Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File:                     vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier:          I2Rx8eiLnv848C+gRX/kQhq5ZuGPCHoYst1ju28ElYg=
Subject key identifier:   20:71:62:12:8F:21:D0:CB:56:16:E1:E7:D1:5C:E4:4B:3C:76:89:1F
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer:       /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial:       019A2F321BF283BC590EE809378EFE6DBC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number:          16FF
Signing time:             Wed 29 Oct 2025 09:00:04 +0000
Manifest this update:     Wed 29 Oct 2025 09:00:04 +0000
Manifest next update:     Thu 30 Oct 2025 09:00:04 +0000
Files and hashes:         1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=)
                          2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=)
                          3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=)
                          4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: Yah4SGzPITQolN1DHcTfDv2eoxtcnB88NO+MsRfeYaA=)
                          5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2f:32:1b:f2:83:bc:59:0e:e8:09:37:8e:fe:6d:bc:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
        Validity
            Not Before: Oct 29 09:00:04 2025 GMT
            Not After : Oct 30 09:00:04 2025 GMT
        Subject: CN=207162128f21d0cb5616e1e7d15ce44b3c76891f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:7c:dc:05:bc:2f:3c:a6:0d:7e:ef:36:0a:
                    5c:2c:23:03:97:bc:a1:48:a3:f9:a5:fd:e6:0a:d1:
                    03:b4:85:69:49:a4:62:b9:6b:85:36:47:2e:b9:31:
                    bb:5f:e1:1f:04:79:f6:df:ba:9a:ca:95:92:5f:c1:
                    bf:2c:be:fd:52:a0:fb:a2:e0:e0:06:d9:73:e0:69:
                    7e:49:0c:db:da:dd:b1:56:02:5f:36:c3:3a:b3:a4:
                    ab:3c:9a:1b:13:8d:5d:b2:2b:de:1f:7d:20:23:48:
                    a5:35:42:c1:fe:d7:d3:3f:70:92:63:d9:c4:5a:09:
                    75:87:ec:e7:0f:fe:7b:39:1c:2b:e7:4b:21:d8:1d:
                    48:cd:df:30:f6:20:62:12:ff:93:b9:81:00:ba:a9:
                    f6:9b:52:8e:e3:56:7d:9c:66:0f:20:a5:a0:5a:fd:
                    bd:f8:1a:51:07:bc:ff:23:76:11:74:0f:f1:86:d6:
                    7d:e0:f0:23:07:17:2f:79:d7:d7:a4:68:42:a4:39:
                    43:84:fc:b4:43:36:48:38:c3:8e:c1:a2:10:4c:10:
                    43:00:29:0d:d0:59:98:43:a9:2a:82:1a:ec:19:71:
                    38:87:dd:aa:d6:f4:79:43:fd:0e:c9:a0:75:d3:52:
                    b9:99:aa:c3:5f:1d:11:b9:bb:7e:57:3a:55:cc:ab:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:71:62:12:8F:21:D0:CB:56:16:E1:E7:D1:5C:E4:4B:3C:76:89:1F
            X509v3 Authority Key Identifier:
                keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c2:09:c4:1e:c7:1b:8f:84:05:37:3c:f7:de:9e:df:a7:44:
         7d:7b:32:6f:63:77:4d:e2:c0:ae:b6:72:e6:51:0d:49:b9:42:
         1a:34:38:00:5b:99:d7:d8:a5:bf:7d:a6:4b:28:e5:6b:2d:3c:
         52:c7:1f:aa:f2:97:de:71:47:13:db:e8:28:f4:90:2b:cd:64:
         d9:27:11:ba:8c:7f:be:29:46:de:26:b5:46:bc:89:e4:7d:3f:
         ec:22:62:1a:4d:23:b5:a5:11:7a:18:fa:bd:45:aa:0c:94:53:
         91:d8:c2:f6:ff:5c:b3:37:72:28:95:57:eb:e0:93:58:29:91:
         77:ea:f6:57:2e:d0:94:c3:f7:af:b7:45:dd:3c:18:ee:fb:80:
         a7:55:9f:2b:96:fb:16:03:e7:b5:14:de:7f:55:a9:07:c0:c9:
         85:34:bd:a4:9a:e8:26:8a:a5:70:a9:72:44:67:95:da:5f:93:
         29:e2:06:5f:a1:b4:6b:b9:d3:f9:47:37:1f:ae:51:eb:6a:c1:
         b0:de:ac:00:75:37:d2:c4:86:48:28:26:75:fe:2c:cc:32:ae:
         c3:b0:e1:66:24:ac:4f:ca:34:1a:9c:91:30:a8:3e:cc:6e:8e:
         98:f0:09:88:be:41:d3:cf:84:89:6b:32:60:e2:52:92:66:c5:
         02:05:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 14:49:06 2025 by rpki-client