Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File:                     xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier:          6JSciKMNloi+NDFP/pnNUp7/FCbJUUZMDIISmerxfuE=
Subject key identifier:   23:5D:A8:F0:43:54:5F:DA:D7:AE:55:2B:BC:54:5F:12:5F:1D:9D:B0
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer:       /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial:       019A03DA78599AA72255CF7DD04B7B8A7DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number:          0633
Signing time:             Mon 20 Oct 2025 23:00:40 +0000
Manifest this update:     Mon 20 Oct 2025 23:00:40 +0000
Manifest next update:     Tue 21 Oct 2025 23:00:40 +0000
Files and hashes:         1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
                          2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: gaZkJvszKKhGv27EerVThLicZEUkfMwmgQdop0mPXHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:da:78:59:9a:a7:22:55:cf:7d:d0:4b:7b:8a:7d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
        Validity
            Not Before: Oct 20 23:00:40 2025 GMT
            Not After : Oct 21 23:00:40 2025 GMT
        Subject: CN=235da8f043545fdad7ae552bbc545f125f1d9db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:6d:9a:a4:ba:8e:35:be:48:d6:c6:ed:28:
                    ce:c6:05:9d:b3:39:41:fb:b3:d7:8c:e2:b5:d5:bd:
                    7f:a4:08:f2:54:2e:3c:07:6c:44:e4:7c:5e:e0:28:
                    aa:1c:83:e1:6d:a0:0a:23:5e:d4:31:0b:ba:69:4c:
                    21:66:8e:ef:a2:57:a2:23:58:d5:c0:38:fd:31:4e:
                    88:12:cc:f6:95:0c:c1:9b:75:9f:2a:20:f2:8f:70:
                    18:ad:8b:51:4a:40:ab:d4:47:9a:9d:b3:0c:ce:31:
                    28:d7:ce:99:28:1b:be:e1:fd:89:a8:5f:6e:40:88:
                    9c:ca:10:49:5a:c6:5f:ae:5b:1d:e5:b9:dc:ef:7b:
                    6e:93:5d:6e:0b:97:59:8a:21:69:b1:d7:66:67:7c:
                    56:95:0e:45:83:7d:65:29:f4:10:47:3a:c4:4c:27:
                    e7:b8:57:99:cd:a6:3f:3a:b2:d2:68:28:82:4d:6a:
                    61:2c:69:5c:e7:45:ee:97:af:0c:fd:b4:20:d1:93:
                    40:54:d7:20:9d:68:63:65:86:f5:70:33:d2:08:e8:
                    72:ca:9c:8b:24:c5:dd:8d:98:c2:17:01:51:25:48:
                    c3:19:e0:c8:0c:4c:aa:fb:c3:82:e3:c5:03:60:ce:
                    01:fb:e3:30:e3:ac:a6:8d:08:25:b8:00:93:12:5f:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5D:A8:F0:43:54:5F:DA:D7:AE:55:2B:BC:54:5F:12:5F:1D:9D:B0
            X509v3 Authority Key Identifier:
                keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:87:39:61:12:3d:f4:f8:22:a7:87:2d:7c:60:b2:e4:ce:8d:
         55:96:e2:9e:d1:da:d4:70:fd:ba:77:89:45:14:9b:ae:43:a7:
         28:62:36:bd:e5:da:51:7a:ab:2c:c1:1a:53:1c:f7:94:7f:1e:
         a0:2f:d0:80:ba:f6:6d:d0:de:d1:23:2a:78:5e:80:fc:30:97:
         96:fa:0a:8b:6a:84:af:b0:58:44:5c:1f:c9:30:88:be:88:cd:
         15:c2:24:8b:17:cb:63:42:ad:f4:33:42:e7:89:d6:af:c1:51:
         a9:f3:29:06:b9:72:4d:09:63:94:41:68:cd:a3:c8:52:85:3f:
         f9:ce:44:0f:1d:ea:db:e1:ce:ff:a5:b0:a8:8f:87:9b:6d:d2:
         1e:99:20:c7:f5:b1:99:1f:dc:83:6d:4a:5b:3c:5c:08:55:0a:
         99:ec:6e:45:35:c6:f7:70:1c:33:c0:22:d5:14:45:8e:ac:1c:
         48:20:fd:da:ee:47:15:36:50:2f:ac:98:04:d4:ab:c2:80:04:
         a7:e3:c9:f5:09:a0:bf:67:d8:bb:6d:05:f8:b1:6b:00:ce:ee:
         c9:68:66:4f:89:67:e0:d0:88:e1:0b:de:ac:8d:19:61:6f:35:
         22:ef:48:87:13:a4:ed:75:97:cb:d7:3f:ad:b8:06:7b:34:0c:
         ee:7a:3d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:27:51 2025 by rpki-client