Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
File:                     vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json)
Hash identifier:          GaDjhJGpLoOhAW5d/16I4/lkCeTPibCvVzRuuCCU9LM=
Subject key identifier:   5F:A8:50:8C:8B:F4:0B:DF:A9:B0:AE:64:66:75:C1:9F:AE:55:E3:77
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       019A503E53553119E20917FA1BF7A79DDCBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
Manifest number:          1486
Signing time:             Tue 04 Nov 2025 19:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:53 +0000
Files and hashes:         1: 0pSLjaK5jJNleu-R1-JaIUNyXTw.roa (hash: du8WDP9/QiGqQOMX+ttIn10kEatb/Zs0qVgMPU5RqcE=)
                          2: 1WhmCNdV46akTWjdNSLb7xvYYGY.roa (hash: YgT7som/aRyqXmNhgGt4xOXpluNZMOE49qj62NVQC/I=)
                          3: 2P8shKd_220nYdZMZlSUBMfyDxs.roa (hash: DHVwQ61Uemg4pxo94GshwMHSxRxws7x9ytMWEMfUpCA=)
                          4: 47Db6II4VWguGq1fmON_zyxfDTw.roa (hash: EtXOL534BY7YerRgShjwEr47qYY33r1iCEI0u/06D0o=)
                          5: 7-GhubYtfN_LHVkFF6zgqVFEil8.roa (hash: nMY0AubUAwGxLZdATA5AGoarINwqSaBiO8weqjvyFYE=)
                          6: 9USzYLBawhQVkHZbF2gEbzhvC5s.roa (hash: gAEvHU7vjJHAyOa+y6y8BFG0zaydLqnsUXwSsV0Q83s=)
                          7: AOSfY-mj9so59NFJYYJDJ6vMF2I.roa (hash: 4etfS9SVzJGK4dlRDfCqxZ0gP8WkGObbwng7AuYZcx8=)
                          8: GDi32Sl_OrQquHaF5eRnZJe-JNU.roa (hash: SiXuwxSrm46q0wZ0C2mDE4OXGGQ9n7xN1flM/SzNXRA=)
                          9: K8EjZ_3WPjwv0W2aNfotejGzQUI.roa (hash: ZD6jTjKGAi5Tbhse2TYNz3HcAvqRtLDhJzjyCqSgJiE=)
                          10: LrE2frxOXcAoeq_ZVzCqNTXk33M.roa (hash: mwK8Mh8KOX9KMr5MZyXTGGmMVq9yTgz6tm3vdRw+NkY=)
                          11: PBWz5FaEMqr9VnHaKiVhm-NVVl8.roa (hash: RIMrhXVWZgpA4EKCo1eJ1BqfdDBJ/tZAXJ7v1AtcQKI=)
                          12: WhC5y6HpYw6m_MGiQ6XfIsLdv2c.roa (hash: Nv/Imvyk9dKOiF0TKduhR4D3FxweHs4gpbY5BnEHT2A=)
                          13: _B--CuBhqTjZFsr-jhEXlNZoRk0.roa (hash: jcQpONRIAvkERwo6Ybngiz+/HwyvO0eTzP8ZF+C5RuI=)
                          14: bKDzGVLS3_6865mtln3Kw5WmywQ.roa (hash: 1z8bJ9Dv0gvS7Kzr3By8Hyv6gfSz5rRy8bS1g5sgkAA=)
                          15: dGOEJpiLqXr1GxRQGfDAi5gIbkg.roa (hash: +wCypBByvXlOI7hJJjkhkxo33K/FrkpIIcsdMGYENyU=)
                          16: kP7-2BrCdrR1vflyzN6bCG-bC4Y.roa (hash: uhNV7zf/NfCBx0RNf+uccZmVPDDvd1bgU3gAxdkEF5g=)
                          17: sucSe0eC1r3sihXi_iaR2SOp89U.roa (hash: /HwnUsqpfauRDshlfSmbLyvgIlTpLPydMX0GwSKwT/o=)
                          18: t65dNvZ6mIPWzEgYcMlAUQutKR4.roa (hash: IJP/pC4d01Se7R3R057e96hfMZC2OpsCJpYV3fv+Wfw=)
                          19: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: OD2cRd3T+trS/hsGlasfz2OSXxLQS3hoQVA6+lrKVrc=)
                          20: vmz1qvrDT4gvqSXZhacYRIHq1vk.roa (hash: Yp5MelH+l6DIGmJHVyGgp8XFiwOG/vEXNIbFgwlIvtU=)
                          21: xNLoxQtBTrsDYCoH65tbo0fGdFg.roa (hash: yD4EdHjgdB7qynHghTscrUeU4YcPg+faYfRSy+GnRMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:53:55:31:19:e2:09:17:fa:1b:f7:a7:9d:dc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Nov  4 19:00:53 2025 GMT
            Not After : Nov  5 19:00:53 2025 GMT
        Subject: CN=5fa8508c8bf40bdfa9b0ae646675c19fae55e377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:be:9c:89:40:b0:9d:a2:c1:cf:9b:bb:13:
                    cd:2c:9c:84:0a:80:08:e7:1b:ea:6e:ad:3b:6f:6b:
                    f1:a3:ef:cf:76:a1:ef:83:e6:8a:ca:28:33:fa:20:
                    7e:90:ef:34:4a:dd:6e:40:65:ad:ec:a5:d4:e5:c0:
                    0c:2b:94:a2:74:6b:cd:91:13:5c:35:06:50:e5:b7:
                    59:8f:0f:e3:1c:ec:61:92:e4:ea:e7:b9:64:2b:85:
                    ca:4c:24:af:9e:de:63:ff:22:da:a0:b6:a8:88:04:
                    ac:9b:ae:42:30:63:1a:8a:f6:64:31:c5:66:3d:11:
                    25:77:71:91:03:b0:2b:df:80:aa:f9:1c:87:de:21:
                    6e:2d:36:ca:60:33:3c:e7:5f:cf:81:74:fb:f5:8f:
                    cb:d6:1a:e8:15:5a:34:5d:f7:fb:94:3e:50:ee:77:
                    f6:01:5f:99:f8:c4:db:ac:61:bf:d5:1f:30:93:84:
                    bd:d1:e2:25:fc:63:c2:5c:76:45:fa:d8:2e:af:f0:
                    2e:6e:6a:ef:a5:8b:fb:58:ff:52:00:a8:92:33:f2:
                    19:82:3c:ac:e7:7d:2c:2c:61:da:2f:ed:57:82:ba:
                    56:d5:fa:fd:ee:5f:e4:f2:cb:03:0c:67:49:ea:66:
                    76:ad:2c:a9:d6:7b:02:00:d5:54:1e:5a:72:f0:5d:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A8:50:8C:8B:F4:0B:DF:A9:B0:AE:64:66:75:C1:9F:AE:55:E3:77
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:68:58:cf:4c:48:b4:57:a6:ea:83:33:23:ff:df:8c:f7:
         8d:f2:87:ed:01:ec:ac:14:66:f3:ff:6d:b9:de:f4:32:8d:07:
         1f:40:55:85:6f:79:f9:f7:24:92:e7:d0:d7:c7:b2:6a:bf:57:
         ba:22:13:76:5f:b7:f3:07:68:e2:db:47:77:87:b5:43:42:a4:
         fc:8c:b6:08:5d:3b:b9:02:39:ef:da:0c:54:bd:fe:73:f5:1d:
         77:d2:2a:a0:57:16:a9:98:f8:94:a5:7b:16:0d:be:ea:5d:9f:
         74:8d:4c:7c:cb:cf:d3:e1:3c:33:77:f8:72:c4:1d:ad:41:26:
         58:ac:8d:62:40:ce:a4:e4:c0:d2:8f:dc:24:7b:59:ca:38:ed:
         4a:17:d5:19:10:00:f4:69:09:9d:ca:d8:79:72:50:92:7d:07:
         f7:0b:ec:93:8b:ab:2b:d0:20:e4:3e:40:05:72:f4:7d:e5:00:
         66:f6:64:d3:35:b6:cf:7e:90:33:21:25:c8:b3:9f:19:06:29:
         9a:1e:8f:f3:fd:ec:6f:d4:0a:54:62:e3:4b:60:85:43:36:56:
         3d:a4:c7:b3:4e:f1:7a:81:62:f9:26:b8:f7:63:58:83:67:57:
         42:37:a3:0e:30:ff:a3:49:ae:04:ab:0a:99:ac:3b:ad:7f:18:
         1d:e9:9d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:26 2025 by rpki-client