Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          8gh3LN50DTRwkgrylB4rYuWZP1hGgXElScx1D9BaUMc=
Subject key identifier:   47:63:82:A8:64:BC:72:A8:E5:C5:EE:CA:A9:B5:39:E0:EC:6B:CD:E9
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019A4F62CE61F3283CDD8AF7E91CECF6EA0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 15:01:06 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:06 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:06 +0000
Files and hashes:         1: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: HBsVuowiy1HbiTOC45jf1PFGyIjx/WExuIdGlJltAKk=)
                          2: W_kf1ISiCNVsK5ZTz_suRTiHZI4.roa (hash: R9gK3O1iHUJDOb79VekQFRepgZVb1egRuMNJ3bXVKic=)
                          3: goHkMT0UZjAn0-oG9vnwxIPy3B8.roa (hash: oOZSw2jleYYt4PyokB/Y56hj/CGhsBwU1Pm5JWkidxc=)
                          4: xFa_0d92IrO8m7csJzay_dvaZmU.roa (hash: xAfvHq52NGCMs4kvhFfhegyEhswRxRHnoX0SPcrz5zY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:ce:61:f3:28:3c:dd:8a:f7:e9:1c:ec:f6:ea:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: Nov  4 15:01:06 2025 GMT
            Not After : Nov  5 15:01:06 2025 GMT
        Subject: CN=476382a864bc72a8e5c5eecaa9b539e0ec6bcde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b3:70:63:7c:99:fc:3b:f0:95:af:a4:dd:60:
                    6a:8c:64:48:14:07:81:4f:99:a0:32:4f:57:b4:24:
                    84:6d:43:63:17:b2:8c:c0:86:93:4b:30:59:fc:77:
                    78:eb:3d:98:98:af:c3:9b:4b:72:9b:72:e9:0c:58:
                    1e:95:42:7a:a7:f7:7c:a5:ed:c1:68:22:4f:87:92:
                    64:a9:da:65:a7:73:96:f0:21:f5:01:af:fb:73:f9:
                    62:5f:42:43:a8:20:fe:f7:62:71:0c:0e:2e:f6:a0:
                    22:84:a8:c3:87:26:d0:06:97:34:e1:3b:9c:5d:92:
                    81:44:19:58:82:07:a4:40:ae:54:e3:2b:25:08:0f:
                    fa:22:19:3c:3f:78:ca:0f:3b:3a:3b:66:c7:07:b2:
                    fb:10:c8:d0:d1:76:09:de:07:a6:75:fe:5b:0f:5b:
                    9e:36:75:dc:43:40:83:73:73:ee:f4:aa:6e:41:d4:
                    ba:96:9c:c2:a2:5c:51:06:f3:9e:80:97:2b:bd:c9:
                    70:a5:4b:1f:59:77:e0:27:b2:fb:4b:98:2a:6d:66:
                    32:ab:e6:9f:ae:e9:87:c5:ee:5f:b6:13:15:65:b1:
                    28:9c:ab:7b:d8:7f:f3:93:8f:18:a2:08:94:a4:05:
                    bd:96:e3:95:5f:98:c8:72:dc:6e:b9:3a:ba:02:f4:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:82:A8:64:BC:72:A8:E5:C5:EE:CA:A9:B5:39:E0:EC:6B:CD:E9
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:54:dd:c2:8f:4e:c9:77:62:1a:44:ab:cc:bc:92:10:b3:
         ac:87:5d:a8:cb:09:c0:8b:91:ed:b6:51:f4:88:a6:0d:7e:a7:
         02:30:cf:90:6f:d0:4a:6f:a6:9a:27:a1:b1:fd:62:4e:6c:82:
         b6:cd:c9:8b:64:ff:c3:2c:90:a9:73:5c:2e:fb:53:29:f8:12:
         30:53:e0:ed:e9:ba:1b:00:a1:8b:e6:3c:01:0f:2a:fb:b2:8a:
         4b:ee:1e:2b:c7:ed:2a:cb:3c:cc:9a:fc:b5:58:f2:b2:47:e1:
         32:cd:18:7e:6c:ec:86:72:55:28:b1:ed:cb:7c:49:4a:d7:46:
         4b:f7:71:61:48:52:f9:00:02:8d:0a:67:a3:8c:1e:00:a4:fa:
         b6:fb:3a:2a:df:e2:f5:fa:ac:d2:95:c0:a1:9c:a5:f8:5f:38:
         1d:09:bb:74:0a:e9:05:05:01:88:04:e6:1f:d4:9d:63:08:aa:
         e2:6c:85:61:ab:7e:54:f1:d8:9b:70:fd:16:ee:6b:a6:bf:1d:
         ed:28:6f:bb:e3:01:a0:87:bf:b3:63:92:f1:5b:e6:7a:b1:c2:
         c9:d3:c5:e0:ff:8f:86:e8:db:03:0d:bd:73:33:ee:ea:77:22:
         07:cb:f2:c7:d9:6e:e8:05:46:4c:a1:1f:a5:bf:66:46:ca:1a:
         f2:4c:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:56 2025 by rpki-client