Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File:                     tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier:          WU3hgzeD8RmmBYDvDvogIjqDPRiFzuwGL5iycpPp6Ig=
Subject key identifier:   FA:9E:9B:08:7B:12:19:4C:54:A2:8F:4F:EC:51:74:E7:70:FF:43:8D
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer:       /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial:       0199FB7C9C6DA5EA563DC6AD1C33F47A21B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number:          0D45
Signing time:             Sun 19 Oct 2025 08:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:11 +0000
Files and hashes:         1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
                          2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
                          3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: kg4fLHh+qZFYNwo7H35n01/DmC6YNw6ih/yOaJo2FpA=)
                          4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9c:6d:a5:ea:56:3d:c6:ad:1c:33:f4:7a:21:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
        Validity
            Not Before: Oct 19 08:01:11 2025 GMT
            Not After : Oct 20 08:01:11 2025 GMT
        Subject: CN=fa9e9b087b12194c54a28f4fec5174e770ff438d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:7d:24:df:26:5f:7e:1b:56:19:51:4a:80:
                    fe:4f:23:19:01:65:ac:fd:1d:d7:84:a6:ae:9d:97:
                    be:7f:3d:a2:fa:f9:af:17:9a:43:82:15:b2:1a:de:
                    f6:34:b2:4d:34:b6:68:d9:03:8d:f0:aa:f9:6b:8c:
                    b1:21:3d:dc:f7:00:e1:64:48:e0:fb:45:65:df:09:
                    58:b1:d9:52:c9:2f:46:20:dd:4b:68:65:0c:6c:26:
                    69:98:49:d4:a8:26:52:e8:65:ad:d4:e3:ce:aa:83:
                    fd:6c:b4:28:84:93:20:44:93:53:48:32:f8:f8:ea:
                    04:0e:c9:80:0c:3b:a7:e2:ef:87:6d:d0:d2:ce:5c:
                    68:c4:9b:b8:73:ad:88:60:28:62:b1:9d:79:1a:97:
                    bd:67:de:ee:4b:96:7a:2f:c0:c5:f6:06:6a:cc:d3:
                    b2:53:7c:37:d3:d4:08:52:e3:1c:a8:58:ee:5e:ad:
                    40:b6:96:70:a7:1b:35:22:6d:41:52:75:45:45:65:
                    ee:47:40:b4:ea:59:6d:1b:2e:b2:65:44:fe:40:86:
                    65:34:46:27:9f:13:2c:75:0d:05:e3:4e:80:08:5e:
                    e5:be:79:30:7c:fe:65:e8:79:70:9f:59:f6:fc:86:
                    54:b5:df:a1:db:52:dd:cd:3a:de:22:f2:f9:b6:78:
                    00:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9E:9B:08:7B:12:19:4C:54:A2:8F:4F:EC:51:74:E7:70:FF:43:8D
            X509v3 Authority Key Identifier:
                keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d4:22:2e:a9:46:66:d9:1e:89:92:fc:46:95:18:01:cc:59:
         19:96:d6:d0:75:f8:25:e8:98:bf:e5:9b:8c:77:ff:74:bc:72:
         ce:37:87:bb:b9:a3:05:a2:9f:0c:1e:38:c1:45:e2:6a:f0:ef:
         09:bc:e2:1d:08:33:c7:d8:5d:28:ef:57:e4:25:6c:21:ce:be:
         6e:2a:38:f4:0e:88:0f:01:43:f6:20:31:90:45:2d:90:66:8a:
         86:ec:f7:3a:c2:48:cf:33:0b:86:9f:84:7f:a5:6a:07:dc:bd:
         5d:3c:e2:38:e5:20:17:e5:db:fd:6e:35:6e:d9:f6:a3:62:86:
         a3:49:55:d7:f8:51:6e:d6:2c:08:23:aa:c6:3f:6f:76:99:86:
         ca:c1:f8:46:0e:28:9c:08:37:25:76:8b:9a:e9:0d:52:4d:0e:
         ab:8a:4b:15:e0:16:58:30:cd:2f:3e:f9:e9:2a:2a:cd:31:9b:
         a0:c5:7d:ba:1c:5f:ae:a5:60:d6:c2:20:c0:1b:0f:09:a9:f0:
         57:d1:bc:0c:73:0c:14:6b:80:0b:86:07:d6:d4:df:a7:22:74:
         e1:b2:64:43:5b:4e:d7:41:02:e1:6c:48:d9:e9:8b:ae:92:65:
         0e:e1:cf:46:83:6a:a4:6c:c9:bf:a0:21:b9:c1:dd:5f:b8:c6:
         7e:11:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:49 2025 by rpki-client