Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File:                     Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier:          LPZ/U5AMhaw8W01hheBUMq7psRYSyyrYv61/MOGSvJQ=
Subject key identifier:   2C:BA:DF:3B:AF:8F:00:9B:D8:47:EB:0A:9A:A4:A5:B6:61:DF:D6:13
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer:       /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial:       019A01B61739DC55AC784E355F80DF7EB8F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number:          0A35
Signing time:             Mon 20 Oct 2025 13:01:41 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:41 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:41 +0000
Files and hashes:         1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
                          2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: 8hV+/kxQkRMDvwTUzx5IEsxh17IewHolHsltgNUPGXM=)
                          3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b6:17:39:dc:55:ac:78:4e:35:5f:80:df:7e:b8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
        Validity
            Not Before: Oct 20 13:01:41 2025 GMT
            Not After : Oct 21 13:01:41 2025 GMT
        Subject: CN=2cbadf3baf8f009bd847eb0a9aa4a5b661dfd613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:b4:f3:cf:5f:fb:10:2c:55:ec:83:55:7e:
                    02:4f:0f:31:1f:cb:5a:c5:8e:a8:0c:b4:f4:69:5e:
                    cb:47:a8:69:4e:c1:42:ba:da:f3:68:1a:20:a7:ba:
                    fb:b5:65:37:c2:8e:2d:7f:67:6e:b4:00:e7:16:d5:
                    e2:43:c2:6b:b5:81:98:75:a8:33:f3:7c:a4:8a:ea:
                    61:ba:61:98:bd:24:c2:41:c2:31:7d:07:84:5c:80:
                    31:65:c3:95:18:a8:81:12:ce:d2:04:fa:98:8b:d1:
                    3e:14:93:af:ed:94:8c:c7:a4:0e:93:f2:6d:21:2a:
                    e1:03:10:7a:6a:b7:37:8f:b2:24:3b:07:18:c7:b6:
                    12:3e:32:94:ad:f6:88:44:c6:4f:72:48:23:4f:60:
                    a4:87:be:2b:c8:a6:32:ff:a6:db:8d:13:8f:94:e2:
                    ac:7d:25:b4:b7:75:38:d9:3a:47:dd:ba:b8:b2:1b:
                    6b:a2:af:2f:e4:85:80:8e:60:f4:e2:90:e2:b0:dd:
                    c5:82:9d:ed:9b:cd:10:84:25:33:dd:8d:c3:3e:08:
                    5d:14:d7:44:03:41:03:ad:c8:86:04:36:bc:a3:b6:
                    d6:6a:80:ab:ee:6b:5f:b7:39:ac:f2:4b:f6:dd:bb:
                    68:44:34:6f:cc:a5:fd:1f:9e:a4:f0:0e:8c:6c:fb:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BA:DF:3B:AF:8F:00:9B:D8:47:EB:0A:9A:A4:A5:B6:61:DF:D6:13
            X509v3 Authority Key Identifier:
                keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c2:3d:ed:3e:93:fc:21:f3:c4:08:1e:27:ab:5d:00:2e:40:
         af:70:34:98:84:61:c9:f8:b0:44:f8:4a:a6:b8:67:14:bb:cb:
         97:cd:0a:2e:d7:2b:25:83:ef:da:63:48:75:2f:d5:71:ac:08:
         7b:10:af:03:d7:e6:23:86:32:b1:ba:a0:2d:be:06:cc:cb:25:
         a0:00:a8:9d:64:9f:05:4a:a5:86:60:72:22:5a:2f:3d:a4:d1:
         f9:44:a0:49:0c:b8:79:0b:a9:c9:e5:39:14:1d:ee:67:58:b4:
         1c:11:53:71:87:44:d6:dd:a7:83:37:4b:05:2a:6a:c8:f3:e2:
         94:97:2e:24:64:59:02:eb:dc:b7:c5:13:aa:b3:11:25:08:23:
         af:cd:6a:3c:19:32:79:1a:a9:58:89:03:4d:0d:4f:fa:ae:cd:
         7d:6c:51:14:f2:7b:e6:49:80:34:94:bb:c9:d2:19:59:3a:ac:
         2f:a3:8f:1b:62:4c:29:50:ce:c0:91:2e:b5:fd:3a:de:e9:b6:
         15:e5:eb:3e:b8:51:28:68:94:70:45:22:19:71:45:9c:d5:8b:
         dc:ab:a1:0c:b0:3d:8f:9c:bc:55:63:7c:98:c6:b4:a7:90:69:
         cd:dd:db:b0:c9:62:cc:54:73:82:cf:20:76:89:bf:ba:3d:83:
         7c:69:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:21:48 2025 by rpki-client