Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File:                     vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier:          2G1Yd8mt7RO56/K1hBUm03rzloOVerBXbh447AQbv6A=
Subject key identifier:   1E:18:C2:97:EA:0B:B2:C0:7E:4A:43:E2:BA:06:25:53:23:74:B9:FD
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer:       /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial:       0199FB0EC9510331D6146F97D2CCAEFC5C46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number:          061D
Signing time:             Sun 19 Oct 2025 06:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:14 +0000
Files and hashes:         1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
                          2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: F7U89HuPnNtPqwRruYJXkZNOBFNRlTb7t7f1srXF+Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:c9:51:03:31:d6:14:6f:97:d2:cc:ae:fc:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
        Validity
            Not Before: Oct 19 06:01:14 2025 GMT
            Not After : Oct 20 06:01:14 2025 GMT
        Subject: CN=1e18c297ea0bb2c07e4a43e2ba0625532374b9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b2:a4:59:d5:3f:1f:33:d2:cd:43:ff:e3:1e:
                    ba:b5:07:71:2c:0a:51:84:2e:c1:3f:95:06:2b:17:
                    e0:75:1e:c4:29:7a:be:90:d6:fc:5a:bf:07:d6:4f:
                    cc:75:9e:c0:10:8e:9f:f1:dd:f4:ec:52:3f:9f:bf:
                    1e:22:9a:40:b9:0b:ce:00:8b:3e:be:9e:e2:d2:a8:
                    8f:d0:a5:32:b0:ab:bc:c3:2e:38:50:3c:61:63:e9:
                    0f:fc:40:5c:72:41:14:10:0a:00:c6:8e:b4:99:26:
                    38:28:db:f7:80:ba:05:39:6f:42:0d:a8:a1:69:95:
                    cc:6a:6e:b7:5d:68:7f:c4:cd:4f:12:a2:bd:3e:bb:
                    73:71:56:cf:8e:a7:4b:8b:61:52:0c:2a:62:d6:69:
                    29:e9:b4:b4:b4:68:7b:ff:dd:0b:9c:8f:be:f7:5c:
                    02:c2:15:39:14:d9:98:97:f5:3d:d6:aa:f3:53:59:
                    90:38:8f:f9:ea:4f:ac:78:f8:bc:8b:ed:d4:90:bb:
                    a6:63:69:e5:1e:dc:53:09:b1:ed:0d:39:69:50:59:
                    28:19:13:50:44:b7:37:27:f8:85:57:1a:e5:1f:7d:
                    6a:21:55:f4:cb:fe:30:07:68:81:a5:48:45:2a:8f:
                    3f:44:21:05:c0:2c:34:7e:0a:36:61:7b:5d:60:90:
                    6f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:C2:97:EA:0B:B2:C0:7E:4A:43:E2:BA:06:25:53:23:74:B9:FD
            X509v3 Authority Key Identifier:
                keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:ff:da:b3:e0:48:6a:5f:3e:78:39:62:a2:1d:95:73:d6:
         87:98:a0:56:d5:ae:67:2b:61:dc:ad:a7:1b:33:14:f2:23:a3:
         34:1c:0f:9a:e7:75:9e:1d:90:4a:9c:87:bd:64:4d:1c:34:07:
         44:1c:f2:5e:bc:88:db:53:02:46:be:b9:94:80:81:56:61:ab:
         84:c9:b0:a2:12:b9:1c:2a:9d:b1:70:b0:ca:b2:17:97:98:23:
         2a:83:3c:f0:da:1d:b6:a6:d8:2f:81:30:ed:4c:44:a3:61:b5:
         07:b3:cf:55:2f:7f:62:0f:d1:0a:ff:7b:5c:63:cb:9a:29:b4:
         8b:ec:94:70:a0:40:ea:c2:ad:26:65:01:f9:d0:cc:3b:ff:a8:
         82:6d:73:2c:47:6b:4f:97:5e:32:cf:6d:f2:3f:b1:e4:0a:51:
         39:46:78:2e:57:ec:32:d8:c3:c3:41:3b:f9:cd:79:b1:8f:f5:
         cc:c1:89:71:d3:32:2b:3a:49:34:fd:b3:1e:de:45:b9:89:fc:
         7c:75:2e:0f:04:95:b7:20:76:65:e4:b7:a7:8b:41:b2:fb:a7:
         91:af:b9:56:13:58:49:97:55:bb:7c:20:cf:94:69:06:f9:d0:
         b9:bc:46:45:3e:d7:8f:80:21:d4:ba:df:4c:ff:8e:80:f0:5d:
         05:55:fb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:20 2025 by rpki-client