Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          9pUqC1E6hoyWvaKbSdSuOKnbA++kHXm9wjEk/NoVKhM=
Subject key identifier:   80:10:10:95:04:86:2F:67:15:0A:C2:B3:1C:71:7E:C0:5B:87:71:FE
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019A4E4FB4613FB00CBA755833DA3D9EE101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0E68
Signing time:             Tue 04 Nov 2025 10:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:37 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: 0kE9jDz+oTJoP0kVfjVicIHu9cSipPBYVCVTzd0H7vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:b4:61:3f:b0:0c:ba:75:58:33:da:3d:9e:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Nov  4 10:00:37 2025 GMT
            Not After : Nov  5 10:00:37 2025 GMT
        Subject: CN=8010109504862f67150ac2b31c717ec05b8771fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:9c:16:bb:69:00:a0:52:35:b1:95:5e:de:
                    d9:b7:01:32:20:b6:40:d6:c8:b4:ca:73:04:ac:47:
                    29:a3:78:a6:d7:2a:42:8a:30:e5:e2:16:75:c0:b9:
                    de:ca:c7:16:3a:03:cf:65:88:95:14:46:9c:de:68:
                    28:8b:df:d8:0d:b1:86:49:64:79:7f:8a:11:3f:a2:
                    12:ac:da:d6:66:98:e9:5f:9c:84:9e:f4:64:0c:bc:
                    ae:aa:d2:62:0f:e1:e0:a1:91:5f:45:93:05:fe:e9:
                    73:dd:8a:30:f8:1b:73:78:62:5d:9f:7f:cd:e1:4d:
                    55:15:3e:dd:38:9d:e0:bb:2e:01:0a:0b:2c:97:9d:
                    ba:d4:8b:8e:fb:51:b1:fb:48:ff:53:8e:94:48:10:
                    9b:f1:1e:a8:eb:47:8c:e8:9c:b1:2b:2c:42:fd:63:
                    ff:e6:69:e2:63:3b:61:86:5c:8c:e9:bf:d5:3e:32:
                    43:28:ff:ce:60:36:7b:cb:75:92:e4:55:7e:90:52:
                    39:03:9e:33:97:04:a1:ff:5f:5b:55:ba:05:b7:ae:
                    e6:26:1a:39:47:64:5f:bd:6e:89:e0:27:9f:38:d4:
                    6c:3c:12:1b:e5:3d:91:9e:f8:d2:fa:8a:dd:46:ee:
                    7d:d0:10:a3:d1:a1:c7:bc:90:bd:c1:43:79:36:fe:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:10:10:95:04:86:2F:67:15:0A:C2:B3:1C:71:7E:C0:5B:87:71:FE
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:55:f7:60:99:37:10:a0:d7:62:31:5f:86:e7:89:80:c2:d1:
         9f:c3:ed:7e:97:6d:81:d4:a4:77:c0:0e:d9:d9:46:0c:12:ea:
         18:03:b7:a2:02:5b:1f:e1:72:b8:1f:cf:d1:6d:6d:20:c2:2d:
         8c:8b:a5:28:c6:3e:c9:10:70:aa:ec:7a:dc:3c:e8:5c:03:0c:
         57:51:5d:b7:94:78:2f:77:3b:fc:31:c5:b1:99:bb:5f:93:28:
         28:1a:bb:5b:b8:3f:9b:7c:de:31:72:d8:35:66:c6:0a:7e:b8:
         ff:ea:e2:e8:22:e2:9b:7e:59:21:0c:d7:88:bc:23:70:aa:b6:
         a1:fc:ce:59:d5:df:31:de:ab:b5:a4:3f:80:87:3a:00:8c:5e:
         63:ff:4e:37:98:39:b2:54:6c:01:5b:bd:96:c9:05:a7:ea:91:
         4d:48:a0:c4:90:cc:1b:a4:4b:c9:f8:88:19:91:79:16:fd:ba:
         84:ea:c2:8d:c6:1b:74:d3:78:82:89:56:00:6b:c7:5e:72:a2:
         b6:6f:2b:3b:78:5d:dc:cf:d8:37:9e:00:99:a1:40:8a:8a:59:
         34:f5:4c:90:41:f8:ae:02:e5:57:63:be:6e:0e:33:fe:f0:aa:
         5e:62:47:5f:19:47:1f:42:cc:52:38:e8:60:53:ba:91:96:3c:
         94:86:76:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:18 2025 by rpki-client