Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File:                     vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier:          dN+t0raVSZ8bp7RsYFmWNN1rNHWw0h8mRft0Xr2YJ4k=
Subject key identifier:   F3:C8:CC:62:7F:3D:DD:8D:B0:A2:2F:D6:6D:03:E1:0D:0E:BE:81:B6
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer:       /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial:       0199FCFD44B29FEECEAB1C33F44878EA85E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number:          09AD
Signing time:             Sun 19 Oct 2025 15:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:20 +0000
Files and hashes:         1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=)
                          2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: nxPgKm2SBLQVSXD4ua/n4KrBHhshatdRNUtlMjDHFY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:44:b2:9f:ee:ce:ab:1c:33:f4:48:78:ea:85:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
        Validity
            Not Before: Oct 19 15:01:20 2025 GMT
            Not After : Oct 20 15:01:20 2025 GMT
        Subject: CN=f3c8cc627f3ddd8db0a22fd66d03e10d0ebe81b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:82:28:e4:09:ed:a0:ae:dd:d8:6a:05:8c:
                    9b:18:dd:96:dd:85:7c:fa:de:c2:29:97:8b:52:a7:
                    e8:e2:0a:55:37:18:8f:37:7d:07:35:c0:b0:e2:20:
                    ba:0f:3a:a0:26:6e:13:32:b9:64:ae:23:d9:e8:5e:
                    f3:f7:0f:3f:38:21:cb:87:8c:a1:33:a0:e8:fa:0d:
                    64:0a:b5:83:20:0f:ad:2a:7f:e6:9e:6c:ba:64:2c:
                    10:f2:83:99:0b:aa:3a:16:ba:6a:c5:23:57:22:f1:
                    8e:cf:09:1d:f7:ba:c7:ae:ca:cc:a7:fe:d2:3f:1b:
                    82:e4:db:45:4e:b8:4e:34:6b:71:a9:8f:f2:18:bf:
                    de:af:40:b6:5d:2a:d9:09:b1:4a:e5:f5:a5:17:7c:
                    8d:1d:f2:b4:51:c2:0e:be:24:a6:a6:eb:ce:fc:05:
                    5b:4a:c9:84:a9:fb:cc:51:57:3f:75:0c:d5:fe:f3:
                    50:43:7a:13:ba:16:0d:a3:22:2b:90:4f:3f:be:c5:
                    cb:13:01:48:c8:03:02:10:b8:bb:1e:34:fb:d4:a4:
                    7e:b1:aa:2a:75:ee:51:c0:5d:0c:a1:83:2b:20:c9:
                    60:44:1f:cf:5b:f7:77:0d:cd:b0:f0:d9:7e:eb:de:
                    fe:3e:a3:bd:26:24:62:a4:b8:75:ab:61:c2:51:e8:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C8:CC:62:7F:3D:DD:8D:B0:A2:2F:D6:6D:03:E1:0D:0E:BE:81:B6
            X509v3 Authority Key Identifier:
                keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:1b:f1:1d:a7:94:0c:88:36:49:d1:69:f0:68:de:f1:7c:e2:
         f3:14:3d:77:76:f1:38:ac:20:19:57:6c:97:2e:90:74:d5:93:
         c5:97:e5:fd:a5:57:5b:8e:bd:2c:f1:22:9c:e8:d3:6d:e9:80:
         87:65:aa:5b:5a:ae:21:a7:59:22:3b:72:d9:33:9c:f4:af:4c:
         0a:2e:f6:95:97:4d:4d:d9:e0:33:48:de:1f:ce:25:19:18:3a:
         f8:05:e0:4f:83:18:93:2c:6a:82:d6:c0:ba:3c:08:df:b8:85:
         5a:84:c0:41:5e:40:31:6a:37:97:72:88:0e:3d:a5:d9:d0:a7:
         96:93:42:f8:56:db:f3:18:38:63:71:8e:4f:8e:bc:81:91:33:
         66:4b:9c:0a:9d:d4:97:59:c6:65:1a:cd:eb:a8:11:2e:a3:5e:
         20:2f:e7:f7:f2:8e:ed:7b:25:25:b1:eb:a5:88:1e:5a:b4:d5:
         6e:04:80:16:4c:de:e0:b0:98:b8:e9:3b:04:5b:dc:29:92:04:
         28:68:8f:dc:22:dc:bf:95:7c:96:a5:e3:c9:6c:7a:da:39:41:
         70:79:e8:21:f1:f7:ec:39:ac:6e:1a:f8:4b:e3:d2:c3:de:4c:
         ce:c3:c1:1d:12:3c:85:4f:a2:22:1d:56:32:63:d1:a3:81:89:
         04:af:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:45 2025 by rpki-client