Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File:                     vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier:          TYw79PlHY9cUtVlVSFdTZcDAmJPSvzqTHdLFuXxr9tA=
Subject key identifier:   BA:02:0C:55:41:C0:53:16:98:3B:FA:A0:D7:36:52:84:F1:94:F5:06
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer:       /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial:       019A5564872CA42165FBB47E408499D98A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number:          176E
Signing time:             Wed 05 Nov 2025 19:00:42 +0000
Manifest this update:     Wed 05 Nov 2025 19:00:42 +0000
Manifest next update:     Thu 06 Nov 2025 19:00:42 +0000
Files and hashes:         1: 8lacBmVZsphFu0d-DTUjjbuS8oc.roa (hash: c2zm9p5x65urWg2J1m1vDTWXpjxdW+8WhoVhZA8O5rg=)
                          2: YJ-AtaN-sFyM0u7_IYYRHrhslpQ.roa (hash: 8L2JOWpp8ODt1ijnUyg6XruASgyQTxKsYir/kGA2dxs=)
                          3: m4ru5TcymZwyZ3cxRDnq3gnEaOw.roa (hash: dTsqnxjibxvmK4QjJP+2GB4FrGtrYTrsCusxLqvYBKE=)
                          4: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: L9ntEjZrgCNkgp6coa1ZsJxQaveCFxesKZSWQCTeudY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:55:64:87:2c:a4:21:65:fb:b4:7e:40:84:99:d9:8a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
        Validity
            Not Before: Nov  5 19:00:42 2025 GMT
            Not After : Nov  6 19:00:42 2025 GMT
        Subject: CN=ba020c5541c05316983bfaa0d7365284f194f506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:65:46:72:e3:d3:da:00:f4:d4:30:37:b6:
                    74:01:96:d7:73:8f:fc:50:a1:22:bd:1f:5e:f5:2e:
                    0a:e0:42:44:45:c3:c4:8e:66:b4:58:15:4e:d6:dc:
                    b0:b8:cc:f2:2b:be:13:42:26:2a:b3:9e:fa:29:32:
                    89:b0:12:6d:cf:0d:96:47:ab:46:3d:e0:80:47:9b:
                    11:f8:74:56:20:e1:65:98:c1:41:82:64:6a:2f:fb:
                    c1:d9:1b:15:55:88:99:f0:9d:ed:06:08:a5:36:cc:
                    27:76:6d:0b:a0:ea:59:a8:05:d1:66:16:9e:1b:96:
                    4c:51:4c:27:83:14:01:ff:06:1a:14:d1:73:d6:a1:
                    93:d2:0e:07:81:55:ac:e2:fc:8b:25:40:e7:f1:7c:
                    88:6e:e8:6b:d5:6f:bc:46:fd:a9:6f:df:91:69:1f:
                    f7:95:6f:bd:3b:e7:a9:52:52:ae:06:82:df:a9:f9:
                    7a:c1:5a:a6:14:45:76:dc:3b:43:a2:7b:79:ee:2b:
                    db:4f:72:0c:04:fd:b3:2c:4b:d7:8e:d7:ce:73:b6:
                    e3:dc:94:73:4d:06:24:c4:23:ae:40:96:ca:35:97:
                    83:b9:f6:92:8c:6e:68:63:f5:8d:a1:27:0e:50:fd:
                    c7:75:c0:af:ce:90:55:1f:80:99:c7:fd:41:78:c8:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:02:0C:55:41:C0:53:16:98:3B:FA:A0:D7:36:52:84:F1:94:F5:06
            X509v3 Authority Key Identifier:
                keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:10:fc:38:a9:1c:d8:da:47:dd:07:98:d3:54:a0:42:68:cb:
         d6:70:79:d6:81:97:f6:2c:91:f2:9f:5a:e9:84:ba:98:d8:6d:
         6c:bd:d5:c8:49:ce:68:7d:03:76:d9:c7:f8:f7:c2:33:f6:d6:
         3f:c7:04:df:b3:09:2c:95:80:48:bc:86:4b:ec:f4:c6:8a:fe:
         d5:7e:0e:70:96:c3:90:cc:06:7a:11:18:cd:12:96:97:18:c8:
         26:c1:44:9a:d2:f1:ed:cb:0c:2f:75:a5:ce:9c:d4:4c:25:fd:
         ee:83:81:de:9a:b4:46:04:d1:bd:43:3e:23:e1:04:49:8e:30:
         8b:7a:41:53:40:45:40:65:b6:ad:cb:a1:d3:31:aa:23:e8:ff:
         91:e5:ff:b0:a1:40:1c:14:69:3e:60:41:7e:af:22:73:4c:23:
         c5:be:0e:64:45:7f:f1:ad:fe:f8:3f:24:d2:b5:23:62:63:05:
         46:9a:52:93:09:0d:9c:ab:35:c9:b5:bb:7e:15:2d:1f:e1:08:
         86:3a:cc:fa:78:ea:01:6b:9a:51:e8:c2:08:2a:61:0f:ed:81:
         e8:9d:43:6f:3d:f0:f3:02:26:fd:69:2c:8b:d5:4f:db:33:2a:
         50:c0:06:b7:26:07:20:8a:25:ac:45:c7:62:8e:90:41:9d:93:
         12:29:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:55:44 2025 by rpki-client