Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
File:                     vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json)
Hash identifier:          2i39UWGsW3WeHa/9Uu/nkLojWlK312Q3PMIoGSzdxQc=
Subject key identifier:   B8:6A:DE:C2:58:30:BA:C1:64:96:34:52:B6:DC:48:5B:1F:9A:3F:56
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Certificate issuer:       /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial:       019A711357C9A330E4E562029BA432769B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
Manifest number:          0C77
Signing time:             Tue 11 Nov 2025 04:01:24 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:24 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:24 +0000
Files and hashes:         1: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (hash: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=)
                          2: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: 55cfNCqTD0ZvTPcxr6UAj+vyBMN8tUE0S1NI6fSnkcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:57:c9:a3:30:e4:e5:62:02:9b:a4:32:76:9b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
        Validity
            Not Before: Nov 11 04:01:24 2025 GMT
            Not After : Nov 12 04:01:24 2025 GMT
        Subject: CN=b86adec25830bac164963452b6dc485b1f9a3f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:19:29:ac:84:e0:18:7d:21:49:ff:11:06:b7:
                    7e:0a:2a:fb:cd:01:23:84:c0:fb:68:a7:98:50:c4:
                    b7:e0:26:06:7b:aa:ad:a3:66:b9:b2:0b:49:ec:d1:
                    7b:0e:ee:86:2e:0f:d0:54:a6:1e:ac:02:d5:e8:78:
                    bd:2b:d4:89:9a:dc:6c:55:b5:3c:68:43:73:fa:77:
                    67:b1:24:bf:71:3b:d0:69:27:4b:f9:d6:8a:e1:f2:
                    a1:e9:ab:5f:57:82:a5:f0:e8:2e:6b:ba:c4:1d:6a:
                    78:92:6c:fb:4a:79:d0:17:ca:45:e5:b9:29:86:64:
                    cb:a8:97:35:0a:7e:be:24:1c:6c:ea:c6:ce:e2:c9:
                    75:95:b6:86:82:54:73:81:0c:21:df:49:dc:f7:1d:
                    d1:ef:a2:1f:84:8e:fb:f0:a8:52:84:7d:37:6f:79:
                    94:ed:a3:df:f1:ea:5e:60:0a:4f:18:9c:b7:4f:0b:
                    56:dc:78:27:06:65:1a:bf:98:73:90:2b:04:27:7b:
                    41:68:c2:c7:89:be:8b:d6:04:b9:f3:d1:82:27:78:
                    00:26:1b:87:80:65:90:ec:cd:b5:83:00:ec:ca:32:
                    09:ff:f2:6b:fa:07:d6:d5:e6:4b:c4:43:45:3c:c1:
                    51:a3:7a:21:c3:b2:a3:d9:bd:08:a7:7f:13:25:d0:
                    f9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6A:DE:C2:58:30:BA:C1:64:96:34:52:B6:DC:48:5B:1F:9A:3F:56
            X509v3 Authority Key Identifier:
                keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:22:3c:f0:8f:88:cd:3c:10:82:fe:85:ed:7e:f9:a6:b5:77:
         a2:3e:7c:c6:c6:50:ff:ed:b6:61:85:4b:69:08:47:bb:29:4e:
         b1:89:97:5d:9b:ed:88:ba:1d:88:d4:c1:f4:f6:d9:ad:99:8a:
         05:82:90:24:4b:2e:1a:95:26:4a:21:d4:71:ec:db:78:a5:0b:
         52:3c:de:f0:6c:07:5c:5f:53:1d:e1:44:bf:56:36:c6:cf:03:
         b2:5f:a2:fb:a0:10:29:f5:87:85:e8:76:72:80:1f:cb:d4:0a:
         8d:ed:e9:d1:d3:02:a0:a6:05:4d:cf:9a:cf:38:b6:38:5b:f2:
         5a:cd:c3:ce:4b:c9:fb:28:86:3b:d0:77:9b:3c:a6:7e:3a:16:
         94:01:ca:d7:e1:e3:1b:c3:3a:4d:bd:5d:35:9f:70:e2:5f:d2:
         0d:58:54:32:05:c2:5d:ab:f0:d1:7a:05:7e:84:4f:14:42:fd:
         c1:ff:c8:89:83:23:d5:64:ef:30:f1:9c:b7:ed:60:5a:dd:e5:
         1f:e2:cf:99:fa:ce:18:54:6d:6a:99:0f:2e:5a:4e:51:a9:db:
         7d:c4:01:5e:1c:6b:b3:8e:c9:5f:dc:18:0f:4d:b4:53:15:6e:
         35:d1:94:b4:e8:e8:7c:da:0a:ec:e8:f0:89:f2:44:26:62:ac:
         90:54:9f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:06 2025 by rpki-client