Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File:                     VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier:          rPrUo5DI/oowLt/6X8h6wX1ehvdXZZedzilwUGElm4c=
Subject key identifier:   9E:EA:83:A9:53:8C:E4:AB:13:49:CB:69:60:FE:F1:24:E2:A1:4B:AF
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       0199FBEAB6A701DDAAC686507463158BB103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number:          0AAD
Signing time:             Sun 19 Oct 2025 10:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:27 +0000
Files and hashes:         1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=)
                          2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: 98FDxzbRaZTwM7iIpDVjTAVTqWJfItuQUdav+IKzPUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:b6:a7:01:dd:aa:c6:86:50:74:63:15:8b:b1:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Oct 19 10:01:27 2025 GMT
            Not After : Oct 20 10:01:27 2025 GMT
        Subject: CN=9eea83a9538ce4ab1349cb6960fef124e2a14baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:6f:be:4c:10:14:bf:8e:79:4d:f2:68:19:
                    41:43:10:45:09:7e:d2:3b:72:41:38:73:93:73:c1:
                    f4:2f:98:94:cf:60:03:63:77:e8:e9:bb:3f:24:dd:
                    01:87:d9:34:3d:4d:3d:15:aa:53:e6:72:4f:e0:8f:
                    53:8f:b0:5e:7a:3a:b5:85:d1:80:1a:1a:41:a5:db:
                    48:fc:4d:13:1b:f1:11:c0:f2:7a:fb:64:8e:5a:38:
                    b8:be:db:85:e1:2e:33:9f:b6:7f:e0:13:5a:49:54:
                    51:46:e9:c4:fc:77:d1:49:79:de:ef:81:4d:7f:d2:
                    89:25:ec:65:50:f8:8f:d3:cc:ee:9e:e4:e2:34:4a:
                    17:4c:e7:98:90:97:a9:4d:e1:0c:d4:02:d1:ec:a9:
                    d5:4d:b1:fe:b6:84:3a:92:e3:ca:77:c9:24:3c:c3:
                    6b:9a:5c:e9:db:ef:96:b5:7f:94:d3:fe:05:63:df:
                    63:04:36:96:38:6e:34:a3:1e:eb:5c:e3:49:b8:8e:
                    e0:97:0f:27:5c:50:02:38:71:ec:8e:f9:0b:9e:4e:
                    cb:30:d3:52:a2:53:f8:9c:8d:f9:b2:b4:12:7d:e0:
                    e2:ba:9e:0f:19:3f:d1:87:da:6b:c6:ec:5d:7d:71:
                    e1:4e:e6:c5:d2:31:26:85:df:a8:40:58:86:fb:f5:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:83:A9:53:8C:E4:AB:13:49:CB:69:60:FE:F1:24:E2:A1:4B:AF
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:e1:67:2c:62:cd:01:97:80:2f:27:12:ca:a9:68:a6:4f:
         05:7c:e1:26:2d:e8:1c:1a:e7:2f:d8:5f:d0:17:1d:69:66:90:
         d5:3d:a8:d2:3d:3a:2f:e3:48:38:a6:44:9d:4d:83:f3:d6:19:
         1c:96:7b:58:f7:3d:a6:66:2e:46:32:37:5f:f3:d7:7c:61:ea:
         79:9b:1d:2d:3c:65:c9:65:5a:57:fd:51:2e:37:93:20:9b:0c:
         c5:db:49:0f:3a:41:6d:96:d1:ed:b6:91:f2:eb:f9:2b:65:a9:
         77:43:98:41:f7:22:90:ee:3b:26:f5:a2:79:db:a1:27:a9:e0:
         37:16:f2:38:d7:08:ee:f4:07:46:1a:2c:ec:e8:66:5a:8d:12:
         64:8c:81:ec:2c:78:c2:e9:74:60:fe:d3:ca:c5:b7:f2:82:33:
         38:cb:ba:54:3a:b3:fb:a7:e8:3d:d7:34:24:2c:aa:c8:39:3a:
         a4:39:48:30:ba:6e:3b:ab:e2:3a:17:4a:25:c6:a9:f4:e5:96:
         25:e5:77:00:7f:98:67:df:84:64:57:31:95:e2:6b:9e:49:11:
         a6:8d:1d:51:34:0d:16:30:5d:65:16:29:e2:43:60:2c:d6:bf:
         6c:23:58:27:69:3d:eb:70:fb:d1:1a:f6:42:89:bc:2f:e5:71:
         e6:43:4c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:11 2025 by rpki-client