Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          Cia8h+YpDzh4f70FbXBJnmedEP6Lvbqdt9Sn5SIK98k=
Subject key identifier:   E3:A6:DA:6E:5E:C9:4B:0D:4C:31:00:49:94:56:E3:FF:BB:25:1E:AB
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       019A006C10433FB010B79E2ADAAB166A6ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          13F1
Signing time:             Mon 20 Oct 2025 07:01:13 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:13 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:13 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: YXfqr3k225cdM2bLmHarHvg7I9Nz3eeRv/f5LBf1tYI=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:10:43:3f:b0:10:b7:9e:2a:da:ab:16:6a:6a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Oct 20 07:01:13 2025 GMT
            Not After : Oct 21 07:01:13 2025 GMT
        Subject: CN=e3a6da6e5ec94b0d4c3100499456e3ffbb251eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:91:2f:9e:73:a6:07:04:0c:23:4a:49:52:
                    6c:1e:1e:bf:b3:85:eb:36:ea:c8:17:f0:55:b8:13:
                    f8:06:d0:81:96:64:21:94:b6:ec:af:96:f4:2a:f1:
                    c2:71:04:99:a0:27:a1:d3:e0:15:81:f3:9d:d3:e7:
                    18:84:27:9a:55:a8:1c:74:49:01:05:2d:fe:b6:1a:
                    a3:55:8b:b2:bb:50:a9:b2:8a:bd:57:5d:61:cf:e7:
                    8d:4b:9e:a3:bd:19:2e:a8:34:75:8d:72:48:1a:88:
                    6d:7d:ea:42:fb:b8:d3:6e:b1:e1:fb:2b:3b:d8:b3:
                    b9:38:64:17:ed:b0:af:2f:64:30:17:44:e6:54:13:
                    70:7a:67:89:2a:98:57:4e:7a:09:7a:e9:a6:1f:26:
                    9b:06:0f:b1:ca:dd:fa:23:da:bc:b4:ce:89:8c:c6:
                    94:1a:72:e9:9f:03:6c:27:f3:29:3f:f5:2b:cf:e0:
                    89:7b:e9:c5:01:0d:ed:a8:a4:a8:9e:2e:07:ee:af:
                    53:62:9b:00:38:b9:61:80:51:af:b9:14:b1:d2:9f:
                    7d:44:d4:b5:1a:af:6d:e1:45:b1:4e:db:b1:6b:a6:
                    ae:75:2e:3f:cc:b4:e3:4a:93:de:cb:1b:22:81:a9:
                    8f:81:d5:70:54:2c:fa:71:58:66:c1:63:53:00:1f:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:DA:6E:5E:C9:4B:0D:4C:31:00:49:94:56:E3:FF:BB:25:1E:AB
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bd:52:b7:01:93:c3:03:40:45:f6:7a:00:f6:a7:ac:00:24:
         bd:aa:f6:fa:68:3b:8d:2f:cc:aa:79:a2:58:ce:42:32:39:eb:
         3c:53:df:f3:26:7b:16:32:43:af:cc:6d:ff:2a:74:09:f0:41:
         03:08:14:f5:19:41:9a:da:7b:84:1c:11:3d:c4:3d:b2:10:9d:
         d9:47:c8:58:0b:d8:95:56:b4:c0:dc:52:f2:06:58:2e:8a:b6:
         37:6f:18:b6:ec:3e:df:25:dc:97:a1:e2:b5:26:5f:3d:9a:97:
         87:b4:de:cc:2a:55:94:08:f1:2c:ac:fb:55:ea:ac:2b:23:44:
         e8:7b:3b:7f:e9:e3:0a:a8:29:6b:6f:09:30:fe:a0:2c:3a:dd:
         de:82:b4:55:6a:04:27:77:4a:41:0a:65:4e:8c:17:37:8e:43:
         65:6d:83:4b:81:c9:73:58:3b:43:99:7a:7a:26:b0:81:c8:6c:
         4d:05:a3:1e:72:04:c4:63:32:cc:2b:53:e8:28:00:ec:f2:da:
         e9:b1:a1:c3:6b:6a:6a:d0:12:76:18:9d:7d:0c:1a:fb:a9:c6:
         59:4b:33:d7:cd:c5:73:36:0d:c8:7b:27:4a:1c:90:21:be:c0:
         7b:57:94:a3:68:f0:06:76:86:5b:b3:b2:d7:92:3d:65:d5:f1:
         46:85:35:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:58 2025 by rpki-client