Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File:                     SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier:          slumbhpZ5b0tPO8FvtSFUqMnPl5/uJB7jglJW21DG28=
Subject key identifier:   B0:D3:33:C7:C8:FE:09:6C:7E:1A:74:1C:B2:B5:8B:2D:E8:7E:3B:3E
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer:       /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial:       0199FD348A1A78555250D668DC479E9A0E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number:          0BEA
Signing time:             Sun 19 Oct 2025 16:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:42 +0000
Files and hashes:         1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
                          2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: asVfSJpkbOOjFtLNUEpLmdh/ltBnwEJQk/uA2F2IgPs=)
                          3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:8a:1a:78:55:52:50:d6:68:dc:47:9e:9a:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
        Validity
            Not Before: Oct 19 16:01:42 2025 GMT
            Not After : Oct 20 16:01:42 2025 GMT
        Subject: CN=b0d333c7c8fe096c7e1a741cb2b58b2de87e3b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:bc:05:6a:56:9f:3f:a7:82:86:a9:58:22:6a:
                    f4:22:ef:a9:d6:38:ce:48:f5:d0:d8:c4:e4:68:14:
                    fd:20:2c:06:40:39:0e:56:4e:85:f7:90:97:b1:4a:
                    65:d3:64:64:41:cd:b4:cc:bc:87:38:c1:d8:ba:f4:
                    bf:0f:8e:81:eb:bc:35:24:e4:8a:96:68:ae:40:db:
                    5c:6f:c5:70:aa:a2:56:ca:20:2f:f9:05:76:fd:62:
                    1d:05:8b:cd:ee:72:c5:5f:67:34:52:a0:38:d1:c7:
                    a8:7b:3a:5f:25:b8:98:0a:ff:79:17:45:ad:cc:e1:
                    6d:21:f6:20:24:68:02:c5:82:5d:87:e8:be:1d:28:
                    f2:fc:86:c1:99:87:f4:33:6d:79:62:fa:7d:8f:6c:
                    da:a3:74:dd:8e:26:d4:97:14:09:5c:a9:4d:a6:ea:
                    d3:f6:8f:64:4e:92:6c:22:08:90:18:3a:fc:b7:a1:
                    b1:d4:ad:58:4a:7d:5f:9e:11:68:5b:c9:27:87:bf:
                    12:91:39:68:c3:da:36:c1:d5:cf:9b:94:ae:ce:f3:
                    be:0c:55:8b:f4:c4:e2:3d:18:45:0a:ae:7d:b0:5a:
                    c0:be:42:f1:f9:9e:c9:89:19:15:a7:f0:92:ff:2f:
                    77:8b:e9:c3:20:ec:f9:30:31:cd:b4:7f:e1:0d:da:
                    c9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D3:33:C7:C8:FE:09:6C:7E:1A:74:1C:B2:B5:8B:2D:E8:7E:3B:3E
            X509v3 Authority Key Identifier:
                keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a5:dd:d7:79:d3:f0:99:5c:8c:4d:33:af:02:8f:90:4f:f6:
         0a:a2:eb:5d:b5:a7:d2:52:46:28:40:50:fd:ad:bf:63:1e:6a:
         71:3f:ae:a0:6a:00:67:3a:d2:3c:33:83:15:b3:71:ba:25:ad:
         cf:cc:b1:21:f3:99:04:ee:a3:07:f7:27:37:f4:5c:99:0c:e1:
         ba:cf:d2:39:8f:c2:8b:19:b3:4d:40:40:94:17:91:3e:83:b9:
         fa:e0:10:ff:7c:26:c7:8f:45:ec:99:f0:d5:cc:47:6b:02:0e:
         28:73:51:03:17:a6:52:9c:41:f2:f9:e5:40:86:c6:61:67:77:
         90:2b:05:07:93:38:87:06:bf:cf:14:69:67:b6:17:c5:c6:73:
         0d:0d:3d:f9:1e:96:c0:95:73:9b:48:f9:21:bf:30:8c:1b:0e:
         ac:ca:71:1f:bf:28:4a:08:05:20:5b:3b:0e:ed:18:52:d6:ed:
         1b:a6:37:05:d4:52:a2:1c:d2:74:4e:be:b0:74:af:2a:49:fa:
         ea:c4:94:3f:7e:60:92:1e:d8:63:3c:16:e3:c7:cc:f2:b8:cd:
         0d:9a:42:0d:9d:c5:df:8c:1d:99:19:f1:f1:b4:b6:e7:11:84:
         1e:65:09:b2:05:52:e2:27:2a:8f:7d:66:35:89:38:66:8d:81:
         f5:4c:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:14:29 2025 by rpki-client