Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
File:                     tVNDqiHHSjn81Rg_T99V3EZ56D0.mft (raw, json)
Hash identifier:          XGkjmv+iKout5XsUr5sI1PzxGoLaow/5Y+d6Bdkfm4Y=
Subject key identifier:   F9:EB:BF:FE:14:32:E1:89:C6:B4:93:2F:C9:33:0E:9F:57:3A:4A:42
Authority key identifier: B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D
Certificate issuer:       /CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
Certificate serial:       0199FE46D94C38B85B34A7B44CAF47C564A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
Manifest number:          021B
Signing time:             Sun 19 Oct 2025 21:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:19 +0000
Files and hashes:         1: RXmLcd13ajoTVlcEirVukYVayjY.roa (hash: VMYnLhwMDYwO9ah7mzCKDLgq1vs8pRSHkOzi/+9nkdg=)
                          2: tVNDqiHHSjn81Rg_T99V3EZ56D0.crl (hash: rvMdEoDfObf2oaRvhLMeLh5mlrjLmkQa9qzMQYscdm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:d9:4c:38:b8:5b:34:a7:b4:4c:af:47:c5:64:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55343aa21c74a39fcd5183f4fdf55dc4679e83d
        Validity
            Not Before: Oct 19 21:01:19 2025 GMT
            Not After : Oct 20 21:01:19 2025 GMT
        Subject: CN=f9ebbffe1432e189c6b4932fc9330e9f573a4a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:f9:94:ab:8c:8f:23:0d:c5:2e:e0:81:26:
                    39:a8:07:9f:bf:64:7a:38:b5:e5:fa:0b:6d:18:80:
                    01:3c:88:e0:3d:3c:73:e3:53:3f:37:aa:25:99:c2:
                    bd:59:de:ec:5c:d3:53:80:dd:89:84:7a:be:75:0c:
                    9d:c9:8c:c7:4d:22:fd:99:30:d0:a6:9d:84:07:a3:
                    09:0b:da:eb:12:10:02:6b:ba:0b:4b:cc:c2:7d:60:
                    00:18:f4:c0:bb:05:89:c4:36:73:ba:50:da:f8:38:
                    32:d2:d1:b2:6a:9f:af:11:0a:6d:bf:3c:2b:b5:29:
                    d1:59:bd:7d:c7:dd:0a:2a:b0:eb:3f:ec:d0:e5:15:
                    f5:fb:f6:d9:07:eb:ea:ae:36:ab:36:7d:47:07:35:
                    33:7f:57:89:11:74:99:8f:42:fa:f0:9a:a2:cf:d4:
                    7a:b0:78:07:d3:f9:7d:12:59:6c:f0:9d:d2:0a:d1:
                    5e:9a:f9:fc:42:1f:de:7a:c8:67:9d:f2:cf:de:fe:
                    b3:b2:1e:e9:d8:e7:83:59:4b:89:d2:2e:fa:a6:40:
                    ec:42:32:56:50:2c:0d:18:f6:d3:dc:2b:99:37:a1:
                    2c:fb:76:c9:21:8f:a1:a6:5e:82:9d:8d:6a:3e:51:
                    c7:15:5a:ae:7a:aa:c8:82:8a:92:2b:2c:17:83:2e:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:BF:FE:14:32:E1:89:C6:B4:93:2F:C9:33:0E:9F:57:3A:4A:42
            X509v3 Authority Key Identifier:
                keyid:B5:53:43:AA:21:C7:4A:39:FC:D5:18:3F:4F:DF:55:DC:46:79:E8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVNDqiHHSjn81Rg_T99V3EZ56D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c49c08-92ab-4cb1-809b-4ec7b5efae37/1/tVNDqiHHSjn81Rg_T99V3EZ56D0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:32:d7:ab:a8:db:3f:7b:4e:c1:f0:d3:05:00:1c:06:81:8d:
         88:68:51:c8:aa:b2:fb:82:92:25:0a:41:1d:d8:b4:a2:53:ae:
         8f:07:98:11:d5:73:bf:cf:07:7b:cb:fb:87:85:bd:e3:b0:bd:
         ad:9d:bc:ef:71:a4:4d:33:41:0c:2e:31:44:28:0c:32:83:f9:
         42:b6:8e:cb:b4:72:4e:e8:6a:0b:91:52:fd:c7:77:e9:63:0a:
         fc:b3:a0:40:f3:2b:09:07:85:e5:39:78:12:dc:82:80:40:26:
         82:1e:01:78:ad:4b:f3:5a:52:c3:1b:14:7d:b8:fd:5a:82:c1:
         33:da:c9:41:62:4c:5d:dc:3d:1f:85:f0:dd:3f:10:2f:d7:70:
         4d:96:0f:23:43:80:ab:a3:b4:53:78:86:de:c0:89:d3:b7:5e:
         f5:f0:e9:74:b9:f2:29:3c:c2:bc:46:7f:6c:74:fb:b5:f7:56:
         dc:82:c4:e2:1d:5d:3a:fc:4d:1c:63:3c:36:a3:7e:e9:b7:d3:
         e3:b4:2d:be:86:f4:2b:d3:9f:48:76:4b:05:34:0d:6b:39:86:
         76:92:b4:5f:60:8d:a5:cb:08:23:4c:e1:b4:ad:04:a9:ef:92:
         3b:80:52:6b:56:51:4b:bd:e2:37:01:54:0e:ac:a4:81:ba:87:
         aa:07:26:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:14 2025 by rpki-client