Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File:                     vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier:          C7DIZfb3S1WVs1+B+EId36ce5roqxEvAps3jHc7ZfsY=
Subject key identifier:   73:B8:66:1D:0F:E3:9B:A6:99:B4:8B:F4:ED:8C:1D:94:E4:B8:A4:DE
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer:       /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial:       0199FD6B686F7DE64B447F80936099614054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number:          0A58
Signing time:             Sun 19 Oct 2025 17:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:38 +0000
Files and hashes:         1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=)
                          2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=)
                          3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=)
                          4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: ae53paCDGS85BxGptP5KuQisVhFnrP2FUQhiohG1Z5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:68:6f:7d:e6:4b:44:7f:80:93:60:99:61:40:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
        Validity
            Not Before: Oct 19 17:01:38 2025 GMT
            Not After : Oct 20 17:01:38 2025 GMT
        Subject: CN=73b8661d0fe39ba699b48bf4ed8c1d94e4b8a4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f5:76:f0:4c:0b:b2:3c:f9:79:d9:c9:39:02:
                    b1:72:82:48:de:20:fc:9e:71:a8:4d:a0:02:3a:96:
                    e7:1f:5e:cc:7e:f2:1d:23:5b:ee:6f:97:6b:4b:cd:
                    75:fa:09:c1:1e:ac:90:b3:34:04:4c:78:3d:7c:05:
                    f0:77:09:d2:c7:45:73:73:a2:43:0e:3b:2b:eb:94:
                    7c:c2:f5:11:59:b5:b8:b2:cd:9a:3d:0a:f5:3a:c6:
                    7c:ec:3c:da:60:b9:46:57:1d:3b:f3:f4:a0:dd:fc:
                    36:3f:ca:ba:fa:b4:31:04:b2:d5:6e:f4:d7:b8:ca:
                    cb:c3:1b:22:0c:ec:6a:38:2e:f1:37:4d:64:06:23:
                    49:e1:bc:13:82:ae:02:eb:ed:63:2d:64:60:68:41:
                    7b:e9:14:be:d4:56:ae:80:54:54:5c:ec:39:c1:46:
                    3a:1b:9a:4e:12:bf:c8:68:2d:7f:9a:d2:ed:00:81:
                    18:29:b3:8b:82:60:7f:17:c1:d2:62:ea:59:1d:f2:
                    26:bf:54:01:be:e3:60:e2:02:4c:e9:37:75:d0:aa:
                    41:ed:df:b8:8f:cf:24:6c:75:37:14:df:81:ba:9e:
                    f5:78:87:ab:a0:91:1d:1f:b3:bd:01:d5:2e:a7:65:
                    3a:5f:4f:40:d5:ba:41:b9:eb:35:f8:67:7b:48:ac:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B8:66:1D:0F:E3:9B:A6:99:B4:8B:F4:ED:8C:1D:94:E4:B8:A4:DE
            X509v3 Authority Key Identifier:
                keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:25:14:29:94:04:b2:04:f1:58:c3:d7:83:8f:23:c6:55:
         5d:50:e9:6d:ce:03:24:ef:a9:4c:e0:09:bd:36:e6:fd:bf:25:
         87:a6:08:48:1c:c7:e9:54:26:31:6d:95:15:5f:9b:be:dc:17:
         9e:d9:53:3f:38:78:e8:2e:02:c4:f8:ea:de:e5:eb:c5:12:1c:
         9c:cf:eb:23:7b:7c:fc:31:f2:18:bb:90:8d:73:b6:2b:62:a3:
         76:1f:44:6d:d6:83:be:95:90:d0:67:f9:57:ed:bd:73:2f:6e:
         04:e8:9a:73:58:4d:bd:89:dc:ed:2b:17:dc:52:9c:98:41:f5:
         bd:81:bc:c8:5e:6d:e5:1a:2c:ad:ce:3c:49:5b:de:51:a8:4d:
         a8:39:b5:c8:35:ab:e1:fb:e0:ef:f2:fe:ea:49:d0:b6:e5:0d:
         11:43:90:2e:9a:19:5b:08:18:b6:6c:66:4f:2f:43:64:73:e0:
         1e:fc:cc:72:6d:9f:01:1c:e5:35:30:3f:52:74:49:e3:c4:3d:
         af:bc:82:d5:44:18:4d:d6:7e:22:d2:a1:02:d0:b3:25:73:32:
         52:f7:90:3a:83:6e:c6:39:23:40:15:a9:0e:39:77:95:43:d8:
         17:f6:ab:4a:43:2e:af:1a:f2:86:cd:93:86:3a:e4:57:c7:9f:
         12:aa:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:45 2025 by rpki-client