Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          U0vv8CohEhV9mseVqzF43lLgO18x/uJxw1VCT4yeOOw=
Subject key identifier:   B1:9A:97:0F:71:85:9A:D6:A8:27:BB:4D:97:76:C2:D9:25:91:6F:CD
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       019955D69ECA100452D01EFCB05E659BD1B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          168C
Signing time:             Wed 17 Sep 2025 04:02:32 +0000
Manifest this update:     Wed 17 Sep 2025 04:02:32 +0000
Manifest next update:     Thu 18 Sep 2025 04:02:32 +0000
Files and hashes:         1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
                          2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
                          3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
                          4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
                          5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
                          6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: q3yemPDwM9QeDCdm6SdFRBeP8QEi2EQRBJTYtzb186E=)
                          7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:55:d6:9e:ca:10:04:52:d0:1e:fc:b0:5e:65:9b:d1:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Sep 17 04:02:32 2025 GMT
            Not After : Sep 18 04:02:32 2025 GMT
        Subject: CN=b19a970f71859ad6a827bb4d9776c2d925916fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:1c:1a:36:45:b2:13:de:46:60:da:8b:95:
                    71:71:cf:90:9f:3d:af:9e:f4:14:a3:6e:bd:7a:86:
                    76:0f:7a:48:28:cb:79:43:91:eb:3f:9b:c8:ee:ea:
                    cf:4f:dd:0a:e6:07:d8:ce:ba:a1:cf:1b:47:9f:c1:
                    84:cd:08:86:9a:8c:0d:28:b5:0d:d4:5c:cf:0a:2b:
                    c3:15:ea:ec:1f:22:1b:35:6c:92:3c:ee:bd:86:13:
                    de:70:06:6e:24:2b:79:94:6d:e0:14:d7:de:1d:bf:
                    ea:3d:76:54:18:ce:8a:99:b4:6a:f7:8f:61:a7:b7:
                    ca:c2:61:23:5c:1f:25:f1:0d:2e:a8:4a:aa:17:b8:
                    02:fe:1d:98:8c:d2:a7:7c:71:ae:4d:d7:c3:8e:f5:
                    92:96:53:e1:a6:c6:50:e7:c1:7e:96:35:08:74:fc:
                    8e:bc:5a:4c:a0:12:24:bb:ae:08:03:f4:7d:7c:9b:
                    d5:cd:a8:98:5d:21:51:c8:af:33:00:30:e6:82:db:
                    8b:a3:71:89:96:f8:d1:79:39:54:94:19:8e:7e:1c:
                    c9:1d:35:6c:60:79:24:71:81:b3:2a:6f:d3:82:cb:
                    70:c6:23:bd:80:60:62:9e:c6:b1:af:9e:54:60:63:
                    8e:8c:39:d5:82:7a:83:2d:7a:b1:61:31:b1:0b:1a:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9A:97:0F:71:85:9A:D6:A8:27:BB:4D:97:76:C2:D9:25:91:6F:CD
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:27:89:47:2e:29:eb:e4:bf:a8:0b:fa:1d:d2:b3:23:dc:
         a1:d5:f2:41:c8:b0:8b:c2:3e:98:65:c6:b9:a5:35:06:ed:97:
         45:fe:85:af:28:dd:22:54:43:53:4e:f1:e0:c8:6c:35:5e:16:
         d3:67:fb:17:a0:3f:ae:83:4b:bd:dd:74:a7:a6:92:e6:06:0c:
         fe:7a:47:b0:0f:ce:d5:b4:c6:ea:e6:92:67:63:28:cd:17:3d:
         26:72:59:26:b2:65:cc:8a:59:42:b7:c2:c5:93:74:eb:16:0e:
         4d:c8:12:7f:b5:95:09:bc:f1:03:d8:9f:d3:17:7f:d7:58:64:
         a5:11:a5:e5:a5:62:df:0f:9d:14:3c:8b:44:ea:15:a0:6f:ed:
         c0:4a:87:f5:39:35:ed:f6:1d:74:c8:ed:d6:8e:75:33:b8:5a:
         75:9b:b7:55:80:99:f1:c6:4c:8d:f7:c4:e5:45:fa:9b:aa:63:
         4c:74:c7:86:8c:99:47:08:6e:13:18:ad:6a:2d:74:52:9a:2a:
         cd:a0:29:c7:30:8c:28:02:66:24:f4:88:5f:1d:5c:02:14:8a:
         a6:c7:a3:af:45:ca:38:87:a6:dc:57:cb:74:84:0d:b7:92:3b:
         29:2e:a5:c3:bd:54:3b:cc:a0:34:20:5f:2c:da:4c:82:9a:61:
         6f:ae:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 08:19:21 2025 by rpki-client