Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File:                     vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier:          tYcw4k5mzZSLh4MHntPZTt9buHhQth5tt53kn23p6LA=
Subject key identifier:   FB:F3:4C:DA:65:87:15:ED:26:A0:54:30:37:59:C4:B2:22:88:7C:84
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer:       /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial:       0199FAA0D93736EBBE4ACFEDE2FE710AFD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number:          0CD2
Signing time:             Sun 19 Oct 2025 04:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:08 +0000
Files and hashes:         1: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: CrYdg/o72vQ4ZMgO61f2fGI1KKTjv7OOyeT7TbREMSs=)
                          2: wtrOxy-Cqrf4yPJ92NbD-E33BP8.roa (hash: HZVqoFJ1fSxzdnoOFKLqW1LRpp7/mkZ4xgc+aQGadyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:d9:37:36:eb:be:4a:cf:ed:e2:fe:71:0a:fd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
        Validity
            Not Before: Oct 19 04:01:08 2025 GMT
            Not After : Oct 20 04:01:08 2025 GMT
        Subject: CN=fbf34cda658715ed26a054303759c4b222887c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:ae:f4:24:06:df:01:cc:17:9a:9c:74:1c:
                    2f:32:b7:d5:f2:15:c4:fb:5a:c3:af:0e:d4:70:7e:
                    14:3a:9b:60:50:0b:a8:79:38:aa:07:a6:c6:e7:15:
                    26:a4:58:7b:ef:8a:91:56:ef:3f:0f:65:99:39:6f:
                    19:36:48:f2:aa:cf:07:5b:5c:63:96:26:0d:0d:da:
                    eb:e0:fb:ad:59:13:47:61:e2:92:cc:b8:10:da:35:
                    c0:d7:f8:57:19:26:b4:e8:63:3b:eb:4c:58:bd:12:
                    d5:5e:3b:c2:e9:b0:62:c3:8f:9a:90:63:94:7c:2d:
                    f8:b7:39:94:d5:fa:33:a3:d0:42:62:23:13:04:34:
                    71:53:ce:94:dd:20:39:c1:39:4a:24:73:a2:04:0e:
                    ee:e5:a8:e9:8b:b5:03:3c:6d:9e:66:ca:06:61:2d:
                    2d:5d:bc:32:bd:7a:eb:41:c1:1b:c9:d7:50:e2:ba:
                    3f:ad:89:9a:b1:80:56:a8:ae:84:87:c9:0d:d5:77:
                    b1:43:98:95:76:45:e4:98:4d:67:cc:52:c8:57:b5:
                    b3:8d:4f:9f:9d:bd:56:71:c0:80:aa:ea:95:5f:49:
                    23:58:c4:ba:76:65:6e:e4:4a:a0:ec:8d:7f:8e:32:
                    e9:3b:1f:0d:6b:73:3d:00:c5:be:fb:b0:fc:41:2b:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F3:4C:DA:65:87:15:ED:26:A0:54:30:37:59:C4:B2:22:88:7C:84
            X509v3 Authority Key Identifier:
                keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c8:ee:fb:69:75:bf:cc:85:f1:de:54:7a:9a:f9:36:21:c9:
         74:58:50:98:55:ae:fa:c8:c5:51:d0:68:00:4e:a5:f7:ac:2e:
         0d:27:7e:17:9e:a9:24:e2:f4:cc:ff:21:43:6e:dd:82:73:ca:
         bb:58:b2:3e:39:61:4d:74:fa:83:5c:80:7d:b8:e2:16:a9:85:
         19:11:0f:34:15:33:ad:72:06:f6:6f:12:84:33:ae:d3:12:ed:
         0f:1b:40:13:75:6b:fc:da:de:a6:0d:2d:07:58:9e:d2:76:0a:
         30:91:70:96:f4:43:76:60:05:1b:98:a2:07:53:6d:18:0d:8b:
         06:77:07:88:d5:83:f1:0e:a9:99:71:07:ef:44:27:04:4c:8b:
         4c:8a:c0:40:b0:85:a0:d5:64:ad:b9:00:fe:a0:ed:3f:1c:01:
         c0:d7:91:b2:0c:71:ae:38:6c:d0:4f:13:9a:10:c7:97:54:7d:
         20:0c:fa:41:83:62:51:32:6d:aa:42:05:44:d7:4a:bc:60:d7:
         37:eb:83:6d:0a:84:50:73:d2:ac:c4:c0:fd:03:52:de:91:7d:
         4d:ed:eb:93:7d:d5:ac:60:82:8c:9f:1a:01:7a:ad:30:fc:e9:
         00:b8:b5:d9:66:8e:3b:7d:41:e5:a4:45:74:2c:ab:cd:d9:46:
         51:12:fe:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:30 2025 by rpki-client