Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File:                     vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier:          Z25qfGg2ziXNiGGdj9c2Px4paMJ4XS1YK7dKJXY3+9g=
Subject key identifier:   90:2B:5A:4E:62:8A:BC:B4:BE:84:45:98:39:1F:FD:62:C5:58:B7:FD
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer:       /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial:       0199FCFD1BA1A1496089ACF0DB31C2FE4A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 15:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:10 +0000
Files and hashes:         1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=)
                          2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: D5ypApEA9Tumifi9lh08kG8f9At8NLvhUxYNV8qOmJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:1b:a1:a1:49:60:89:ac:f0:db:31:c2:fe:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
        Validity
            Not Before: Oct 19 15:01:10 2025 GMT
            Not After : Oct 20 15:01:10 2025 GMT
        Subject: CN=902b5a4e628abcb4be844598391ffd62c558b7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:72:42:34:46:98:3a:5b:ea:eb:4e:e8:10:
                    cb:39:52:2b:bf:3c:82:54:29:b8:81:ff:5f:54:de:
                    ba:3d:51:fa:82:fd:d6:b3:6e:f3:0e:fd:c3:fe:4a:
                    7f:4d:4b:3b:ee:af:16:e7:22:72:e8:c8:5c:fe:b4:
                    43:0a:c3:eb:11:60:7a:26:cb:7a:2b:85:a4:e6:c9:
                    61:d8:f4:4b:66:5f:46:9f:26:8a:66:ff:b9:9e:a5:
                    65:d2:0b:41:88:b8:1c:66:cc:18:84:57:b1:a8:28:
                    82:ca:aa:a2:11:b0:cb:2d:69:bc:d8:4b:61:9c:31:
                    8f:b9:e6:be:bb:b6:84:dc:71:a1:d0:cf:5b:e8:8c:
                    ec:ac:3f:29:7f:6f:de:61:22:2e:6d:d4:b4:b1:ed:
                    b5:2a:71:60:60:42:09:38:4a:cb:e6:27:97:43:8b:
                    07:a3:53:86:9f:6e:8b:68:7c:eb:72:e9:bf:16:c9:
                    d6:ca:33:99:4f:99:3f:03:71:d2:bb:1b:7c:ae:8a:
                    15:22:7f:fe:29:16:45:71:ab:80:0e:20:a3:02:de:
                    f0:86:3f:58:f8:52:20:15:f0:c4:62:b9:aa:a1:39:
                    3a:04:78:7c:d2:13:41:53:a4:05:ee:21:70:f3:ec:
                    53:a3:bb:67:37:55:5e:6e:af:33:85:da:7a:58:37:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2B:5A:4E:62:8A:BC:B4:BE:84:45:98:39:1F:FD:62:C5:58:B7:FD
            X509v3 Authority Key Identifier:
                keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:4c:0a:9c:7b:79:8c:5f:68:46:c7:a3:3c:29:7f:9c:eb:
         cc:91:70:66:6f:c3:42:91:d8:00:e9:b6:03:53:d8:ec:9b:7a:
         6c:6a:6e:37:55:8d:e5:65:be:70:b7:15:e0:84:31:40:47:89:
         72:2d:ff:e6:15:1e:8d:72:21:a5:5b:15:57:9c:b5:30:0e:ba:
         9c:49:3b:e9:c5:8d:8d:04:85:01:c1:78:ff:52:e4:d2:09:c2:
         e7:19:ad:4e:88:0c:e0:94:f4:e2:aa:4f:43:39:c5:84:fb:b5:
         5d:57:cd:9f:c7:4b:20:b7:7d:56:7c:1f:d6:c5:8f:a8:8f:db:
         1e:f6:8a:49:9d:6d:da:e9:dc:05:31:62:9b:37:c6:d6:81:6a:
         cd:2b:0a:de:83:8c:27:e8:fc:54:9d:66:ce:3d:c0:f2:c1:b4:
         5d:ab:59:9f:26:fd:f8:97:c7:0f:15:29:fb:27:f4:38:18:67:
         49:41:11:78:4b:de:94:27:8d:5e:57:99:79:1d:81:18:3d:89:
         03:6b:9d:71:35:7d:90:1b:68:f6:2e:56:cb:73:7c:c8:2f:7a:
         5d:49:d6:ed:27:be:c8:da:5b:ac:11:64:a7:9a:c7:d3:f3:ef:
         00:14:1a:16:a6:63:76:66:66:98:7b:5c:b3:4a:4d:4f:12:e9:
         7d:c9:e1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:48 2025 by rpki-client