Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File:                     Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier:          XS/1y4yRuLysCj0JfonRHX6I6uD113yLpS+IixOgOZI=
Subject key identifier:   55:15:DD:7B:70:23:96:2B:07:21:00:CC:10:F0:41:99:C3:C1:6E:18
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer:       /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial:       019A50E37BB9BF4A1CF9F300E2C770ADFE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number:          0A5E
Signing time:             Tue 04 Nov 2025 22:01:16 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:16 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:16 +0000
Files and hashes:         1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
                          2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: NUGHfhRFTOjLwfnLbvWJ/yK8M9p6S77WzNVtk1TTYeA=)
                          3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:7b:b9:bf:4a:1c:f9:f3:00:e2:c7:70:ad:fe:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
        Validity
            Not Before: Nov  4 22:01:16 2025 GMT
            Not After : Nov  5 22:01:16 2025 GMT
        Subject: CN=5515dd7b7023962b072100cc10f04199c3c16e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:0a:38:0b:b2:be:2f:13:41:1e:f7:aa:84:
                    84:db:18:6b:dd:fc:4a:63:00:80:cd:bd:6b:09:81:
                    b6:4e:a3:a3:86:e3:f8:f9:15:62:f5:7b:13:ad:d4:
                    b8:58:78:87:51:c7:6e:78:85:5c:ff:92:fb:10:cf:
                    02:dc:e9:89:f0:b1:2f:8d:ae:25:7d:44:22:ed:d2:
                    a2:b4:d1:49:16:07:a5:c7:23:d3:08:08:c7:4b:4d:
                    4b:56:8b:a5:78:d0:0b:c7:9c:97:a2:30:31:9e:26:
                    0a:c8:e4:af:05:91:e2:57:26:f8:b2:7d:f1:9f:fc:
                    fd:7a:76:51:c2:f7:c5:0a:19:65:aa:b9:de:7e:d8:
                    b8:b7:ae:ac:ff:c6:84:ab:6a:0d:8e:0c:7a:a0:47:
                    a5:3d:11:ff:75:9c:f4:26:fd:85:70:24:fa:ad:ec:
                    5b:0b:cf:63:a0:45:1a:be:cf:26:cc:60:f4:fd:6f:
                    c5:f2:02:ab:df:d9:f1:b6:45:ba:9b:17:6f:07:d2:
                    e9:04:3d:24:fe:e7:86:d7:67:77:93:05:91:9d:34:
                    17:8f:3c:60:aa:f4:e3:49:05:3d:68:9b:a1:f3:b9:
                    86:bf:70:58:bb:fe:67:76:74:02:08:80:8d:60:ff:
                    fb:bb:3b:3d:fe:44:59:c4:53:0b:30:fb:59:1c:59:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:15:DD:7B:70:23:96:2B:07:21:00:CC:10:F0:41:99:C3:C1:6E:18
            X509v3 Authority Key Identifier:
                keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:63:09:b0:04:18:7f:7a:f0:7e:1c:78:32:01:37:38:4e:
         56:d1:be:e4:6a:c0:34:18:dd:76:87:ed:4c:28:12:ad:e2:bd:
         c0:3d:06:a6:9b:fa:5c:68:92:01:07:11:33:10:50:41:da:c8:
         f2:81:e1:20:a2:cb:28:75:b9:8e:26:82:d2:09:6a:ce:ca:25:
         67:af:ba:de:ad:30:d8:4a:7c:82:9e:4d:a5:85:09:fa:c2:32:
         f5:f9:65:0b:4d:06:0c:b0:dc:00:0c:b7:2e:3d:5b:71:e6:8c:
         f9:1a:54:a5:26:a1:ba:07:d5:18:ef:4b:fc:2e:80:85:0d:58:
         05:4d:f5:16:e7:c0:99:80:d3:ce:2f:c0:1f:a9:e8:80:c3:c8:
         f6:5d:c6:0d:8f:b7:0d:29:35:a4:3c:d4:14:80:d7:7f:64:7a:
         3a:7d:3f:cc:79:88:7f:ea:df:b4:4f:15:49:8b:21:f1:33:f4:
         ad:76:ac:a6:35:3b:ce:9c:bb:10:ee:a1:9a:25:45:4c:c7:4b:
         5c:aa:c7:c9:10:4f:54:c4:02:66:de:8c:63:ca:2c:33:c9:cf:
         4c:34:43:1d:a4:17:cd:e1:13:40:bb:d9:8e:54:de:1c:d9:83:
         2a:e4:8e:42:ce:ba:8c:be:92:be:a5:43:f0:56:d1:07:77:9e:
         46:3e:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:31 2025 by rpki-client