Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          M/R/FDNPHUq2zKubg63MJgn6ATDx80tiNuwKMlWhu5A=
Subject key identifier:   45:EF:B8:47:71:5F:75:9B:26:A6:1E:EF:B1:64:5A:0B:2D:A0:7F:35
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019929D7F1E114A28AEC2F723453B424D154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          16B3
Signing time:             Mon 08 Sep 2025 15:00:41 +0000
Manifest this update:     Mon 08 Sep 2025 15:00:41 +0000
Manifest next update:     Tue 09 Sep 2025 15:00:41 +0000
Files and hashes:         1: BxktpTM0O4l-7Qywr4XGaTh7fCQ.roa (hash: Dp10pRUrJQYwQwB7pFjXetXyeK3jB7q+R/i/kEK18qU=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          4: a1inG8KfvIXN5vExc0NSdROHb6M.roa (hash: AIPq2LbVW47spagW1XJ+tnzHBS7q8+GYATJClpwcsjQ=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: PmuA/URsERa3OhN8jHbXyqZNhzyaqew5VqS7WFDGZsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:29:d7:f1:e1:14:a2:8a:ec:2f:72:34:53:b4:24:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Sep  8 15:00:41 2025 GMT
            Not After : Sep  9 15:00:41 2025 GMT
        Subject: CN=45efb847715f759b26a61eefb1645a0b2da07f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d8:62:d5:6e:ca:db:e3:56:b5:c3:8c:84:8d:
                    67:f2:2a:5e:60:8d:03:14:5a:a7:32:f5:a0:95:d4:
                    6a:01:22:33:92:2a:29:0a:f1:71:af:87:21:2a:7b:
                    9a:57:aa:f8:51:b9:1f:12:6c:c4:84:29:fb:81:fc:
                    8f:72:c7:c1:47:5b:49:e0:ad:ad:82:3d:9a:ed:56:
                    9b:e8:6e:57:98:54:cc:82:53:cf:f1:1b:46:2a:ca:
                    bc:aa:c9:95:ad:2e:3f:6a:59:6d:bf:16:cf:d0:86:
                    75:43:d0:a1:4f:97:06:59:6d:45:a1:22:e5:42:1e:
                    23:e7:13:4a:83:c7:6b:3b:c9:3f:d6:e9:96:0e:88:
                    c7:2a:38:d9:d6:1a:ea:c6:3e:96:f5:cf:9c:55:84:
                    38:ec:a0:c1:52:75:22:24:d1:41:06:0d:88:a9:a2:
                    3d:0d:2c:81:a8:0d:88:c1:8b:c0:6e:bb:32:df:cc:
                    1a:50:ad:9a:c4:b7:69:5b:20:84:d7:9d:44:6c:86:
                    75:ba:46:a1:3f:8e:8f:4c:69:4b:3e:10:43:17:c1:
                    a7:42:47:41:b3:57:fd:f2:4c:26:71:b7:40:65:14:
                    5b:f7:df:17:6b:fd:81:11:05:d8:0c:43:3c:12:06:
                    01:2e:28:65:6b:c3:5a:f8:d9:81:24:e8:7b:2c:aa:
                    54:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:EF:B8:47:71:5F:75:9B:26:A6:1E:EF:B1:64:5A:0B:2D:A0:7F:35
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9a:62:af:8e:bb:32:94:36:6a:4b:53:23:9f:27:68:12:c6:
         be:c4:3b:35:c1:ec:74:2f:63:7f:e6:1f:39:3d:1b:c1:af:c0:
         3a:77:c0:16:99:95:c6:19:d9:1c:15:c1:be:c5:bf:5f:a6:a4:
         ba:50:b7:9c:76:da:dc:75:d3:0a:3f:45:4a:68:72:ba:ef:c2:
         e2:6d:75:20:39:9f:12:aa:65:93:02:40:32:fc:28:a5:49:dc:
         3d:32:85:1f:6b:32:72:38:0a:ab:de:18:78:d5:ea:c0:b9:46:
         cd:86:51:38:fe:ec:50:ee:75:9f:97:05:74:5d:f0:7b:6e:7c:
         6e:34:d7:62:96:c8:3e:56:38:de:ed:cd:84:ff:56:84:ea:94:
         58:f2:c2:a7:d9:9f:9c:41:66:34:ce:6c:b2:8d:e0:27:9f:8d:
         d6:ee:68:fb:13:90:b1:ce:ee:c0:79:d1:5c:1c:f0:ef:9b:0a:
         0a:eb:58:a4:43:0b:42:3d:4c:35:5f:2f:77:35:75:d5:81:6d:
         37:75:4c:d0:19:f7:22:cc:44:2f:1a:16:70:49:aa:f6:08:79:
         31:60:12:6a:0e:33:c7:0f:85:84:ff:e7:a3:46:cb:7b:25:ac:
         ad:e8:cb:dd:d7:86:25:28:ec:4d:12:d2:6d:1e:d4:2c:ca:68:
         26:8a:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:09:24 2025 by rpki-client