Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File:                     4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier:          f6c/aE2Awo1PZacMMxk9qwS0/zfYvpcmpNve+mdMaJo=
Subject key identifier:   44:4A:86:16:E1:81:5C:9D:16:70:04:B7:BF:FD:12:15:94:22:2A:86
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer:       /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial:       0199FBEBE332068A1FAA1E9C86FB80ACFE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number:          120A
Signing time:             Sun 19 Oct 2025 10:02:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:44 +0000
Files and hashes:         1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: ZdlXZcalO3caolgqcsGkRSyfjOwJ+apJZ2JrQpZKChI=)
                          2: NPk_GHNqq8k7MUydVHIUCQUBAQo.roa (hash: 8i7mapEQ11nmMTFwNuWUxWdEwqzqNv3Aacz7I3tfzMk=)
                          3: TY3bJpTGwSql-13Pjck1BzHDr8I.roa (hash: B/70euLBU/mf/YMvD1qZRHP7TxQr60sKZhW4C66SeVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e3:32:06:8a:1f:aa:1e:9c:86:fb:80:ac:fe:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
        Validity
            Not Before: Oct 19 10:02:44 2025 GMT
            Not After : Oct 20 10:02:44 2025 GMT
        Subject: CN=444a8616e1815c9d167004b7bffd121594222a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:ff:30:5c:1b:fd:cd:3f:96:2d:29:cf:f0:
                    df:ee:0c:03:ab:34:36:97:d8:7a:39:9e:16:e9:05:
                    54:4c:15:a1:d6:f5:c0:ec:12:1c:22:19:af:ed:dc:
                    58:0e:df:ac:f0:31:31:e5:4b:a1:d2:b7:da:85:38:
                    c3:cb:e2:7f:51:78:aa:c9:25:37:77:c9:d2:1f:7e:
                    92:63:6d:0b:b0:dc:68:b4:42:2a:da:0e:2c:be:b3:
                    24:99:59:6f:25:d1:89:c2:be:1b:b1:92:1e:f3:89:
                    b0:a6:d4:c8:44:dd:4f:77:a7:31:16:bf:91:f6:0f:
                    2a:17:b8:29:a3:2c:48:e1:5b:d0:1e:e8:bc:55:c3:
                    81:86:35:6e:3d:d8:80:67:9f:cd:1f:0a:a6:fb:e9:
                    ea:dd:51:89:95:1d:71:5a:73:a3:d6:5d:67:1c:f6:
                    0e:fa:69:b4:dc:32:ac:dd:d6:ce:59:39:69:51:9f:
                    75:77:96:1f:17:71:ea:eb:97:4d:ed:8c:36:7b:03:
                    8a:d9:b5:0b:2e:d9:47:c9:b6:0a:c2:de:54:e0:c6:
                    c7:da:d9:91:82:ab:62:86:cd:37:b4:aa:86:a2:15:
                    34:7a:92:35:c1:2f:3e:6d:89:56:93:fe:1b:23:37:
                    ff:69:83:7c:fe:db:83:a1:0f:b9:ab:5d:98:83:79:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4A:86:16:E1:81:5C:9D:16:70:04:B7:BF:FD:12:15:94:22:2A:86
            X509v3 Authority Key Identifier:
                keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:cd:71:64:4f:62:64:f5:33:91:10:96:b5:eb:f4:a3:7a:
         51:96:4c:bc:2c:87:a7:56:08:11:f0:bf:5f:10:55:a3:10:d4:
         03:50:15:73:66:f4:4e:8a:6a:2b:cf:1e:7f:ee:22:9e:1c:b9:
         58:6c:2f:be:ad:9a:d8:cc:2d:36:06:ce:5e:19:aa:99:62:d0:
         71:72:a3:8a:07:c3:09:e7:c2:0b:6b:6a:1d:d1:aa:49:02:2d:
         3f:d9:1a:8e:e6:2b:37:01:85:e4:d8:87:8c:f6:3b:d2:9f:ed:
         ec:18:d4:5d:ca:b8:07:d4:98:eb:b8:3f:62:98:4e:a0:02:1c:
         dd:8a:fd:00:69:6c:8a:e4:0e:43:73:b8:e0:c9:6a:87:e0:c9:
         04:c9:5a:7d:ca:f5:ab:91:9a:54:ea:45:ef:10:56:c9:e5:fb:
         78:fb:0d:37:f8:c9:ec:f9:90:59:d1:de:80:fa:bf:1d:0a:f4:
         db:3f:3e:f8:62:8b:3a:af:1e:bb:68:14:c4:a3:b2:4c:e4:37:
         9d:92:87:5c:72:82:0a:24:cf:42:4c:56:2c:06:df:f2:24:e9:
         58:88:0a:9b:3f:b2:ca:37:31:5d:71:7e:fe:87:81:9c:69:db:
         09:57:fe:b4:58:76:47:d9:e8:53:1c:4b:ed:8a:d3:29:b5:e3:
         4d:a1:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client