Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
File:                     vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json)
Hash identifier:          7BEIaYgvQInxL1LT6+06fJIHc/BpXXYQHKqX3pSFWGs=
Subject key identifier:   12:DF:97:8A:13:D2:CE:9F:E2:E4:5F:73:24:8B:8E:16:DB:81:8C:6A
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Certificate issuer:       /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial:       0199FD3409BEDC783F20806F1E1C8F00FE63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
Manifest number:          0C3B
Signing time:             Sun 19 Oct 2025 16:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:09 +0000
Files and hashes:         1: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (hash: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=)
                          2: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: TKeZgQmLXTywsZZ/aC6XqgYPS4CWxiRKeQyMdSCnTCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:09:be:dc:78:3f:20:80:6f:1e:1c:8f:00:fe:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
        Validity
            Not Before: Oct 19 16:01:09 2025 GMT
            Not After : Oct 20 16:01:09 2025 GMT
        Subject: CN=12df978a13d2ce9fe2e45f73248b8e16db818c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4f:29:d9:a6:8d:88:aa:3c:76:25:81:ca:02:
                    08:a4:e7:fb:f8:b6:0a:48:6d:b0:94:12:ae:d2:65:
                    05:a6:b2:9b:38:86:b2:49:f0:6a:93:c0:27:02:15:
                    d2:bb:bb:26:3a:3f:9a:0a:b7:06:69:7e:d3:6b:3a:
                    07:d9:02:cb:3f:26:f8:7a:db:10:65:c1:83:27:27:
                    ef:95:38:2a:24:19:ec:3b:5d:91:cc:c3:25:dd:af:
                    c0:f0:27:0e:e2:15:0e:28:47:ba:55:a0:52:8b:d8:
                    96:5b:93:07:6a:5e:69:fd:f6:35:e3:40:96:7d:1d:
                    6d:3a:15:85:3b:04:99:13:d6:ee:fc:e7:98:ac:bc:
                    81:7f:d4:7f:b1:8d:d0:da:58:b5:ba:54:31:da:81:
                    fd:f5:62:b9:52:e7:bc:ab:05:25:1c:11:89:68:1b:
                    a0:45:41:79:27:72:26:98:31:89:9f:d9:97:87:8b:
                    00:44:61:4d:ef:4a:30:1c:3f:b4:b2:76:14:cf:35:
                    09:20:8d:66:69:bc:30:0a:d3:8b:51:34:24:31:0f:
                    59:7d:a1:d1:67:cd:32:4d:54:79:f3:9c:ed:8b:1c:
                    72:7a:60:de:68:90:84:c2:86:13:fa:75:29:20:98:
                    a7:6c:6a:a2:04:64:bb:c8:94:e1:c9:1f:c1:90:b9:
                    a2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DF:97:8A:13:D2:CE:9F:E2:E4:5F:73:24:8B:8E:16:DB:81:8C:6A
            X509v3 Authority Key Identifier:
                keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d6:58:2a:ae:60:12:af:96:94:a0:b3:5b:c6:9c:78:bd:03:
         a6:b0:c9:cf:3b:62:8f:f8:50:66:ae:63:d0:3a:25:f4:98:0f:
         24:d1:31:61:33:f2:b1:d0:ff:61:59:fc:37:e9:16:03:85:0e:
         82:74:2e:ef:87:b6:69:9a:55:15:35:2a:3c:d8:43:d1:84:4a:
         9f:47:d2:4e:ee:12:1f:aa:be:2a:64:46:32:c1:2b:04:01:b6:
         ba:24:9f:78:97:7b:a0:62:12:54:51:3b:5e:35:dd:e7:62:e7:
         54:b1:87:41:6e:20:ed:5a:c4:d5:07:52:cb:76:69:83:88:0b:
         fa:59:43:0b:3c:97:ee:57:6a:c2:21:b6:7e:38:c6:f7:f6:c3:
         1d:82:79:3e:42:80:28:65:a7:93:8e:70:0b:6b:14:35:ad:8d:
         24:12:d4:29:6e:7f:3e:07:38:8c:a5:48:d3:f0:b5:36:12:9a:
         9b:da:f7:f8:65:1a:3a:1f:eb:ca:73:7b:b3:80:5d:4a:67:b9:
         ef:85:e5:a6:e3:1f:63:0e:4f:5e:94:88:0a:83:5c:34:da:b9:
         f4:e2:37:bc:05:3c:f0:13:df:eb:e5:6e:64:8d:75:dc:7e:71:
         5d:a0:81:1f:1b:fc:13:09:f5:69:05:69:0c:b4:f2:85:a5:24:
         b9:99:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:58 2025 by rpki-client