Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          wmkxhBtapNN2wkXJ1AV4iAvLwVdpit620inpjr2mXFk=
Subject key identifier:   48:D6:B1:58:24:48:17:41:62:F2:51:7B:92:E4:77:8F:AA:2F:75:15
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       0199FCFD7AC41E1E6B51E9667CCDF10BAD7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 15:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:34 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: N5ErFzqR7MQlzm55mwWaX2GtCcV65NoIBM8VXQ8H/mE=)
                          2: vIhHYLmEHVa7FRdnU3kcgimxEf8.roa (hash: NCzIq7GooEeEiWcAxPp0VOLgVz/cvdDQC34wVi7kJRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:7a:c4:1e:1e:6b:51:e9:66:7c:cd:f1:0b:ad:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Oct 19 15:01:34 2025 GMT
            Not After : Oct 20 15:01:34 2025 GMT
        Subject: CN=48d6b1582448174162f2517b92e4778faa2f7515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6e:d6:57:f6:da:6d:4b:a0:5a:d5:b2:16:fe:
                    32:cf:de:da:04:4d:f5:0a:57:b3:ba:0a:d2:67:77:
                    c2:0a:15:b5:c8:48:30:57:1b:cc:b4:6f:40:b1:57:
                    08:70:82:44:61:26:6e:65:c5:64:04:92:cd:55:42:
                    7d:ec:6a:74:74:4e:96:7d:c8:da:f0:b6:c9:d2:3c:
                    37:aa:30:14:8d:84:94:8d:dd:3f:71:be:71:55:88:
                    1d:11:76:10:dc:1c:3b:29:e3:88:55:ea:93:1c:2e:
                    4e:55:df:a2:84:22:24:e5:ec:ea:78:84:f0:d1:ad:
                    e0:1c:30:cc:88:c8:9d:0e:1c:1c:af:6a:c9:86:d0:
                    a2:19:94:6b:81:e1:36:80:0c:1d:04:fb:3c:c7:af:
                    98:18:ea:96:d8:89:71:c6:fc:a5:39:de:be:c0:cd:
                    5a:a8:88:28:aa:15:84:a7:7e:51:99:f6:2b:d5:eb:
                    f1:75:ab:50:76:28:a4:48:3e:f5:55:b5:ba:21:e4:
                    d3:b1:64:1e:69:18:95:8c:89:76:8c:14:a8:01:a4:
                    f1:f5:0c:3e:64:20:47:17:80:af:fc:95:ab:16:cb:
                    b3:75:46:36:f2:50:39:f7:7e:5a:fa:bf:50:a6:02:
                    02:29:aa:7e:c3:45:9c:14:22:79:25:b3:b7:0d:16:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D6:B1:58:24:48:17:41:62:F2:51:7B:92:E4:77:8F:AA:2F:75:15
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:34:8b:16:16:ff:c9:3c:fd:e4:0c:73:df:f5:38:12:70:8a:
         b4:35:2d:21:a8:9a:e4:6a:70:76:68:4e:16:e1:49:50:9d:19:
         c8:c2:e0:8e:37:1d:f7:0e:7d:24:df:4f:e0:90:88:44:02:62:
         81:57:a8:62:e2:d8:3b:e3:5b:21:a2:a3:47:6a:9b:dc:02:d1:
         62:be:5e:20:a0:34:ae:29:b9:ad:68:19:e1:db:5f:4a:eb:90:
         72:f0:66:38:93:29:af:5f:51:8a:6b:81:e3:99:7a:cc:8a:0f:
         25:a9:b3:cf:83:37:54:5a:ab:9c:e9:01:3b:77:e7:08:60:9a:
         dd:83:b3:ef:35:05:07:e7:10:38:08:59:cf:a1:21:b9:c1:b4:
         56:f8:76:88:a4:44:2b:28:48:32:db:92:6d:94:0f:b6:d9:c9:
         1c:8b:d0:ed:7d:ca:34:ff:ee:b2:7e:21:ed:1f:2e:bc:23:f6:
         4e:7a:2b:06:31:27:82:64:81:0b:ab:4d:ce:2c:04:61:bc:f8:
         e6:7a:1a:f6:97:af:1a:11:42:cb:a1:20:4e:e4:6f:7a:7f:06:
         59:87:ee:76:71:42:43:ca:a1:b8:2d:f5:8a:04:49:a8:39:e1:
         67:c0:73:a1:49:b2:b6:1b:11:b0:20:79:8d:4c:32:5c:5a:d6:
         8f:fe:9d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:04 2025 by rpki-client