Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
File:                     V2cFtVe4IwhralMjJL-7o2mVyxw.mft (raw, json)
Hash identifier:          nQSTJdHw+B3w79GWekwIi+XjV8ns++q5J4qF5o3bVxo=
Subject key identifier:   30:BB:CE:28:4E:84:B7:61:2A:DA:68:32:8E:5D:E5:C4:F5:7E:18:CD
Authority key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Certificate issuer:       /CN=576705b557b823086b6a532324bfbba36995cb1c
Certificate serial:       0199FBB35C376A5EC62A959F315DE8D42623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
Manifest number:          040E
Signing time:             Sun 19 Oct 2025 09:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:00:59 +0000
Files and hashes:         1: KvGrSnuEc1cM9X2Nk9gFAk0Nuqk.roa (hash: HFWxJLi4fAw0JkNdDx7HNRCU+Sz89xJhj6dOpXyk9UI=)
                          2: V2cFtVe4IwhralMjJL-7o2mVyxw.crl (hash: amz32kYeu4OAgrAy1qbvlVcQHphtvQHuQ81WvJ6JJ3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5c:37:6a:5e:c6:2a:95:9f:31:5d:e8:d4:26:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576705b557b823086b6a532324bfbba36995cb1c
        Validity
            Not Before: Oct 19 09:00:59 2025 GMT
            Not After : Oct 20 09:00:59 2025 GMT
        Subject: CN=30bbce284e84b7612ada68328e5de5c4f57e18cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:27:4e:67:cc:89:85:3a:c9:9b:cc:29:60:
                    c2:25:e2:74:5a:e4:10:1c:16:7d:ed:0a:9e:f0:b6:
                    ed:0d:50:c8:4d:23:15:4f:76:84:d0:bd:da:b5:5b:
                    d0:78:9e:40:19:00:a7:33:4d:6d:6c:b2:8b:5b:88:
                    35:07:91:26:85:6f:6c:a3:16:d0:7f:af:ab:1f:6d:
                    66:de:c7:4f:e3:56:aa:7d:78:8a:e7:04:e5:ed:fc:
                    da:f1:f3:52:da:98:b6:df:b4:49:7b:05:de:f8:a0:
                    7c:06:06:53:c6:69:27:3d:2e:fe:3f:ae:87:b5:a2:
                    a7:6f:dc:85:3a:02:e1:2b:61:ba:f3:09:63:d8:5b:
                    0c:27:73:41:7d:b8:df:8b:67:1d:38:b9:d3:58:97:
                    1e:3a:ff:e4:ac:58:46:e6:d7:cc:df:4a:58:02:37:
                    d3:5c:73:99:f8:0e:36:c0:f7:49:9d:6e:94:66:a2:
                    77:00:fc:0f:7d:e5:3c:ba:92:5a:96:50:8b:a0:4f:
                    62:8c:b4:0a:b1:12:37:7d:46:5f:2b:cf:f7:cd:0b:
                    16:48:6d:ef:95:94:87:9a:d6:71:b5:61:32:5f:f2:
                    6c:78:b9:d4:85:1e:22:fd:26:56:70:e4:ee:2a:62:
                    e6:4a:25:e2:11:61:e3:cd:00:ab:03:9b:45:2b:58:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BB:CE:28:4E:84:B7:61:2A:DA:68:32:8E:5D:E5:C4:F5:7E:18:CD
            X509v3 Authority Key Identifier:
                keyid:57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:7f:1b:95:3e:6b:cf:62:12:c1:8a:77:51:ca:87:70:b1:82:
         ae:9f:e8:38:63:05:5a:69:6b:93:32:c3:06:28:6a:54:58:fb:
         d3:8a:ad:d6:7b:94:95:66:ff:d2:68:b3:07:32:78:1a:4a:0b:
         69:cd:62:a0:4e:23:9e:44:66:23:43:16:3b:d9:2b:f4:4c:4f:
         4d:88:42:35:4b:37:a6:f4:f5:0a:bf:1d:71:02:9f:31:fb:65:
         a0:df:67:89:e4:37:b5:1c:1e:c3:7b:03:b9:9d:94:42:21:c6:
         7a:96:c6:c5:8b:81:f2:56:75:e5:97:78:e2:b3:0e:f9:aa:39:
         3e:04:39:c7:2d:15:21:82:f4:49:ec:c6:34:b0:11:f7:81:85:
         8c:8e:cc:49:20:81:c7:34:18:6a:1e:9f:06:67:a3:39:88:9d:
         6c:e2:11:6e:5d:37:b8:6c:0a:a5:5f:3a:b5:57:0a:59:a4:b4:
         a3:ee:13:b4:63:85:85:7c:07:e0:31:38:54:9f:3f:ba:e7:e4:
         1b:00:71:40:7d:64:10:62:48:54:42:d7:6b:51:b1:73:c2:f2:
         ed:1b:b9:c6:7b:8a:a0:33:be:a4:f2:1e:00:a8:7c:ea:92:e8:
         fe:3f:aa:ca:98:91:9a:2a:bd:79:0c:66:e0:62:26:91:ef:12:
         ea:15:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:08 2025 by rpki-client