Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
File:                     sLVtEMytnWnAGFa-CvqhfsaCrL8.mft (raw, json)
Hash identifier:          0FfxwJNjHdUT2A99Cz5uopbIboBS4OYSE7dtvp+gPlk=
Subject key identifier:   DF:76:08:68:88:74:FD:83:28:67:8A:14:0F:D1:8D:D3:B6:93:0A:F2
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Certificate issuer:       /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial:       019A53AD0E83586CD58A4201F4B9D6C07938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
Manifest number:          04BA
Signing time:             Wed 05 Nov 2025 11:00:41 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:41 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:41 +0000
Files and hashes:         1: CDhfXiWmp-7DWGHRLkI1RXpNMUw.roa (hash: BdyrC92HV6fMOkqwdnwWMjP4WPGwGQmddKXw8S//IY4=)
                          2: GZLylFIePve8mzqKp098f5zxTUw.roa (hash: r5z9AFc8wnJRnVScCietCsc10ck15u9ra9fsksqINjA=)
                          3: QSxkF4rOw8CaQhbY1bgweRS2k84.roa (hash: /gVGhfkCO75vlxeNpsZvkhIuMR2YzpuGJXm7VvwUGkk=)
                          4: SmAcFee67aQLcPrKmiXZ94F0DAo.roa (hash: 0ymC9JbQOKLWpT417ofA+sK82ehW8sAqv3tq2DxYn+c=)
                          5: YK_aUPQtgAjjUBJq7WhDbslbCWM.roa (hash: +IG0CxEpiZEOb47k2itsdETT9izTBhlEAMyJ/fS5uh4=)
                          6: sLVtEMytnWnAGFa-CvqhfsaCrL8.crl (hash: VG6KZZInQ6bSmOLHFHdy68ipQbuocI3zlLT58gokwWs=)
                          7: vbkqK2A-5so6LdZx4ga1s9863ZI.roa (hash: 533TjtomKdjh/jTDvd0XbmB2CfJKlZIVlQUKaugW/Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ad:0e:83:58:6c:d5:8a:42:01:f4:b9:d6:c0:79:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
        Validity
            Not Before: Nov  5 11:00:41 2025 GMT
            Not After : Nov  6 11:00:41 2025 GMT
        Subject: CN=df7608688874fd8328678a140fd18dd3b6930af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a1:31:36:7c:b3:84:4c:6b:b8:a1:9b:74:3e:
                    94:73:a5:e3:aa:ff:f4:f9:aa:e4:f5:96:fd:98:22:
                    fe:e8:b0:5d:a6:68:f4:8a:9a:4f:bc:ee:13:15:8f:
                    7f:1c:86:d7:05:0a:85:20:f5:d3:35:5b:7b:56:68:
                    f4:c2:03:88:f1:f2:6a:cd:ea:ba:0e:55:fa:68:c2:
                    01:df:ee:36:74:67:d4:c1:a9:22:ae:a1:ca:99:20:
                    71:7d:49:7a:9d:67:c4:2c:54:4d:ac:e0:eb:2e:e6:
                    51:64:54:96:8e:03:24:6e:41:c2:56:d0:c2:75:31:
                    06:5b:9b:cb:c9:f0:ce:9e:87:77:f3:58:34:2a:cc:
                    d4:8b:c8:7e:1f:21:d7:3e:64:e9:0c:3b:f5:d6:60:
                    8e:2c:2e:bc:52:a6:46:b1:5a:8c:a7:74:34:5c:03:
                    34:15:6c:2b:02:42:6c:b3:5c:a6:4a:27:6b:68:79:
                    64:c0:25:37:7b:c0:82:97:33:8f:00:5a:98:5d:be:
                    0d:41:50:a0:be:97:a8:9f:2d:d3:78:f3:2a:8e:a1:
                    0c:7c:1d:00:d0:9d:ad:44:b3:61:19:e4:a6:da:5f:
                    d2:31:af:37:93:aa:2f:d5:2f:4a:fd:9c:b0:80:27:
                    02:a3:73:df:e3:36:56:c2:f6:29:81:bf:0a:7f:95:
                    de:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:08:68:88:74:FD:83:28:67:8A:14:0F:D1:8D:D3:B6:93:0A:F2
            X509v3 Authority Key Identifier:
                keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:38:64:71:8c:26:bc:4a:85:c7:35:27:44:c5:d9:cf:7f:0e:
         a5:f2:35:fb:a0:75:72:67:c8:a7:c1:3e:c4:e6:61:8a:e7:be:
         2c:4f:16:5b:f0:98:3a:b9:b9:51:84:73:54:83:35:81:a2:c4:
         b7:7f:86:29:1c:11:99:30:bb:5c:eb:22:66:18:e1:82:44:d3:
         10:59:17:5e:b0:4d:95:51:19:f4:f4:f0:4b:d6:02:6d:06:f1:
         21:9a:1d:92:97:ff:16:e0:d8:fd:c4:71:e5:ff:1a:c4:ba:ae:
         8e:47:d4:ce:ca:7c:b8:e9:3a:07:f9:16:70:76:c0:89:8e:10:
         67:13:ff:e8:96:33:dc:e9:31:c9:b6:db:62:52:90:c1:1f:ac:
         6c:4b:ea:a1:9b:da:96:36:44:40:74:02:92:0d:d2:bf:3b:57:
         22:43:8c:71:dc:82:1e:5a:8f:90:e6:0b:c9:ab:ff:9e:fc:39:
         b7:70:a1:76:cb:e9:6d:fe:c9:88:83:07:72:8a:4a:06:45:7f:
         8c:9c:e4:1c:8a:6f:9d:fa:2d:db:94:97:8a:52:f7:30:58:dc:
         87:5b:18:b0:e4:93:04:30:5f:70:96:7e:31:5e:d5:d5:e5:1f:
         a6:da:ac:9c:98:3a:89:04:53:60:0e:f7:97:0f:1e:c4:03:ec:
         a7:71:1b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:42 2025 by rpki-client