Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File:                     vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier:          2jslpbsFo1ktlo6I75MZqpDgIeeQkJLtaQAPwEkFRwY=
Subject key identifier:   38:C4:DD:63:E9:71:9B:12:E4:97:FF:6A:D5:A6:96:0D:9B:3F:19:53
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer:       /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial:       0199FBEB9AEE9C29153779F3C79FC4EBFBD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number:          0D13
Signing time:             Sun 19 Oct 2025 10:02:25 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:25 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:25 +0000
Files and hashes:         1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
                          2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
                          3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: 66Y1cu6pTRTe0Rh/xf+3RgqeSJu7eThgGrMyWR4OqtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9a:ee:9c:29:15:37:79:f3:c7:9f:c4:eb:fb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
        Validity
            Not Before: Oct 19 10:02:25 2025 GMT
            Not After : Oct 20 10:02:25 2025 GMT
        Subject: CN=38c4dd63e9719b12e497ff6ad5a6960d9b3f1953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3c:85:a8:7c:14:d9:42:f3:c5:f3:c7:44:f1:
                    aa:de:33:76:0f:30:c9:4d:56:cc:de:ed:99:53:9d:
                    8e:01:39:48:ff:67:d8:16:45:29:1d:cf:55:c1:eb:
                    81:62:8b:5b:20:2b:4c:12:d1:d6:0b:cc:7b:14:c2:
                    9d:1c:4a:6c:19:ea:f6:ce:7a:d4:5a:ed:40:c7:81:
                    a5:3e:1a:11:1d:b3:ee:c4:68:59:9d:2a:49:3d:71:
                    35:36:b2:7c:f3:05:4d:bf:e0:ea:3c:18:8b:ff:f1:
                    8c:b3:cd:87:6d:1e:d4:ef:1b:e6:f5:ce:dd:04:64:
                    17:68:d3:19:5f:00:a3:e0:f5:06:c7:20:92:75:f4:
                    bd:aa:05:b9:b6:f6:d0:d7:b2:04:37:33:2f:44:8d:
                    c8:da:61:2c:17:1d:cf:ec:97:21:40:51:f1:d8:0f:
                    66:8e:17:6e:13:a7:1f:39:d2:76:fa:2d:50:c4:12:
                    91:4a:14:6d:b5:ba:a4:b7:f1:8c:58:2d:62:a5:44:
                    fb:75:9a:63:10:3b:09:a0:fd:68:13:b6:3a:d1:e4:
                    8a:b9:54:d5:a5:cd:26:55:d2:29:c5:cd:0a:c5:b7:
                    d4:62:3b:b1:31:85:3c:4b:59:be:aa:2b:dd:31:a5:
                    d8:c8:d8:23:ec:bd:48:d0:ff:dd:50:18:c3:0e:e2:
                    52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C4:DD:63:E9:71:9B:12:E4:97:FF:6A:D5:A6:96:0D:9B:3F:19:53
            X509v3 Authority Key Identifier:
                keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:ab:12:26:58:21:85:5c:0c:5b:5c:42:c4:a5:46:9b:e4:
         5f:61:98:c1:d7:1f:40:b9:9a:08:54:6d:98:9e:7d:3e:0a:30:
         21:df:b5:57:2e:86:a5:2e:da:52:68:04:1b:08:3d:00:a7:a5:
         81:fd:b1:2f:10:59:81:26:96:67:51:43:e4:69:6e:71:ab:a0:
         9b:28:6b:26:63:ae:8e:d2:ea:c5:19:62:fb:de:9a:2e:eb:6d:
         f5:f2:53:4f:d4:5f:5a:99:f5:06:bb:d2:e1:82:a4:44:5a:27:
         5f:6c:2f:5a:eb:f2:b1:b4:bd:b5:96:38:bf:55:38:2b:35:0a:
         a4:a6:77:fc:a6:54:6f:96:d7:3e:f1:d3:dc:99:10:0e:ae:c8:
         1b:b5:db:11:30:a4:40:83:e4:b3:28:ed:25:7a:9e:be:6d:cc:
         10:43:ea:f6:bc:90:66:4e:c7:43:70:b8:0b:e8:08:1a:d7:fe:
         eb:dc:bc:e7:00:74:a7:08:6a:af:ee:46:c7:13:8f:d3:ce:06:
         57:51:90:53:cf:06:50:a6:8b:ad:d5:83:26:a6:5e:23:9e:a7:
         e9:6f:13:01:79:a1:26:47:af:ca:66:cf:a1:4f:85:fe:f8:81:
         31:69:28:78:ab:0b:e8:ea:ea:ad:63:28:c0:32:3c:f3:1b:8c:
         94:2d:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:21 2025 by rpki-client