Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
File:                     V4jMDw7cVfJvTBtahve-RVHU4xU.mft (raw, json)
Hash identifier:          RU9ExHETejyMne3y88zFEZtAbBgjgK/bWfu0k0+RZ8E=
Subject key identifier:   B9:A0:DE:F6:41:0D:E9:DA:B1:28:BD:CB:DE:04:35:91:AE:25:CA:56
Authority key identifier: 57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
Certificate issuer:       /CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
Certificate serial:       019A003556AE47F336A3BE699C46D4B10260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
Manifest number:          012B
Signing time:             Mon 20 Oct 2025 06:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:26 +0000
Files and hashes:         1: V4jMDw7cVfJvTBtahve-RVHU4xU.crl (hash: MDmtplIEPXMRAXewHbpKuXOmIABlrMtq4IwArPKPqhg=)
                          2: hkwJsKiTfC8rW3KRi6Vmul-Orv8.roa (hash: c0qpWB0aVtdIXpzZykn1cgENgV2hof3vV2QdsHMYwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:56:ae:47:f3:36:a3:be:69:9c:46:d4:b1:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
        Validity
            Not Before: Oct 20 06:01:26 2025 GMT
            Not After : Oct 21 06:01:26 2025 GMT
        Subject: CN=b9a0def6410de9dab128bdcbde043591ae25ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:63:4a:4d:04:ac:3d:a9:78:9e:83:42:b5:
                    4f:8c:68:0b:08:31:80:c0:42:39:e3:be:35:68:b6:
                    68:d4:95:eb:24:44:e8:23:a0:88:92:fd:78:e1:39:
                    cd:fd:d0:93:5a:d5:df:54:ea:a5:ea:4d:d7:6d:61:
                    1c:77:3b:f0:f1:aa:a6:c3:a2:70:ad:47:b2:96:80:
                    c1:47:45:b0:dd:1b:66:d6:67:19:bc:4e:3e:c9:51:
                    06:05:12:aa:aa:d7:82:f4:2c:c0:6f:33:04:65:d3:
                    16:a1:2f:41:94:e1:5c:bd:a1:37:1a:a7:7e:f8:f9:
                    a0:e8:72:d0:2b:ea:8b:a4:81:c8:2e:a4:9f:c2:4f:
                    8b:13:aa:35:d3:46:5a:f2:a2:ce:e4:42:45:cf:8a:
                    44:b0:98:ac:d0:37:33:02:26:f9:59:72:98:31:8c:
                    3d:76:95:1c:a0:cc:9c:00:2f:11:cc:a6:f1:e4:e6:
                    b6:d4:0e:e5:56:c9:c8:89:cc:56:fd:ed:44:cb:b0:
                    77:d9:1b:f4:ce:80:5d:15:b3:d2:44:77:0b:d5:ef:
                    00:96:2d:6a:4e:1f:c4:15:36:fb:76:a1:19:37:1e:
                    78:06:de:64:55:45:28:db:70:81:b8:d3:e8:50:d9:
                    ca:71:7f:24:88:98:92:f6:78:12:44:a1:06:1f:9d:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A0:DE:F6:41:0D:E9:DA:B1:28:BD:CB:DE:04:35:91:AE:25:CA:56
            X509v3 Authority Key Identifier:
                keyid:57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:34:fc:33:50:a4:bd:dd:61:10:3e:db:87:a9:4c:86:a1:a0:
         60:d0:e9:b1:86:78:a0:fe:3c:43:22:c0:e4:8c:09:27:e2:69:
         af:89:c2:6e:41:8f:0b:d3:1a:d2:27:4f:f6:f9:a7:cc:df:ae:
         a9:e1:a4:1b:0a:0d:55:2f:10:d0:2a:56:ab:29:f2:39:b2:43:
         a9:16:03:85:f8:28:e4:0e:3a:33:e3:17:cf:08:fc:a1:a4:81:
         34:8d:67:78:c3:1c:25:00:96:50:b9:67:aa:ba:77:b4:25:72:
         b4:4e:bd:60:c1:ce:ed:84:48:0b:fb:dc:86:96:fc:85:db:71:
         ec:75:19:0b:67:43:07:e5:5b:e8:69:21:c7:45:6c:af:dd:0d:
         e4:47:8c:27:07:03:28:03:42:80:3c:13:67:40:15:ee:76:04:
         ab:46:8a:34:30:86:d0:35:81:1a:e1:81:7e:85:8e:ec:82:f5:
         a8:07:d1:c9:2f:30:09:f0:01:77:34:ae:d2:40:27:d7:8b:4d:
         73:71:e5:1f:3a:cb:8d:c2:6b:3e:1d:08:38:b0:67:be:83:3d:
         34:e0:9f:3a:8b:ff:7c:33:81:d4:94:bb:60:13:39:c9:85:b1:
         85:4d:81:a7:9d:0f:08:60:91:b8:ee:e3:ba:94:43:74:88:9c:
         24:17:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:30 2025 by rpki-client