Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          BfxCjR6rQCFeAdBxJH9f/roXdRaeBynZvU40/FyI8SA=
Subject key identifier:   79:9F:D2:FB:F5:03:63:46:79:06:DB:85:B7:EA:F9:C5:7F:3D:4B:5C
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       019A503DD296467686969E5597F24310C1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          169E
Signing time:             Tue 04 Nov 2025 19:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:20 +0000
Files and hashes:         1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: E0IPKKqVPNgjNLeEPBVlpgq8sm3He6BAoyoZ7o9d3f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:d2:96:46:76:86:96:9e:55:97:f2:43:10:c1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Nov  4 19:00:20 2025 GMT
            Not After : Nov  5 19:00:20 2025 GMT
        Subject: CN=799fd2fbf50363467906db85b7eaf9c57f3d4b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:5a:f5:59:27:79:bd:cf:5c:e1:23:ac:62:
                    8c:9f:15:48:9b:e3:fa:69:01:a2:70:ef:47:d6:46:
                    2f:86:77:c3:86:09:75:95:f1:59:fc:93:3f:d6:19:
                    2d:f9:cf:93:64:ce:71:8e:1c:35:5b:70:85:c4:f8:
                    08:90:ba:fe:a9:5e:96:ca:1b:31:04:8c:72:de:52:
                    ce:4d:27:d8:f9:50:e5:f8:df:80:5a:97:1f:31:2b:
                    d3:6e:0e:4d:c0:e0:d5:1f:86:6d:ca:d8:ed:c0:67:
                    ea:d5:4d:d8:a0:ac:81:8f:76:15:f6:68:03:ea:17:
                    59:71:16:96:cd:9e:5b:fc:0d:4a:fd:66:de:42:ac:
                    67:23:8c:e3:dd:4d:7b:29:37:81:26:96:73:65:29:
                    a1:e9:b0:0e:60:8b:7c:cd:b0:a1:a2:86:37:af:66:
                    46:d7:0b:43:f4:87:53:1e:0d:04:29:9f:3a:88:2b:
                    57:8a:db:05:6f:14:d7:c8:21:4a:8b:da:66:49:a3:
                    06:fb:df:5e:27:e7:6d:79:4b:92:16:41:0b:13:93:
                    ab:07:74:92:ab:83:7c:db:76:c3:f2:3c:55:5b:b9:
                    76:2c:e8:9e:b8:3a:39:a0:85:7d:95:80:96:5f:9c:
                    3a:2a:f7:73:92:8a:0c:8e:b7:46:d3:41:de:31:bc:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9F:D2:FB:F5:03:63:46:79:06:DB:85:B7:EA:F9:C5:7F:3D:4B:5C
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:cf:b4:93:6c:34:3c:10:c7:d8:bd:9c:60:36:98:84:46:ef:
         5b:4c:c8:f1:cc:b6:25:be:9e:58:c7:e9:c0:2e:e7:d7:fe:d6:
         cb:c1:60:bb:91:f9:b2:16:3c:42:87:e4:52:6c:4f:e4:e3:37:
         19:d1:58:66:a5:c4:72:af:dc:b1:6d:4d:ec:b5:7c:30:71:31:
         9f:d3:c5:10:ce:01:05:6e:5a:bc:4a:a2:1e:e6:a6:66:bc:81:
         b1:12:a9:fb:6f:d8:a8:4d:33:6d:0b:29:3c:13:a9:a1:84:0f:
         16:16:c7:e0:8e:c7:65:bf:f4:a2:22:69:a6:ce:a9:cb:d0:ae:
         40:5a:e0:49:82:04:9e:ae:c2:b3:b8:05:cd:72:2e:fd:d1:0e:
         a1:fc:ec:2a:3c:10:06:25:2d:ec:57:b2:80:cb:94:38:e1:19:
         8a:a0:7d:02:51:85:87:34:1a:15:6c:82:b6:ef:95:79:1a:53:
         cb:04:d4:b7:16:fc:55:d1:2e:2b:c1:e0:8f:43:a4:aa:c5:d1:
         09:16:e3:91:8d:fd:0b:a6:c0:58:7c:76:7a:b2:6a:5c:42:5e:
         c1:5b:f8:30:78:02:44:ed:18:80:fa:e2:9a:45:c8:2b:ed:70:
         e3:4d:1f:66:fa:1b:6e:0e:f2:29:6f:50:2a:e5:6c:c8:8d:76:
         1b:03:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:59:29 2025 by rpki-client