Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft
File:                     svv-XwWfncE0VDRMkHSVdOzmKfU.mft (raw, json)
Hash identifier:          9abGOQlnKe6TDR4+HFAbDolTIqvM8R9KbXwF2AuLakk=
Subject key identifier:   18:BB:9C:53:09:42:11:0B:B0:93:14:6A:0C:66:0E:7C:05:CA:96:5C
Authority key identifier: B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5
Certificate issuer:       /CN=b2fbfe5f059f9dc13454344c90749574ece629f5
Certificate serial:       019A29D4FE6148FD12727EC0C211C9475CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft
Manifest number:          16F8
Signing time:             Tue 28 Oct 2025 08:00:15 +0000
Manifest this update:     Tue 28 Oct 2025 08:00:15 +0000
Manifest next update:     Wed 29 Oct 2025 08:00:15 +0000
Files and hashes:         1: MbIcAZoGAVfhHG9MQ2l60EAMCzM.roa (hash: wdRwyI8FTU+30il47NoLO3l/QYBTDY3es+i1xkTUDIY=)
                          2: svv-XwWfncE0VDRMkHSVdOzmKfU.crl (hash: tivqP9v9PRxKhh0C4Jo0zGQ2q58yd+z3r/FfRL2amlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 08:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:d4:fe:61:48:fd:12:72:7e:c0:c2:11:c9:47:5c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2fbfe5f059f9dc13454344c90749574ece629f5
        Validity
            Not Before: Oct 28 08:00:15 2025 GMT
            Not After : Oct 29 08:00:15 2025 GMT
        Subject: CN=18bb9c530942110bb093146a0c660e7c05ca965c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:38:76:fe:dd:dc:4b:48:6f:0b:13:93:36:
                    39:4d:28:18:9f:cf:37:03:d5:6d:43:a6:d8:4a:a8:
                    ca:92:5d:0c:19:36:ef:e3:56:ff:8a:8b:b6:61:a8:
                    08:ea:84:db:dc:b4:b8:05:29:e3:b3:8b:04:5d:d1:
                    77:22:ff:ef:68:1b:04:df:a8:3d:c9:24:07:63:31:
                    26:c1:43:db:fc:e6:e8:45:d9:ea:b3:9b:17:d5:19:
                    d1:64:c2:0a:9b:f0:d5:19:4d:3b:86:f6:72:81:e0:
                    86:ea:7a:a9:8a:eb:ea:58:f9:2c:e5:3c:48:a3:16:
                    73:29:ba:5c:62:60:97:9c:32:84:b0:42:51:89:59:
                    b3:dd:ea:61:1f:a1:43:80:23:5f:40:3d:be:94:9f:
                    6e:fb:d6:44:aa:22:38:74:d1:0e:40:93:29:db:fa:
                    08:35:af:38:0c:9a:ae:a0:15:cf:2e:af:cd:1d:19:
                    7e:e3:12:0f:1e:61:06:cd:87:54:74:d3:2a:69:3d:
                    ee:72:f5:32:ad:77:18:f3:d5:2f:b3:ec:ee:e6:c4:
                    c4:d6:1c:7f:26:4c:e5:b3:11:6b:8b:8f:05:ed:61:
                    82:1b:b8:8e:43:95:ce:82:a4:c1:e5:aa:f5:ab:6f:
                    e2:c1:ad:5e:29:a0:fd:7e:5a:c7:99:ec:33:77:a3:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BB:9C:53:09:42:11:0B:B0:93:14:6A:0C:66:0E:7C:05:CA:96:5C
            X509v3 Authority Key Identifier:
                keyid:B2:FB:FE:5F:05:9F:9D:C1:34:54:34:4C:90:74:95:74:EC:E6:29:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svv-XwWfncE0VDRMkHSVdOzmKfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/05c669-04f8-4283-9cdb-60e3e214a63e/1/svv-XwWfncE0VDRMkHSVdOzmKfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:89:af:ba:96:8e:38:dd:6e:fc:da:72:96:d8:52:7a:46:11:
         80:62:97:7e:3e:e2:fa:d4:c4:32:fe:40:32:2c:65:46:52:d7:
         00:a5:0d:d6:c0:fe:74:1a:7f:84:44:4f:82:2c:c7:0e:44:0a:
         46:d5:3b:a3:c0:59:13:da:7c:2f:da:17:cc:e7:70:33:1a:fa:
         9e:f4:a5:f5:0b:37:81:62:75:15:8e:d5:01:2c:59:e8:a9:83:
         c6:c7:dc:1d:ad:48:51:7e:b9:8e:fb:4b:1b:35:30:87:37:f2:
         fb:5e:1c:16:0f:61:dd:3f:d0:51:25:e2:aa:ab:dc:54:52:80:
         27:9c:4e:a4:b5:05:be:b4:67:6b:32:a5:23:39:14:da:e0:8c:
         9a:b8:d8:1c:a7:86:1f:32:5d:41:55:0a:bd:b6:ad:67:b9:20:
         5f:74:18:61:c8:27:cf:c9:51:2f:3d:07:f1:41:d1:ef:11:7e:
         77:cd:a3:cc:33:75:90:9b:e0:9f:da:3d:1a:ba:63:6a:ba:24:
         2e:0d:8a:3b:86:9e:7e:6f:99:9d:18:07:ae:0f:5f:88:d7:67:
         34:b0:a3:b1:0f:93:c5:d9:bd:12:93:3d:a1:4c:6f:9b:61:05:
         72:6b:75:6f:92:7d:de:33:63:65:73:f6:79:b6:6e:f6:71:21:
         0d:1b:7b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:45 2025 by rpki-client