Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          ag9q7tPIsO/wFppUL5fNXSqRP06Gu6WQS5odHFWoIRU=
Subject key identifier:   28:E5:40:3F:1B:32:0C:55:2F:3F:19:0C:E7:3C:1B:40:81:39:42:8E
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       0199FDA1C3AF851D501CC405A448BBC25BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0812
Signing time:             Sun 19 Oct 2025 18:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:00 +0000
Files and hashes:         1: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
                          2: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
                          3: X6FG8vp9oU-aDKMjJlvZ1w9-TRg.roa (hash: GAtjgJydI1/w8ZnGJHE5GCoTGzEp1QKcuNq0x8TAna8=)
                          4: eqHQLvrEyFem_zOL2dGPtQbOrHE.roa (hash: xkijKwZrCJTocpD11ugimO21ZJdJ5XVb/oBsAvogKmM=)
                          5: kPNpqlKlXSRN44fbkT0lmJ0OXx0.roa (hash: FyhtVVwzpFsgGl1UF2q6lWuO2wd0bFbhXtZPTezLBtQ=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: d4HQ9hdWL7iDJEZzpb7FQm1V86+ERLg4tfvs3A35F30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:c3:af:85:1d:50:1c:c4:05:a4:48:bb:c2:5b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Oct 19 18:01:00 2025 GMT
            Not After : Oct 20 18:01:00 2025 GMT
        Subject: CN=28e5403f1b320c552f3f190ce73c1b408139428e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:6a:9a:cd:40:b0:61:72:ca:b8:a9:b1:87:
                    03:e7:fd:d6:24:ab:ee:f3:ac:c6:03:d9:c8:6c:59:
                    0f:45:7a:79:ac:8e:9e:19:a2:1b:c9:fc:74:94:e8:
                    9c:0f:82:e5:4d:00:e9:f3:d2:ad:19:07:a4:48:3b:
                    f2:fc:68:f2:2d:a4:20:d4:c8:4f:8c:9c:c6:1e:84:
                    26:b2:63:86:13:5c:77:92:9e:14:44:b1:d7:16:a5:
                    de:ce:18:e3:16:e1:fd:e6:35:d0:94:94:3d:e3:56:
                    01:d2:0a:a9:1c:7e:80:37:38:27:c8:d4:d0:3e:d7:
                    61:5f:20:a8:e1:40:46:49:fc:70:8c:d6:2d:3c:d0:
                    f3:a9:86:e2:20:66:ad:d1:54:de:8b:f9:da:4e:50:
                    57:94:3b:90:2b:1f:0a:9f:be:3a:20:e9:65:ea:35:
                    ef:d6:2d:92:96:af:a2:ea:cf:dc:b1:1f:2e:e5:f2:
                    67:f8:43:24:e1:c6:1d:4e:42:39:e9:cc:bb:50:a1:
                    91:f1:00:1e:15:6f:57:1f:8b:06:59:2c:aa:9d:f6:
                    08:27:07:7e:4d:bc:75:46:d0:04:e7:2c:21:59:b5:
                    b6:51:07:71:8f:df:04:4f:a8:a6:27:4e:58:42:46:
                    65:bf:6b:d6:71:91:16:07:7b:cf:fc:01:63:36:65:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:40:3F:1B:32:0C:55:2F:3F:19:0C:E7:3C:1B:40:81:39:42:8E
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:e4:6a:28:19:98:5b:db:93:48:79:ce:90:ff:b8:2a:66:
         18:f6:41:d2:b5:92:03:51:02:1f:0e:90:4b:3c:e2:31:f5:37:
         8a:af:d9:40:7f:27:df:32:78:b7:06:16:3a:5d:70:99:ae:23:
         dd:ff:1a:53:30:b8:ac:9c:54:6f:e9:30:ae:50:cd:52:ae:63:
         f3:f2:4e:5d:d8:3e:43:b1:a0:36:33:4f:1c:a8:27:bf:2a:bc:
         fc:53:63:94:d5:9c:0b:58:d6:bd:33:e5:90:82:a5:b4:53:1c:
         5b:08:ad:4a:50:0f:20:4d:60:73:59:4f:54:cb:2c:fc:65:7a:
         db:82:af:09:bd:2b:dc:c8:41:2a:46:ba:34:f9:34:ca:c8:68:
         f9:40:35:d8:2b:3a:95:e4:ef:e9:cd:c0:a3:9d:58:2e:b4:c5:
         1c:e8:d0:8c:b3:4f:7e:fc:0b:ce:1f:f6:c2:7c:45:d1:e0:68:
         13:62:b6:d5:33:71:42:d6:d9:0b:ea:4a:9b:3a:6a:68:3f:b2:
         14:03:9b:95:e0:ca:0b:57:86:d1:e2:53:99:88:3c:83:c1:3c:
         b4:ec:ba:f8:6f:38:16:49:15:d7:66:6f:ca:d4:cc:ea:d3:74:
         e6:55:b4:54:39:6f:95:ec:f6:85:9e:2b:55:95:38:2d:72:9d:
         65:e3:92:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:42 2025 by rpki-client