Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          TXHFpxoyfYfc2m/g09rQBoaqRANU1fbod0jVqs4RhSY=
Subject key identifier:   6C:63:88:CE:51:87:6F:92:50:29:8D:28:9E:54:F3:13:19:53:DA:54
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       019A2F69AB3ED065B55F7FE28829244B0F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          162E
Signing time:             Wed 29 Oct 2025 10:00:45 +0000
Manifest this update:     Wed 29 Oct 2025 10:00:45 +0000
Manifest next update:     Thu 30 Oct 2025 10:00:45 +0000
Files and hashes:         1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: gqKEQPC2BG8JF5lM0Kp5b3b4t+faZqU6OyO5iLSoI/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2f:69:ab:3e:d0:65:b5:5f:7f:e2:88:29:24:4b:0f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Oct 29 10:00:45 2025 GMT
            Not After : Oct 30 10:00:45 2025 GMT
        Subject: CN=6c6388ce51876f9250298d289e54f3131953da54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6b:f8:1d:50:36:5f:8d:34:7e:fa:6c:e4:22:
                    c1:24:b8:b3:40:29:77:e9:26:e8:fb:b8:c7:f2:a7:
                    57:f2:70:32:ed:1d:97:d9:d5:b5:f7:f7:b0:9b:ea:
                    b9:b2:77:12:48:bc:be:11:4c:45:d0:75:0d:07:5e:
                    1a:1d:ef:03:d7:cf:1c:ba:67:c7:8e:99:78:1a:ab:
                    47:8b:b2:d3:00:b5:a3:fa:2c:9e:e7:4f:83:ac:68:
                    40:e7:74:3f:43:19:91:80:47:84:6f:f2:be:95:fc:
                    b5:7e:41:a5:cf:3d:45:91:0d:03:d9:85:97:9b:ad:
                    37:03:ce:b4:ae:d5:4f:99:9a:5d:fb:ef:53:0c:7e:
                    6d:6b:29:4b:5c:46:fb:83:8e:7e:92:71:70:9b:61:
                    17:c4:4a:33:a2:4d:52:d7:c0:89:9e:97:12:14:15:
                    d5:e7:16:0c:ae:66:76:44:23:df:af:f2:12:f5:70:
                    02:7e:af:39:79:13:c1:2c:03:d9:71:9a:bf:60:9c:
                    3b:12:a7:41:84:f6:ea:c9:10:31:87:34:74:3c:57:
                    2a:7b:65:0a:89:0c:80:24:4b:97:4c:50:af:7b:de:
                    2a:27:89:1a:4b:00:5f:1d:cd:9e:9a:05:8c:5a:17:
                    e1:d5:82:89:22:bc:4f:0f:00:2c:93:b1:74:9f:f6:
                    07:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:88:CE:51:87:6F:92:50:29:8D:28:9E:54:F3:13:19:53:DA:54
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e8:38:0d:64:a1:98:a6:fc:08:63:07:3e:b4:7d:64:3b:96:
         24:c9:c6:71:6d:ac:78:0b:3e:d9:a0:70:24:61:9e:fd:06:bd:
         09:8f:64:4f:31:bf:27:66:51:cd:a1:85:86:b8:b0:7c:9b:f4:
         fb:a5:f5:94:09:f1:3b:7a:96:12:92:ab:96:2a:45:72:90:ab:
         6a:80:f1:3b:23:6d:2b:02:3e:30:6e:70:c8:a6:07:c6:96:42:
         94:22:5a:15:14:96:be:a8:4e:07:e4:12:01:ff:d6:ff:c5:25:
         42:61:13:c4:28:d8:51:cc:f2:5b:a6:c1:1d:31:a7:9b:f1:28:
         67:d6:b9:d7:6d:f9:a7:fb:30:74:80:43:0d:54:29:f7:43:03:
         03:96:8a:ca:b4:c4:dd:9f:c5:59:f9:47:5d:2c:b2:84:dc:86:
         fd:56:ce:4b:32:0a:70:0f:78:00:2a:30:bb:db:87:68:40:6e:
         fd:c1:cf:a7:ac:33:ac:5d:cc:56:8d:86:23:53:d9:e7:4e:ec:
         a8:30:98:7a:1d:5d:33:ad:37:12:4f:54:38:74:6c:2a:a3:1f:
         68:50:ae:69:37:d2:59:be:57:12:38:cc:97:dd:e0:e3:30:8f:
         ae:04:c6:75:1e:e4:45:27:4d:ce:e8:39:d9:9f:30:d3:53:65:
         c3:d7:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 11:12:25 2025 by rpki-client