Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          WupsbF5xl6SiFGFDpRrpF5by0VR1eYhSk6YlHkIh5yM=
Subject key identifier:   63:44:D6:25:90:84:F8:C1:F9:BB:07:75:1C:31:FD:AE:D6:EF:2E:85
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       019A1D637BA080E7F4348E5FA1A23F82597D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          16F7
Signing time:             Sat 25 Oct 2025 22:00:50 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:50 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:50 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: qYFQefDuxjKfsCR3S5tzVeZOKtQ+5g8OO0QXwnn6RZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:7b:a0:80:e7:f4:34:8e:5f:a1:a2:3f:82:59:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Oct 25 22:00:50 2025 GMT
            Not After : Oct 26 22:00:50 2025 GMT
        Subject: CN=6344d6259084f8c1f9bb07751c31fdaed6ef2e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:9b:e1:da:df:1e:74:39:6a:fc:29:00:f6:
                    fd:ea:ec:3b:b1:9b:82:20:d6:df:c3:37:c8:a4:bd:
                    a5:81:94:58:7f:19:9e:09:6a:d4:07:0a:00:b3:4f:
                    74:9a:12:6a:59:09:03:67:bd:56:ff:49:6e:83:01:
                    8b:dc:64:95:6e:a9:73:2b:9c:09:09:9c:1d:68:7e:
                    ae:64:d8:e4:0b:f8:8b:99:59:b8:7e:ee:3a:ec:69:
                    2f:64:21:a4:c2:bd:ce:19:1a:e0:7d:30:4d:3e:f7:
                    9e:18:a9:3a:55:02:1a:48:fb:c8:d8:07:9a:43:5c:
                    83:91:20:d2:6e:e2:7f:b3:41:5d:1e:61:ce:22:7c:
                    fe:4e:1f:8c:2f:a2:ee:4a:e0:7c:55:67:da:a0:57:
                    5c:4d:9a:28:40:df:f0:3c:6e:e1:c7:98:d2:53:af:
                    de:db:65:b8:ac:55:24:90:8f:19:69:56:58:df:2c:
                    1c:40:5b:d8:ed:76:0a:e9:fd:26:0e:38:09:92:57:
                    a7:4e:fc:d4:6b:ae:9c:93:5f:b8:cc:e3:6b:b5:6a:
                    1d:c7:e8:21:fe:ae:b5:c6:21:99:2d:3e:23:1a:12:
                    8f:d0:91:35:14:39:2c:37:49:4f:30:45:54:89:e8:
                    ab:32:a4:bf:16:1b:11:6d:16:16:e3:af:ed:f1:a4:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:44:D6:25:90:84:F8:C1:F9:BB:07:75:1C:31:FD:AE:D6:EF:2E:85
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6f:6e:73:24:34:30:ee:42:dd:44:5a:19:f9:8e:dc:b3:1e:
         93:e5:48:3a:7b:21:23:67:b0:12:e1:8f:81:4d:7b:da:68:d1:
         20:9d:66:a0:89:f4:04:75:5e:67:f1:09:af:fa:fa:4e:20:a0:
         25:ff:85:ac:56:fe:02:cf:a4:56:2d:e9:ee:d8:16:20:aa:0e:
         27:9c:5b:f2:d4:55:eb:c1:48:2f:b1:4e:70:78:20:4b:e4:3a:
         d7:78:94:02:ae:40:83:ab:7d:6b:b3:6f:f8:0e:28:89:50:89:
         40:24:3a:67:f7:6c:9b:dd:a9:de:11:ec:e6:66:c6:30:c7:54:
         22:8c:34:b8:44:19:0e:b0:d3:c4:f0:f1:c8:9b:d4:b4:77:27:
         db:2d:86:67:27:86:96:c6:d6:76:ea:14:a0:e4:63:73:77:db:
         b7:1e:4b:53:70:85:b4:24:b6:3c:68:51:8b:28:16:f7:66:11:
         06:9b:88:2d:58:5c:48:07:bd:cf:a6:e1:45:29:3c:3d:02:ab:
         73:24:d6:30:f9:3f:ab:d7:79:cf:b3:3a:b1:3e:c8:4c:96:ad:
         23:c1:21:54:f5:77:26:13:33:0d:01:db:34:37:d6:4d:de:da:
         7e:28:25:de:af:2c:ec:5c:84:b6:9f:8c:76:c2:fc:f6:97:0d:
         c9:e0:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:14:05 2025 by rpki-client