Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          vvg4gOzkAcF/S9DV9KZUYLM+JSQQaKxNIHOo2C8XFVk=
Subject key identifier:   E7:48:ED:5C:DF:55:32:02:1B:38:01:D8:43:66:A9:35:FE:78:40:61
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       0199FC588689996AD45C4F584AD9F13D9886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          1720
Signing time:             Sun 19 Oct 2025 12:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:24 +0000
Files and hashes:         1: BxktpTM0O4l-7Qywr4XGaTh7fCQ.roa (hash: Dp10pRUrJQYwQwB7pFjXetXyeK3jB7q+R/i/kEK18qU=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          4: a1inG8KfvIXN5vExc0NSdROHb6M.roa (hash: AIPq2LbVW47spagW1XJ+tnzHBS7q8+GYATJClpwcsjQ=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: n9IaHKIIBjdM/TCN6TN6sdAx8fvPlyn3jG63n/G0cBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:86:89:99:6a:d4:5c:4f:58:4a:d9:f1:3d:98:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Oct 19 12:01:24 2025 GMT
            Not After : Oct 20 12:01:24 2025 GMT
        Subject: CN=e748ed5cdf5532021b3801d84366a935fe784061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:17:f7:96:de:d2:7f:bb:37:ed:33:b0:5f:
                    0b:39:e4:23:d4:87:20:89:f6:31:46:6c:7e:5a:c0:
                    f4:03:4c:29:04:9a:11:af:95:07:e3:62:e8:03:fb:
                    24:da:68:4c:27:f9:3a:72:f6:c7:d2:19:aa:72:18:
                    9c:81:db:c2:0c:88:70:6a:86:db:7f:81:31:f0:71:
                    05:52:cc:20:7c:0d:88:22:7a:bc:56:07:ac:55:6d:
                    31:48:fc:dc:9a:46:bb:79:fa:f1:3a:02:5b:c7:30:
                    da:03:24:29:54:8d:b8:03:e9:70:d9:bb:b5:62:32:
                    21:12:33:24:26:db:d5:dd:73:47:4d:1d:1b:10:25:
                    0c:e4:22:2d:02:81:05:a1:71:45:3d:83:a5:e2:4a:
                    5a:18:eb:b3:c2:14:9c:9f:82:01:0c:ee:69:61:e8:
                    ad:ee:f0:29:dc:54:50:c0:1e:05:bc:81:f8:65:72:
                    18:c6:55:58:7b:1f:e1:e1:43:25:ac:44:71:c0:62:
                    96:2c:44:b8:e2:f0:f7:ed:7b:7a:bf:69:f4:8e:71:
                    be:6c:93:5b:ec:4b:c8:34:19:49:4d:6e:0d:d9:3c:
                    e3:6c:10:20:52:86:57:8c:35:f8:b9:e1:5b:46:02:
                    a5:71:6c:53:b2:46:23:55:b3:12:58:ee:72:ab:e3:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:48:ED:5C:DF:55:32:02:1B:38:01:D8:43:66:A9:35:FE:78:40:61
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:27:80:6b:84:34:37:0b:ca:a7:90:7a:35:ac:03:ba:12:e1:
         20:15:b0:1b:1f:20:aa:00:81:e1:4e:c6:11:71:be:f1:31:79:
         91:16:03:d5:bc:bc:92:4e:db:c9:fa:a1:eb:05:55:37:20:b8:
         2c:09:92:80:dc:17:17:55:4b:2d:7e:b8:72:47:2a:c1:d2:e7:
         57:8c:8c:f2:b7:87:c7:19:12:9c:6d:60:b7:82:43:92:c7:2e:
         29:95:0f:d9:fc:ac:c4:4c:c8:4b:b2:f7:bd:60:e1:55:d1:5c:
         95:c9:fe:8e:f8:73:5b:f4:4d:55:fc:06:26:c2:bc:f3:e5:1b:
         4c:df:56:dc:6b:53:82:26:74:65:bb:b8:1a:a3:20:9a:8e:98:
         d2:5a:fa:32:3b:53:b8:05:d9:11:98:82:8b:10:a4:3b:9b:0d:
         b0:f8:8c:57:7e:79:27:ee:5e:90:1e:24:04:4b:cb:87:b4:7b:
         72:9e:e4:03:f0:d6:dc:41:aa:9e:4f:a2:92:86:1a:43:03:bb:
         5e:aa:d0:5f:29:bd:46:4a:c2:59:30:dc:36:83:de:7f:56:cc:
         44:af:db:8d:40:6a:ff:dc:b5:bc:5f:28:f0:f9:9c:fb:45:3e:
         fc:20:f4:73:f2:85:94:a6:62:5a:49:81:0c:a3:76:23:ab:2b:
         90:ae:b1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:46 2025 by rpki-client