Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File:                     vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier:          UxboqXUZyDZUITHNdVmUKnU0h6rfTPrYMW3Na0J2bzM=
Subject key identifier:   5F:51:F1:1C:59:2D:9B:02:63:52:99:8B:82:93:0A:FC:5B:2F:0C:7A
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer:       /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial:       0199FCC61779C1A73894377EA093AA2805B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number:          0F95
Signing time:             Sun 19 Oct 2025 14:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:04 +0000
Files and hashes:         1: PvXyotkF7CUuPU9IpGsqtPRuTDs.roa (hash: hlW2pG80ndqwHM6JsZ8rS5M7wLdO6b8IAZvrk0uvgBY=)
                          2: oCn4wpr5As_rj6i8SdJkg85R0Hc.roa (hash: 7S82NkRvXrpT2+oGArNGUxQHnJWcUMj49moLiAKQQWA=)
                          3: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: n4f7FY4Um80JdxEv5LX1w44A4/ikMhslJwnu/fYqW5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:17:79:c1:a7:38:94:37:7e:a0:93:aa:28:05:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
        Validity
            Not Before: Oct 19 14:01:04 2025 GMT
            Not After : Oct 20 14:01:04 2025 GMT
        Subject: CN=5f51f11c592d9b026352998b82930afc5b2f0c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:00:0f:d0:54:2c:5d:cd:65:a0:17:7e:2a:
                    b2:02:fd:77:19:e9:22:a5:0b:6f:aa:f8:98:6e:fa:
                    59:e6:dc:ee:ce:21:7a:ed:38:65:5a:d5:6f:a8:dd:
                    2a:96:1b:95:c9:79:ed:31:3c:4c:05:6e:93:6b:53:
                    ff:02:65:5c:a6:b0:d4:3a:82:8b:7a:53:b8:9f:37:
                    22:80:6f:99:13:3e:a9:09:3d:8e:cf:05:bc:2a:e6:
                    fb:10:aa:92:71:d3:b9:8f:4b:94:10:5e:d4:95:22:
                    b6:1a:71:8f:db:6f:79:a3:e8:7a:16:8a:95:94:62:
                    b2:06:75:70:17:0c:34:0b:df:6d:39:39:77:af:64:
                    e5:f0:ff:00:75:71:b3:f3:5a:e0:77:dd:7f:f2:2e:
                    bf:d8:82:49:f4:26:9f:a3:10:f5:cd:f8:03:7c:56:
                    5d:e4:17:2a:2f:d9:01:d9:15:8c:ef:99:ad:e7:ab:
                    a4:6c:96:f5:9c:7a:87:4c:7d:2c:a7:0d:0e:85:f4:
                    1e:90:12:25:7a:81:2f:21:21:59:b6:b4:c8:32:52:
                    30:ee:d7:3b:1b:1b:eb:14:ed:f9:91:5a:24:3a:44:
                    d2:5e:62:cd:7f:bc:05:1b:6a:08:4c:25:4b:3d:d8:
                    d8:14:2d:32:6c:43:4a:e4:d6:77:8e:3b:4e:55:71:
                    4d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:51:F1:1C:59:2D:9B:02:63:52:99:8B:82:93:0A:FC:5B:2F:0C:7A
            X509v3 Authority Key Identifier:
                keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:52:7c:79:62:52:77:92:08:10:29:bb:21:38:51:15:95:47:
         ad:7e:53:93:ee:25:e4:29:c9:cc:56:a6:06:15:26:3d:86:47:
         0d:9e:5d:df:06:f6:b9:08:20:35:0a:82:28:c7:e3:67:c4:7c:
         53:85:40:36:24:d9:cf:85:15:3f:f2:01:51:21:b3:94:3f:50:
         96:5c:7f:76:71:61:8b:67:f9:47:1c:a5:29:07:a6:14:6e:5c:
         fb:0a:4b:d1:30:0a:6b:a3:37:34:02:4f:e9:26:d2:4d:b6:37:
         e1:04:fa:18:02:2a:e6:c6:97:21:40:0f:3c:80:32:91:f6:24:
         0f:89:27:6b:7e:c1:64:5f:da:8c:4f:94:fe:51:e9:9c:c3:07:
         17:31:3d:af:e0:db:b6:27:4c:33:d0:dc:83:36:c0:ac:2c:e3:
         1b:79:32:d5:cb:67:9d:38:be:b6:84:1f:96:73:79:73:df:b7:
         b9:7b:70:3f:13:ea:50:6f:a1:eb:7d:d5:de:da:b6:42:e9:45:
         cc:b2:b9:0e:1c:95:31:53:7b:38:87:0a:66:b8:9f:bd:47:c1:
         f7:70:ac:f0:ec:95:d1:32:a9:35:55:2a:74:a2:09:15:61:ef:
         ec:27:15:7e:56:95:6c:c8:de:c5:5c:ed:55:96:9f:2c:58:07:
         be:22:ef:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:07 2025 by rpki-client