Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          RIFQd7cidBULL8xI1A/f33rC1F2P/dGGEozNmaRu44s=
Subject key identifier:   F5:FA:E7:89:2D:3E:09:0B:D0:3C:29:1C:B7:62:51:55:63:75:AC:6F
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       019A02C7879FE7B758BA0E7E9B51F7381A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          027B
Signing time:             Mon 20 Oct 2025 18:00:22 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:22 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:22 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: u8GIVNbE+Hmjoy3irGwjpo3X4M2qi6uN6uJeVoG0Kgs=)
                          2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:87:9f:e7:b7:58:ba:0e:7e:9b:51:f7:38:1a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: Oct 20 18:00:22 2025 GMT
            Not After : Oct 21 18:00:22 2025 GMT
        Subject: CN=f5fae7892d3e090bd03c291cb76251556375ac6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:bd:ac:a5:c9:77:64:1d:1f:be:23:f1:9c:
                    25:b2:07:76:7e:fe:03:36:78:a9:86:6f:ec:61:8c:
                    c6:37:61:8a:ed:ff:40:4a:70:47:9e:cf:b2:8c:a9:
                    cc:ee:b9:ca:81:eb:d4:0c:a0:00:9d:5c:97:cd:f1:
                    8a:c6:59:a5:c1:1e:a3:21:ad:67:a7:a7:e7:68:52:
                    07:41:f5:7b:65:a7:96:a9:ae:43:39:a0:c0:62:53:
                    c4:2e:0d:91:53:96:34:00:2d:60:a1:ad:6c:78:1d:
                    2f:6f:49:49:9b:97:45:06:07:03:bf:3e:95:96:8d:
                    18:88:cc:a8:de:d1:41:c6:af:d8:44:aa:14:24:65:
                    fd:9a:80:65:90:55:23:af:c0:82:20:33:a4:29:01:
                    34:e1:36:ed:de:47:37:c3:a1:7e:f5:12:39:49:75:
                    24:cc:68:be:e7:45:f5:34:1e:6f:e4:93:02:6c:14:
                    a7:d3:4a:fd:4d:43:db:5d:78:4c:31:c8:6c:eb:ba:
                    b2:a0:ed:66:24:76:66:01:33:1d:ef:4d:4e:8e:89:
                    87:bd:5c:96:02:51:e7:6e:07:61:3e:e1:c8:d8:df:
                    40:ae:90:21:c9:ef:81:b1:26:f7:e1:d2:d9:ff:6d:
                    58:a7:c6:de:46:e4:0f:c0:64:a0:a4:42:ef:d4:4b:
                    eb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FA:E7:89:2D:3E:09:0B:D0:3C:29:1C:B7:62:51:55:63:75:AC:6F
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:05:af:a1:be:c1:78:35:77:92:e3:83:e4:37:25:34:2a:72:
         a4:77:73:a8:ac:b1:ac:a4:95:f6:f4:ce:25:db:15:67:c0:80:
         9e:69:dd:de:60:74:47:e8:20:20:9c:ae:1e:d3:39:1f:89:6c:
         8c:78:6f:cc:d1:fe:6b:0e:39:65:2b:dd:f4:f2:65:69:1a:9c:
         4a:0a:f4:23:92:91:72:ec:b3:04:73:b4:66:b2:09:3a:3b:79:
         e5:3d:57:24:54:31:f8:e8:19:94:44:d8:33:2d:fa:d8:94:a8:
         ed:be:2e:5f:12:09:02:dd:a0:e3:9d:2c:63:d2:da:5f:cf:75:
         4e:1d:42:96:a5:23:7c:5a:ae:c9:17:d9:5a:e7:06:0d:34:3a:
         8b:21:b2:db:72:d8:4e:62:29:8c:e4:df:ee:ae:6a:7a:70:55:
         33:2b:14:6a:2c:ed:da:99:54:c3:b9:d2:8e:20:b1:ac:0a:c6:
         3c:55:ce:4c:a8:6b:ca:0f:68:16:1d:e5:e9:8c:93:73:cc:99:
         2c:63:ab:65:61:01:e3:1e:f3:fb:bd:19:05:f2:d9:5f:c8:26:
         90:8a:8f:b4:ee:49:b1:14:ec:f5:9e:18:d3:9f:5b:08:41:87:
         fd:3a:19:4c:86:7a:f0:c2:42:00:af:56:c0:b4:24:87:07:f6:
         d2:a9:e5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:38 2025 by rpki-client