Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File:                     Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier:          ntDhOUGB7zdPpTIHhBHwooYYyIjEvfaHX1/HVLP4ud0=
Subject key identifier:   7F:DD:BC:86:3E:89:EF:7F:DE:0E:32:00:52:BC:77:5F:55:EC:CE:F3
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer:       /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial:       0199FC21AE76BA2D18EFDC4EA909B64DF2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:29 +0000
Files and hashes:         1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
                          2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: An+lAN/+yFZZC/9IpC/M6/uYriIqoy0NtABG/73YvjM=)
                          3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:ae:76:ba:2d:18:ef:dc:4e:a9:09:b6:4d:f2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
        Validity
            Not Before: Oct 19 11:01:29 2025 GMT
            Not After : Oct 20 11:01:29 2025 GMT
        Subject: CN=7fddbc863e89ef7fde0e320052bc775f55eccef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:09:03:a5:25:d2:27:5a:4d:d2:f1:23:dc:a9:
                    19:1e:c7:66:29:2d:58:8b:ae:d4:46:77:35:4a:46:
                    d6:01:e2:a5:f4:58:7d:ba:8d:57:08:73:88:e7:32:
                    54:e2:25:18:5f:07:d8:86:11:bb:b0:c7:92:96:b2:
                    91:51:11:7a:38:18:2d:a1:06:7c:6b:dc:3b:c1:35:
                    d4:97:2c:90:18:b5:db:e5:99:9d:3c:0a:f7:5a:47:
                    40:d4:99:07:a0:4d:b0:e1:6f:00:27:70:d6:82:1c:
                    0b:a9:b2:96:48:3e:87:46:40:48:51:10:00:4c:ae:
                    94:85:27:4a:fd:50:98:96:79:6f:cf:23:e6:af:a0:
                    92:1c:81:29:d2:06:49:bc:b5:13:b2:46:0a:fd:5a:
                    f4:62:3f:49:71:b3:66:d7:12:11:02:ec:f5:43:4b:
                    84:62:ec:0c:4c:7d:3c:cf:b7:37:df:06:32:3d:35:
                    6a:d4:0f:25:49:97:fc:12:46:25:e2:49:b7:3c:e3:
                    1b:e9:51:e4:58:69:a1:73:50:82:03:f8:eb:f4:77:
                    8c:49:43:5e:e2:7d:9b:0f:da:b3:69:74:63:17:70:
                    0a:90:74:cd:11:0b:ca:8a:d5:ce:f1:14:45:5b:a2:
                    5e:52:1b:a2:8e:44:ce:3a:34:ad:71:cd:13:3d:4b:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DD:BC:86:3E:89:EF:7F:DE:0E:32:00:52:BC:77:5F:55:EC:CE:F3
            X509v3 Authority Key Identifier:
                keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:22:6f:ef:40:fc:a2:8e:10:44:15:c9:bb:0a:03:48:86:02:
         b7:a4:33:2c:cd:a4:e9:e4:ad:67:b0:e4:09:14:42:8f:24:0f:
         e5:25:99:8f:2a:b7:f7:91:69:df:2d:6c:b2:3c:49:95:5d:d2:
         40:47:b5:11:e0:33:fa:fb:b4:6c:17:15:24:d0:d9:ac:f4:c7:
         0c:64:6c:63:3d:fe:f8:e8:56:c4:4a:77:d3:7d:04:bb:92:7c:
         45:ac:ca:76:ca:64:a6:22:ea:4f:fc:67:41:f2:51:b5:c5:5c:
         3f:d4:e1:49:ec:c8:dc:2a:78:ff:31:61:71:c5:a8:48:30:a5:
         d0:4b:54:68:52:c2:dd:65:2e:a3:75:e6:4a:1d:cf:42:f5:e3:
         bd:bb:f9:ff:05:86:a7:f8:aa:c4:50:d7:a5:a8:0a:89:d9:ba:
         37:e7:f4:6b:86:c3:b4:b4:6d:d5:f0:cf:a7:63:4d:fe:fb:8f:
         c1:c1:eb:42:f2:22:78:82:e5:96:8e:ee:e9:4f:7b:81:c5:5a:
         d4:3c:6f:2a:03:14:64:40:38:1a:6a:51:18:82:bc:cb:b1:8d:
         5a:f3:da:89:0d:dc:a8:6a:c7:5c:4f:10:04:43:b5:80:56:22:
         d3:7f:53:61:df:15:e4:b2:bc:7f:96:f1:78:0b:96:47:ef:13:
         97:45:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:15 2025 by rpki-client