Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
File:                     V1j80i-3oR3qizfkw_YiqnpHue4.mft (raw, json)
Hash identifier:          e4VN5fp/gvdmNgsXb144akpAQNC22zuTy+T/yYDnZ9c=
Subject key identifier:   C3:F3:BC:0A:44:6B:EF:F0:18:BF:A9:DD:F4:CA:D8:DA:9B:C2:52:5C
Authority key identifier: 57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE
Certificate issuer:       /CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
Certificate serial:       019A4FCFE4B78B647887CD4FA49D9C551DC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
Manifest number:          141B
Signing time:             Tue 04 Nov 2025 17:00:15 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:15 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:15 +0000
Files and hashes:         1: 1cAFysoNqNIZH8FwmwvYqJt5bM4.roa (hash: ODKSC75jE0xq09vjpL4sB7ddbosHMLlBxEPWj0XoiqQ=)
                          2: V1j80i-3oR3qizfkw_YiqnpHue4.crl (hash: wOmq8OWgiuTNXyASKviyBr8Fd1RhhZUw5prLAqMcF4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:e4:b7:8b:64:78:87:cd:4f:a4:9d:9c:55:1d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5758fcd22fb7a11dea8b37e4c3f622aa7a47b9ee
        Validity
            Not Before: Nov  4 17:00:15 2025 GMT
            Not After : Nov  5 17:00:15 2025 GMT
        Subject: CN=c3f3bc0a446beff018bfa9ddf4cad8da9bc2525c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d9:bb:ed:91:70:a2:d4:80:77:a9:a3:31:65:
                    a4:a8:13:af:85:9c:6e:16:f8:7c:b9:d8:ed:ef:d9:
                    7d:45:a0:10:d3:00:29:74:5e:ad:4d:cf:d7:cc:c6:
                    f5:a8:3d:c0:69:8e:e1:a6:f9:86:ed:86:36:f3:f5:
                    cd:07:38:54:e6:be:0d:0f:03:93:78:b8:57:ce:93:
                    fe:6d:a9:56:b6:70:77:4c:f2:95:f1:7b:d7:9e:87:
                    fe:6c:f7:36:97:4f:d7:e0:7c:d6:b5:f5:a3:14:6e:
                    e6:71:a0:c6:62:97:e0:dd:82:a7:f3:6b:3b:e9:37:
                    15:97:ba:f4:3d:5a:0f:be:37:33:f1:de:f2:b9:52:
                    f1:df:9c:57:26:d5:b3:46:ab:5a:6d:ad:94:95:6b:
                    07:b9:e5:af:1d:3d:11:05:da:7a:5b:93:43:d8:88:
                    f9:ce:e3:88:d8:9f:0d:d7:6d:52:51:0f:7f:3c:fc:
                    27:dc:93:b1:70:69:9e:8e:d0:46:c1:bb:2c:a8:1c:
                    8b:a4:49:c0:c0:8a:e7:21:17:3c:bb:24:34:2b:53:
                    97:41:1c:34:c2:92:9d:cc:1f:b4:c9:d1:b9:d8:be:
                    e2:e4:7b:85:ff:a8:c3:db:a1:fd:86:d6:36:3d:97:
                    56:5b:2b:3e:b9:27:b4:65:d9:91:cb:32:08:de:7d:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F3:BC:0A:44:6B:EF:F0:18:BF:A9:DD:F4:CA:D8:DA:9B:C2:52:5C
            X509v3 Authority Key Identifier:
                keyid:57:58:FC:D2:2F:B7:A1:1D:EA:8B:37:E4:C3:F6:22:AA:7A:47:B9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1j80i-3oR3qizfkw_YiqnpHue4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4d8207-e7cb-4232-8290-250bec9dcca1/1/V1j80i-3oR3qizfkw_YiqnpHue4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ba:b7:8c:cf:8c:cb:ed:73:a2:74:fa:a0:64:f5:a7:97:78:
         ae:94:38:96:d1:4c:f6:fa:0f:8d:db:0f:c4:5a:dd:7c:40:13:
         73:29:d1:09:e2:17:f0:5a:af:c5:38:f3:8e:99:c4:a4:8d:17:
         ca:e2:04:68:ce:04:cb:d2:f0:23:c2:fc:85:b8:73:50:57:7a:
         ee:c1:12:42:40:80:52:d7:c7:87:1c:c2:e8:98:0f:0f:3c:6b:
         65:ee:26:15:47:7b:d4:b8:cf:02:67:1f:9a:52:3e:ec:7d:b5:
         4e:59:3b:af:ad:ae:27:3e:34:49:62:17:83:bf:8d:f6:fe:03:
         a8:c1:e2:85:c2:d9:13:4f:4c:87:51:1b:28:cb:21:c5:05:e1:
         8f:ff:e5:59:2a:25:d5:19:33:76:fb:c8:1d:0b:7a:32:c2:df:
         71:a2:66:e3:ee:e1:af:89:8a:41:ea:56:c6:c7:2e:5b:60:64:
         8e:6e:fa:03:68:24:84:c2:3e:e3:ec:a6:12:e0:65:e7:ba:da:
         ce:3a:12:4f:92:ba:f2:bd:33:e9:a2:ee:3b:d0:24:07:9d:42:
         89:83:2f:0a:33:b5:2e:1f:65:5d:ee:bf:0b:52:c9:e5:b6:52:
         33:3a:37:46:cd:af:8a:4c:6f:73:4e:1e:2e:e6:db:ff:e0:59:
         bb:58:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:41 2025 by rpki-client