Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
File:                     _ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft (raw, json)
Hash identifier:          aXU9PxO9e0c11FigRpGsgvoFDt2t/zOgYssvtQjZUMc=
Subject key identifier:   40:28:CD:C9:01:30:3B:C5:69:03:DC:67:A7:EC:ED:BD:B3:53:43:7E
Authority key identifier: FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C
Certificate issuer:       /CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
Certificate serial:       019A5187D5ADA82EDC091D776C5CD86D7A23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
Manifest number:          0691
Signing time:             Wed 05 Nov 2025 01:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:47 +0000
Files and hashes:         1: _ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl (hash: gnVoQZfp9uyoXHlEukfDupyZGHFDlngMy69VEr8iVQE=)
                          2: uYgWW_zdLQsajiXhTq8i3RTL28Q.roa (hash: 97sMIzW9Z3Yd5hS5dOMaGnDa8EPHNF/+DV+wEv9V9uQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:d5:ad:a8:2e:dc:09:1d:77:6c:5c:d8:6d:7a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd904f5409fe5435f1fbf5cf46e4ce95880b613c
        Validity
            Not Before: Nov  5 01:00:47 2025 GMT
            Not After : Nov  6 01:00:47 2025 GMT
        Subject: CN=4028cdc901303bc56903dc67a7ecedbdb353437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:d8:c6:b2:08:f1:f8:46:73:4b:a4:db:d0:
                    bf:7e:7b:70:6b:57:cb:44:13:6b:85:6b:a5:d3:ec:
                    5d:f0:45:3d:b3:4c:fe:8b:49:2a:c7:d4:4e:23:04:
                    db:77:d4:52:28:6e:ec:d8:02:73:c5:7c:12:69:b1:
                    7e:ac:e2:e8:ae:94:3b:e7:ca:b0:90:3e:5b:51:d3:
                    b6:f6:04:48:04:1e:77:ba:e2:78:6e:f6:0d:b1:ad:
                    e1:31:40:57:1c:56:37:a4:40:e1:72:9a:f8:6d:b3:
                    16:57:6d:05:0b:2c:62:5c:35:66:fc:84:e3:14:8d:
                    0b:5c:5f:b6:5a:84:ef:08:17:95:f3:8c:b1:85:ef:
                    d0:e8:b3:66:9e:fb:76:09:63:46:93:78:42:c9:6d:
                    a2:f6:e5:18:82:5b:a1:9c:f6:84:93:54:b8:c5:92:
                    5d:f3:18:b9:d1:84:49:9a:2b:da:fd:72:f7:86:d5:
                    98:27:e2:6f:9c:64:89:df:96:c7:40:32:a6:96:25:
                    f6:5e:1a:c5:85:97:d9:21:e8:b7:48:56:e9:63:47:
                    9b:0f:21:30:b2:7e:59:8f:21:1d:92:a6:40:63:33:
                    2d:35:d1:66:12:f9:ba:f4:b4:87:89:1e:ba:59:6d:
                    df:2c:a3:d2:ad:ed:16:0e:6b:72:a8:04:bd:b6:1f:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:CD:C9:01:30:3B:C5:69:03:DC:67:A7:EC:ED:BD:B3:53:43:7E
            X509v3 Authority Key Identifier:
                keyid:FD:90:4F:54:09:FE:54:35:F1:FB:F5:CF:46:E4:CE:95:88:0B:61:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c3a000-f233-4e6d-bd92-5ff07c3b6f88/1/_ZBPVAn-VDXx-_XPRuTOlYgLYTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:1e:99:f5:70:b8:1e:c2:30:e9:08:e9:52:1d:01:7a:a2:
         e5:de:b3:52:97:cf:b6:2b:46:4b:f2:cd:05:ca:5d:a9:ae:56:
         2e:79:72:fd:10:b9:14:70:7d:e3:41:fa:cd:07:c1:9b:bc:c3:
         e6:07:40:65:6e:d6:7e:57:16:13:8e:6f:29:4d:c8:ea:f2:6c:
         74:6c:87:b9:34:31:f1:9c:63:de:83:c8:0e:2a:8f:ef:df:96:
         23:2d:00:9a:cc:61:17:fc:9a:f3:ea:9f:d0:33:b7:81:9d:5d:
         69:22:23:16:fe:65:85:ed:c3:d4:b4:56:7d:a9:e6:8f:19:12:
         f2:e6:40:8e:b2:b7:d2:d1:9b:8c:1b:72:cb:e3:d1:d6:5f:2f:
         78:19:57:0f:d1:5f:b4:29:0c:c5:f0:59:17:a2:bd:a8:42:8e:
         20:23:d3:c2:67:f0:41:b8:05:04:96:f3:71:7d:c2:44:c8:40:
         90:08:43:78:6e:21:85:47:c1:fe:ae:31:6d:c8:b2:12:63:26:
         1e:fd:d8:f3:9f:bb:1b:9e:4b:dc:bd:41:e0:98:b4:59:73:a2:
         7e:98:87:59:fd:9c:7e:e9:26:2e:4f:05:fe:38:6c:93:dd:26:
         22:e9:3f:37:72:2e:a4:78:e3:82:27:2f:d9:18:9b:23:fd:dd:
         0d:c4:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:42 2025 by rpki-client