Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
File:                     sVXa3bhxudalPNa0f3diUIN_d3Q.mft (raw, json)
Hash identifier:          gs39GMOEqOibdoHzHH9EklIVtes81ulXNv1pTbcUBKQ=
Subject key identifier:   A0:AB:82:C0:A0:5D:8D:CE:80:96:63:2D:10:71:23:7E:06:26:51:6C
Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74
Certificate issuer:       /CN=b155daddb871b9d6a53cd6b47f776250837f7774
Certificate serial:       019A53ACAFEBBA41BD221034585AE3E9A115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
Manifest number:          119C
Signing time:             Wed 05 Nov 2025 11:00:17 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:17 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:17 +0000
Files and hashes:         1: SEy_q8yasarL4vhAyv6DcTF7WB8.roa (hash: B1SRh1WwCZtBHMAKkgvifQJ/iJUggGCgGgLLkNss5Nw=)
                          2: ahvH7VwsREz5RE_ZFd3kIxelgEQ.roa (hash: udwWfKom+EbN8jk91UYE1hrtLtfJILvdv1JBZTIFT0w=)
                          3: qFzA_pZ_xGWwQzfJMInzfWDKkuQ.roa (hash: 9OvJ6Tjvc0ybgSO+B/2T4VgdwfSjKx3tRoZuZYIdcTc=)
                          4: sVXa3bhxudalPNa0f3diUIN_d3Q.crl (hash: KUSUxP8ebLyC4++Z6yEKTQZjD2D2uCjk25PXOqTLNyg=)
                          5: wZzuntLr1Qz8EEQrI8gaxN9PJzk.roa (hash: /amIoY3uoWrTi9ErwL/m7gwpV0plV6uE2N5Muk44yLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ac:af:eb:ba:41:bd:22:10:34:58:5a:e3:e9:a1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774
        Validity
            Not Before: Nov  5 11:00:17 2025 GMT
            Not After : Nov  6 11:00:17 2025 GMT
        Subject: CN=a0ab82c0a05d8dce8096632d1071237e0626516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:b2:a8:be:43:ee:55:fa:aa:59:56:c8:3f:
                    7e:3e:f0:6d:8a:e6:6d:bc:03:da:00:49:15:7b:32:
                    31:e2:15:6e:1e:80:2b:ec:f8:b6:93:ad:4d:4b:ea:
                    b1:da:04:e3:06:10:b6:2f:fc:45:ca:17:56:2a:b4:
                    64:50:70:a3:71:e1:bd:23:d2:43:56:56:2c:c6:62:
                    b5:af:ee:2c:6e:b0:77:fa:23:b7:ab:72:18:45:6d:
                    6a:19:51:d5:35:2d:0b:29:f9:bd:55:42:d6:77:a8:
                    7d:5d:7c:69:ff:cc:67:ac:38:24:0a:5e:70:16:46:
                    ec:49:a5:a9:a2:9d:88:5e:bf:29:64:a2:9b:6e:32:
                    03:dd:d0:91:7b:25:bd:7c:e7:b2:95:dc:33:5a:39:
                    78:8f:f2:79:fe:fc:7f:8f:91:0f:81:1d:f7:4f:ee:
                    e3:8b:0f:8b:94:df:dd:87:c7:5c:4c:10:a3:99:02:
                    6b:9c:37:ae:27:82:46:5d:15:92:1a:49:9d:23:f5:
                    b3:73:e8:93:63:ed:11:07:41:0e:fa:ed:dd:b2:50:
                    d0:1d:83:4c:21:c6:6e:3e:31:6e:04:05:d3:b1:7a:
                    ae:f7:f0:20:2c:63:b2:0f:c1:de:53:e8:23:45:4f:
                    f1:cc:22:f3:cf:13:21:4f:4a:57:0f:64:be:0b:58:
                    10:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AB:82:C0:A0:5D:8D:CE:80:96:63:2D:10:71:23:7E:06:26:51:6C
            X509v3 Authority Key Identifier:
                keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a6:1b:ed:03:11:5b:44:fe:3a:1b:cd:75:9b:39:85:e2:22:
         20:31:aa:20:ac:01:9b:35:cd:fd:89:bb:df:22:3a:6f:75:ff:
         6b:6d:94:76:2f:2b:b3:cc:c0:8b:15:74:63:93:88:86:9c:60:
         d8:06:3f:6c:62:25:76:7b:47:b8:9f:32:38:3e:6c:94:00:16:
         b6:4f:52:00:a8:e0:b8:80:7a:07:44:22:63:a6:72:6c:03:ed:
         52:cc:63:8c:0a:29:18:c9:65:83:91:7b:57:1d:ec:79:85:84:
         eb:7a:1c:34:76:c4:b1:1c:b3:20:08:d9:80:39:2e:23:01:ac:
         4e:7f:e8:cb:cd:17:38:c0:16:64:60:b2:66:42:70:cd:83:61:
         b1:d6:c9:3c:a1:e5:a1:67:92:5b:a1:49:01:dc:60:2c:2d:bb:
         d1:90:b2:82:e0:d3:89:fe:f1:0e:f9:1b:bf:9c:05:73:c8:38:
         41:95:16:0f:6a:16:00:d3:1a:5b:47:79:0a:2a:0f:cf:8f:74:
         c0:c8:e3:3c:62:fd:56:13:37:49:eb:fa:07:e6:18:f7:f4:e9:
         49:09:4e:31:59:2f:af:81:12:30:c1:0c:a1:e8:7a:93:fa:37:
         48:3f:0a:33:4c:21:f1:c3:38:95:ba:15:e9:f5:8e:33:9c:d3:
         93:d6:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:22:30 2025 by rpki-client