Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File:                     V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier:          vcBhATldzhDyefArvTYbtQZlOJit6o1VVrqW+/Knh8w=
Subject key identifier:   E0:14:DA:25:E4:E3:BB:40:6F:DE:27:99:77:F3:5B:04:B5:AD:9C:A9
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer:       /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial:       019A1B3E04B56E6EF06F4826DE25E9B8D27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number:          06B0
Signing time:             Sat 25 Oct 2025 12:00:40 +0000
Manifest this update:     Sat 25 Oct 2025 12:00:40 +0000
Manifest next update:     Sun 26 Oct 2025 12:00:40 +0000
Files and hashes:         1: IN75Wo0DtghUohhXp1U5nsAv_wI.roa (hash: nJLnAhkfX/7UpoKrRsvnQaA4L9D5o2XedZEPGYHEFLA=)
                          2: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: FmdMZY2yHL4LmekImEXIDHHsFvXKmR3U9qMgYgV99JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:3e:04:b5:6e:6e:f0:6f:48:26:de:25:e9:b8:d2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
        Validity
            Not Before: Oct 25 12:00:40 2025 GMT
            Not After : Oct 26 12:00:40 2025 GMT
        Subject: CN=e014da25e4e3bb406fde279977f35b04b5ad9ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:f5:cf:96:8e:c6:1a:26:49:8b:d6:ff:bb:
                    dd:10:c6:59:2d:5e:23:b4:61:f1:ed:33:81:03:34:
                    d4:c2:51:81:bd:e0:20:d4:fc:7b:60:e3:fb:3b:b1:
                    29:51:63:9a:be:e5:6b:98:49:50:b7:b1:3a:7e:1a:
                    ed:24:e1:b5:aa:a3:f5:81:ab:ca:ca:da:48:89:3b:
                    0d:80:ae:6d:82:84:77:bd:1f:92:b8:31:bf:05:96:
                    67:85:3b:44:0f:e1:c4:94:c5:67:d0:0b:8d:5c:f4:
                    e8:37:f0:8b:e0:d7:bb:1a:3f:ef:64:40:f2:bc:d6:
                    fb:47:28:24:f9:4f:87:b8:b0:3f:c1:5c:07:88:60:
                    4f:86:f4:d8:e4:ca:5a:b1:ca:d9:51:e4:11:3b:00:
                    28:cc:a8:e3:9a:ec:49:a3:c0:dd:e2:fb:0c:97:61:
                    32:ad:cb:a6:64:97:d9:07:09:89:d6:f8:98:98:d1:
                    6f:6e:db:42:8b:d0:6f:30:be:13:d4:77:5d:ac:32:
                    b2:25:28:5c:3a:e2:f2:21:69:82:70:c9:ef:3d:e9:
                    eb:7d:52:3e:fb:b6:95:5c:dc:c7:4f:54:76:1d:10:
                    bc:07:b3:6c:58:2f:5f:f7:e0:c8:d4:bb:69:12:5b:
                    3e:9f:93:1f:eb:fb:e9:85:d4:26:d2:04:8a:8b:12:
                    b7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:14:DA:25:E4:E3:BB:40:6F:DE:27:99:77:F3:5B:04:B5:AD:9C:A9
            X509v3 Authority Key Identifier:
                keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7b:be:54:c4:2e:28:a8:74:99:41:9c:25:68:64:c2:e4:d2:
         bb:0a:2d:91:7c:bd:69:94:89:3e:19:7e:de:72:1a:63:d8:db:
         ef:95:32:02:9c:0b:82:d6:0c:66:b9:0d:fe:d3:7c:47:ec:67:
         07:31:f6:0a:cf:db:61:17:60:88:7d:28:6b:21:20:52:54:0a:
         0b:26:b9:49:47:be:d8:cf:c2:58:cf:79:ad:32:15:8a:8d:e9:
         85:d2:fd:7e:c4:cc:ac:7b:fc:4b:90:b4:39:a8:74:4f:c0:5a:
         77:a0:4a:4c:de:32:09:ed:6d:a0:b3:86:0b:de:dd:ca:65:ce:
         7d:b4:d7:5f:3f:bf:83:82:04:eb:b8:91:89:a8:7e:31:64:76:
         b5:f8:1f:02:6f:4d:6e:17:12:ea:09:c9:29:f4:af:d5:5d:21:
         e9:2f:7c:76:86:2e:e7:ae:b6:b9:88:68:22:e4:07:cd:23:e4:
         1e:a2:4d:3d:18:29:56:72:fa:5f:b8:e7:cb:9e:97:06:08:7c:
         76:59:03:86:7c:58:74:26:1a:19:6f:c5:a5:54:51:31:8f:1a:
         da:bf:f1:87:2b:62:98:be:cd:f5:fd:e8:91:70:0f:57:cc:ee:
         14:9f:59:f8:d8:aa:21:c8:7c:f8:e2:a2:be:ee:39:ba:1d:26:
         b4:8b:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:53:33 2025 by rpki-client