Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          YVsFLa8de9OlrwowBaUUwekInRQdwG9bnStAWwFdkZs=
Subject key identifier:   C0:B6:79:DB:5F:21:F5:D2:8C:FD:E5:4F:51:47:AE:27:98:70:F7:A3
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       0199FCC651F642FFCDF9EFBDBEB3693C56FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          0E68
Signing time:             Sun 19 Oct 2025 14:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:19 +0000
Files and hashes:         1: DwNEa67GeVfXPcLrWPlMm4OLjVo.roa (hash: 3gEhvhLUNasIQ2pRn7FSbquTzSKI+z6q4epOcxacj1o=)
                          2: elJTMVmgnWj44OPlL-6xmFMzLhQ.roa (hash: GWf5WI3kD5bsPfeiOoXwWgNYLd20Fx5ww7PTXcPPcr4=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: vP03tchJwL1orqW2NA48pBiGahAHpnkbWpoKMhVKZqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:51:f6:42:ff:cd:f9:ef:bd:be:b3:69:3c:56:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Oct 19 14:01:19 2025 GMT
            Not After : Oct 20 14:01:19 2025 GMT
        Subject: CN=c0b679db5f21f5d28cfde54f5147ae279870f7a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:05:41:90:3d:1d:56:e5:96:a8:bd:3d:d5:27:
                    74:9d:c1:a3:ed:a8:6c:f4:fb:7a:fc:0a:3c:18:00:
                    b1:54:cc:6c:dc:de:82:da:a0:8d:07:b3:88:a0:37:
                    64:a6:3d:2b:71:8f:01:5a:37:9e:8b:37:49:30:82:
                    74:c0:b2:6f:22:2c:38:5c:17:4a:b5:91:8d:24:ab:
                    c1:a1:a8:16:00:b6:3d:d4:81:ae:12:3e:db:ca:d1:
                    52:df:69:6b:32:bb:75:a6:29:92:8e:c9:a1:2e:3c:
                    e3:df:f3:87:e1:74:ad:d9:d7:df:31:bd:2c:ce:70:
                    38:10:fd:9e:3f:5e:ac:7f:d5:08:af:dc:90:ec:f2:
                    0e:9b:32:50:be:bc:b5:81:5d:16:0a:ef:43:7e:57:
                    99:1e:32:14:07:de:13:d2:3d:70:de:7d:22:0a:35:
                    81:32:fb:5f:ec:82:03:9c:e6:0b:6e:69:f8:35:8d:
                    c8:ff:8f:58:a8:cb:90:8b:47:0d:5c:0f:f2:07:e5:
                    bc:a5:17:48:a1:48:02:20:fb:16:0d:28:07:08:b7:
                    67:a4:20:25:0b:da:bc:8b:1a:fc:a1:49:3e:30:a0:
                    b2:d4:70:f5:a1:62:78:47:5e:32:32:15:b1:8a:72:
                    f7:0f:48:23:de:f5:e1:00:81:3b:ed:12:aa:01:7b:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B6:79:DB:5F:21:F5:D2:8C:FD:E5:4F:51:47:AE:27:98:70:F7:A3
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:11:dc:5e:fb:bd:bd:54:c1:6a:72:a2:07:16:e9:dd:da:9d:
         1c:bb:c2:b1:a7:ac:c7:19:35:2f:d1:4b:82:60:92:c9:ac:81:
         21:2d:d4:4b:92:19:b4:6a:f8:9a:ca:0c:0f:4e:6c:43:df:67:
         30:c4:19:2b:ce:04:41:4e:f4:c4:f4:c1:60:7c:7c:cc:6a:b9:
         b6:98:5f:77:bb:78:b6:a3:53:d5:0e:5e:fb:34:e0:ef:5b:05:
         c9:72:36:73:d6:09:a9:0b:e5:30:37:78:48:83:e5:df:8e:9e:
         46:23:c3:b3:9b:e0:38:0a:c9:ed:4c:9d:b8:5d:fe:da:54:e5:
         c0:44:5e:c3:af:29:92:b2:c5:9b:31:33:3e:a0:22:e0:a8:01:
         9d:3d:7e:31:c2:d0:5e:34:63:e1:29:50:b6:64:3f:91:fc:67:
         0b:8e:09:22:bb:a4:ed:a0:65:60:a1:0d:67:ef:96:9f:2e:9f:
         b7:84:31:71:11:2b:90:6b:f0:4c:48:e5:40:5b:12:d9:6f:6d:
         a4:03:ac:40:c6:b3:4b:a8:20:8a:08:7e:b6:47:8f:f1:27:27:
         5b:7f:9c:0c:23:5c:5e:02:e7:21:1c:52:36:f0:bb:e2:8d:cc:
         32:3f:7e:7d:98:dd:a3:0c:aa:b9:a5:bf:79:fb:37:14:c7:3d:
         a7:74:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:23 2025 by rpki-client