Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          Uq4U4ZUVftuKjQyfmQIQGuldkOxrYiXOEFuhAgCVOJM=
Subject key identifier:   59:F0:A6:E4:84:48:AC:F4:C2:94:C7:C4:36:61:03:4F:E1:5E:3A:AB
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       019A0110D900F891074576CE4BAC463B8BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          13F1
Signing time:             Mon 20 Oct 2025 10:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:12 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: H5w/BzyIeA8qNKeU9v9EeS5IqJBbjwmmNf7OmILdqiU=)
                          2: m3PogkJItz_iNaq0_EdnA6-ldI4.roa (hash: nYagGPxBVRS3j7ztvVbYe4dLyrJG3Tb3hiHq/vtvQQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:d9:00:f8:91:07:45:76:ce:4b:ac:46:3b:8b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Oct 20 10:01:12 2025 GMT
            Not After : Oct 21 10:01:12 2025 GMT
        Subject: CN=59f0a6e48448acf4c294c7c43661034fe15e3aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:f0:14:71:43:98:ff:2c:8e:c1:13:c0:a2:
                    60:3c:72:28:70:da:7d:81:f1:ce:c8:fe:57:13:1b:
                    d3:42:70:4c:93:ff:59:78:2c:20:16:f3:92:94:0c:
                    9c:f4:31:a9:ec:e5:52:9d:f9:22:f6:af:13:0c:38:
                    cf:84:bb:0d:0b:bf:ad:b8:7a:58:33:79:6a:cc:2a:
                    1d:b1:95:1a:cb:60:b6:bc:a0:61:41:bf:db:b0:c1:
                    d7:30:ba:d4:24:84:90:3e:06:63:1a:57:14:da:bb:
                    cf:a0:9d:64:6d:4f:3b:36:b9:33:95:41:10:e1:aa:
                    23:19:9d:9b:23:70:30:6c:af:c8:db:03:29:11:7e:
                    ff:8f:31:b2:8e:1d:74:42:01:bf:c6:e2:6e:6e:4c:
                    75:8a:cf:4b:4f:e5:0a:98:66:7d:4f:db:5a:1f:a2:
                    c0:a6:08:15:4f:6c:18:c4:48:1b:75:10:02:ce:64:
                    7a:09:9b:74:ec:b0:48:50:6d:5a:fa:d2:47:59:cf:
                    1d:3b:67:b8:da:2d:75:79:c7:90:e9:e6:c0:df:e5:
                    c5:cc:37:a5:70:09:0b:39:8d:a0:ab:19:5c:ef:4f:
                    18:1b:8d:9a:32:f8:30:1b:4f:55:29:ed:59:a6:ea:
                    53:3a:29:2b:50:85:d5:37:99:e7:7c:56:89:aa:a0:
                    1e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F0:A6:E4:84:48:AC:F4:C2:94:C7:C4:36:61:03:4F:E1:5E:3A:AB
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d2:62:5e:37:51:7b:0d:fc:f1:07:2c:5a:23:0b:a9:05:46:
         d4:07:2e:e1:fa:8d:2c:e4:a3:5d:7a:52:9b:d5:e7:34:60:ba:
         50:67:50:68:6a:c8:45:de:0d:6d:00:44:d1:ab:67:4a:c0:9e:
         06:fa:fe:9b:aa:32:cd:97:0e:1a:0c:fc:68:79:e9:4b:ca:a3:
         1b:c4:57:3f:41:8c:e0:6d:f2:84:f1:55:ed:fb:05:35:05:0b:
         4d:b5:2b:4e:b1:71:4c:51:0f:98:77:46:c7:45:68:ac:a9:39:
         86:ab:e2:c1:c2:81:7a:d0:6b:c5:e0:9b:f0:a9:11:33:19:cc:
         8f:9e:5e:81:d0:d2:4f:e2:a9:9f:b9:8e:90:42:75:01:83:a9:
         6b:c3:f6:a6:1d:4c:be:88:c3:2d:43:4e:57:43:05:2c:ef:fa:
         6f:9b:2b:7a:98:82:55:e2:40:eb:2e:44:c1:ac:03:9f:e2:26:
         14:c1:c1:e2:40:a5:68:e5:45:07:76:1b:93:38:23:c5:b3:7c:
         09:e4:45:30:c5:75:48:6f:a9:6f:ec:ab:2d:59:0b:0e:9f:7d:
         21:07:c8:c1:8f:0b:23:29:ff:2e:21:93:1b:9c:a1:16:2c:77:
         7b:c7:13:17:f8:29:c3:d4:e0:11:c9:5f:5c:da:5f:a3:b4:0d:
         c0:74:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:44 2025 by rpki-client