Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
File:                     Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft (raw, json)
Hash identifier:          JHIMqfjcWbXngYL4KlhZlS3SSmZsdU5/4WMDFsspseY=
Subject key identifier:   62:BF:A0:79:19:F3:34:27:FF:22:2F:CF:CA:C8:01:5D:78:87:F6:A9
Authority key identifier: 3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7
Certificate issuer:       /CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
Certificate serial:       019A29D4E9FB4F0A0EBC25F05827D1CDCF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
Manifest number:          05F8
Signing time:             Tue 28 Oct 2025 08:00:10 +0000
Manifest this update:     Tue 28 Oct 2025 08:00:10 +0000
Manifest next update:     Wed 29 Oct 2025 08:00:10 +0000
Files and hashes:         1: Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl (hash: uN3ZLeVhsl4I8VpwESaMDoHbu5mM5bMpkSOxrP2GUqQ=)
                          2: Vdq57AskBeGBDlheyUDZPLCNdoE.roa (hash: lcSr2I4ArSoQ0YCCVynBh24JIyZ+E5ztrMNakx+ay84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:d4:e9:fb:4f:0a:0e:bc:25:f0:58:27:d1:cd:cf:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebfaf8a1aa3bc1ff3e3e430c67fb7a6410a3df7
        Validity
            Not Before: Oct 28 08:00:10 2025 GMT
            Not After : Oct 29 08:00:10 2025 GMT
        Subject: CN=62bfa07919f33427ff222fcfcac8015d7887f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:f2:af:b3:63:fb:ee:b0:9c:01:25:bc:b9:
                    b2:3c:2b:a7:6c:58:44:07:39:7f:71:84:af:d8:cc:
                    e1:6b:0f:7b:44:55:21:f9:b8:97:67:ac:d0:9a:9f:
                    e3:8d:a4:61:17:72:09:c8:4a:51:a8:ec:d2:e2:7f:
                    b0:25:5b:31:02:60:c3:31:fe:78:47:e5:57:b8:52:
                    30:38:a8:b9:d9:3e:57:5b:f4:ac:b8:e6:b6:4e:50:
                    31:31:a0:37:fa:b8:fd:af:88:5c:d1:68:fb:5b:3c:
                    2d:16:e8:56:42:47:71:fc:56:5d:64:71:53:82:6a:
                    ce:22:ae:46:03:c0:1f:75:71:33:c9:b6:33:18:e2:
                    e7:77:71:25:22:cb:62:33:46:65:2c:20:42:c7:9f:
                    98:27:40:eb:d8:fc:41:28:4e:81:59:33:ca:df:c0:
                    0b:ce:92:37:59:0d:88:af:25:95:d2:fc:b9:c6:1b:
                    53:bb:0e:b0:fa:8d:f2:94:22:c2:52:d6:7b:fe:6f:
                    b1:bd:e2:ce:fd:c0:0d:2a:08:38:26:06:00:73:50:
                    42:a8:f8:c2:2d:3a:eb:d4:63:92:f9:89:80:d0:70:
                    3e:79:ba:e7:9c:0a:d1:07:ee:b4:20:c1:ea:6e:33:
                    22:53:58:74:fc:f0:5c:87:69:01:17:72:56:02:fb:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BF:A0:79:19:F3:34:27:FF:22:2F:CF:CA:C8:01:5D:78:87:F6:A9
            X509v3 Authority Key Identifier:
                keyid:3E:BF:AF:8A:1A:A3:BC:1F:F3:E3:E4:30:C6:7F:B7:A6:41:0A:3D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/218b0e-54b5-4ad0-9aa0-efd1a098b485/1/Pr-vihqjvB_z4-Qwxn-3pkEKPfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:26:68:8e:ff:1a:06:93:d8:5c:64:1f:30:f7:e1:62:0f:
         7c:af:97:5a:8b:e5:8a:0b:05:b3:a2:b6:0c:81:65:1d:db:19:
         a9:ed:ca:b8:71:61:c0:34:b4:ed:e1:18:f9:f2:27:62:2d:61:
         8a:40:12:6a:d0:59:da:8c:10:73:88:be:00:fd:a3:8d:0b:e9:
         ca:d0:f3:af:c6:fd:e3:75:bd:d7:79:f6:d4:35:58:92:25:a9:
         0a:e9:62:7f:24:c9:82:8c:c7:fd:1a:f1:64:01:a7:d2:38:5a:
         92:00:97:ff:50:d1:69:fa:89:19:52:f6:5f:e8:fe:94:54:e8:
         86:ae:0b:15:24:ea:97:37:a0:44:f3:8b:00:37:13:25:62:c6:
         25:ed:87:22:82:1b:29:b2:60:3a:3e:c2:29:b6:c0:e6:c6:43:
         95:ed:a9:62:55:e2:ab:6c:c1:bd:f1:00:07:2c:24:46:f5:ec:
         d6:fe:46:7d:95:0d:76:b5:6e:8e:61:42:e2:c7:ce:36:19:85:
         4a:ca:ad:46:73:48:3a:f3:31:b6:65:4a:6b:b9:f5:22:27:36:
         0c:8d:98:8d:5e:84:05:fd:64:af:c0:7a:b9:d2:5a:ac:0c:ca:
         41:82:69:88:99:35:ad:57:18:af:4b:a8:19:65:76:bb:0d:7d:
         29:61:33:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:39:41 2025 by rpki-client