:cf:ac:f5:b9:6e:1b:51:bb:5c:36:fd:a1:1a:0d:1a:
         0b:d1:78:40:99:41:53:cb:92:35:53:2d:27:c3:42:53:fc:ca:
         76:b8:6d:63:8c:44:fb:53:0a:e0:b4:27:d2:b7:39:4d:92:3a:
         23:d2:55:12:ad:78:66:48:e7:5e:8d:8b:fa:e4:a6:4b:32:99:
         47:14:38:70:23:d6:42:fa:f7:ed:05:7b:16:5c:19:a0:91:33:
         3f:8e:e6:94:33:2d:6a:f0:69:60:93:d4:0f:e3:14:34:32:c4:
         cd:c3:d0:30:8e:d7:7a:f1:0c:fa:6a:02:d3:0b:b4:1b:9a:ac:
         0a:00:06:18:8b:4a:67:54:9a:b5:61:04:84:f2:7a:a3:9f:09:
         2f:a0:25:43:ec:24:58:09:6f:e9:87:1d:79:49:e7:2d:d4:38:
         b2:d2:b4:33:a0:c5:78:b2:13:82:4b:95:e5:64:5d:03:1b:e6:
         72:1d:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:27 2025 by rpki-client