Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          sXAHKTSyyZN44Y9RCMsUvXQTnZVNOgi1wX8A9W1NZiE=
Subject key identifier:   2E:09:25:C4:BD:82:72:72:0C:87:9E:52:F4:A5:DA:80:3F:71:8B:6B
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       0199FC21632FE4BC614010429240D778F321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          127C
Signing time:             Sun 19 Oct 2025 11:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:10 +0000
Files and hashes:         1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: AmTjXUoOELHKPVuFTce2x0aSujMcnbEsRlQfm39CHnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:63:2f:e4:bc:61:40:10:42:92:40:d7:78:f3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Oct 19 11:01:10 2025 GMT
            Not After : Oct 20 11:01:10 2025 GMT
        Subject: CN=2e0925c4bd8272720c879e52f4a5da803f718b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e6:e4:1d:57:1b:e3:6f:56:83:f5:b8:cb:23:
                    30:05:39:30:00:33:de:a3:c1:db:a6:bb:a1:c7:9f:
                    46:eb:53:85:2c:5d:f6:82:11:07:6f:12:3f:26:09:
                    64:b0:04:33:d6:b7:ab:c3:3f:4f:40:f0:3e:49:fa:
                    27:a2:42:5b:b1:ed:f8:44:ac:27:ce:94:21:79:a6:
                    2c:da:0a:28:23:41:bb:f3:f7:e9:07:17:3c:19:8d:
                    c2:c7:c9:e6:ee:89:4d:f7:bd:d1:c0:53:8f:22:de:
                    30:a0:e8:f2:ad:2e:04:a8:06:68:7f:24:3b:68:c3:
                    50:df:ab:3c:19:53:90:48:22:c9:2c:86:31:be:9d:
                    8a:ef:90:13:84:8f:b4:ff:76:bf:ea:7b:7d:72:8f:
                    00:9b:6d:ec:94:1b:1d:f5:2c:93:c1:f0:c4:4f:b9:
                    be:81:e4:e8:00:74:5b:75:7b:46:1e:42:fa:ef:d5:
                    54:37:5a:a5:fb:89:17:00:00:d0:5d:f0:05:00:6b:
                    e0:95:fd:77:1f:5e:25:fc:3a:27:83:d3:7b:b3:0f:
                    a8:8a:65:b1:74:5a:81:3b:57:35:71:b8:4e:a0:ef:
                    5b:8d:2a:9d:bd:78:99:7e:e5:a1:38:39:42:5e:a9:
                    d8:fd:90:2e:58:00:3a:01:b9:83:9d:40:9b:52:3d:
                    3a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:09:25:C4:BD:82:72:72:0C:87:9E:52:F4:A5:DA:80:3F:71:8B:6B
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:b1:c2:87:bb:59:1b:72:65:b5:f1:dc:00:a5:9f:c9:44:02:
         34:01:5a:ed:a1:59:67:60:36:56:11:75:ac:ee:4e:04:69:e3:
         32:81:4c:28:5f:41:90:ab:32:b5:be:07:6c:b9:57:98:f5:4e:
         d4:3a:0c:9b:01:c4:cf:a5:a8:c0:13:7a:77:9a:24:2e:e4:01:
         71:e2:8a:d4:be:5f:7b:fa:65:82:ea:fb:b8:e2:89:74:4e:9d:
         e5:b3:9c:75:f3:9c:01:46:2d:9d:76:3d:6e:e4:2c:62:c0:c4:
         d9:7a:60:37:83:ba:55:d9:12:f3:9b:9a:6c:15:7e:49:3e:3d:
         62:9b:9d:1d:41:f8:34:fe:16:c6:05:6c:79:b4:66:60:44:da:
         e1:42:7e:a5:f7:de:3e:d5:df:7f:03:5a:24:ec:69:77:d8:43:
         60:ae:78:07:de:48:e3:94:aa:04:1f:3a:47:af:17:c8:66:bb:
         39:f4:b9:41:cb:9c:d0:2e:7e:4c:4a:d2:d4:f0:f6:7f:47:11:
         44:48:5e:a9:53:00:e1:74:64:5e:90:5e:af:e8:06:88:e7:1a:
         93:bf:d7:31:f9:5f:88:3a:1b:18:76:13:61:59:83:25:01:6f:
         88:66:50:4d:a9:0d:ab:cc:63:26:d8:ca:19:4d:3b:f6:2b:45:
         41:b2:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:46 2025 by rpki-client