Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          OZUHurZrrsK2cIbGL9H6zjEbk0Ig0HJI+Eoth2JbjxM=
Subject key identifier:   69:43:D3:33:2B:0E:0E:03:45:D5:BC:C6:58:8F:FC:0F:F6:1E:47:55
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       019A00DA6AFED855B21E5D20B1F5BBF7AE8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          027A
Signing time:             Mon 20 Oct 2025 09:01:45 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:45 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:45 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: ClUeb3CD84xSSZkJKzytHxxIkyYlg+uPLNLYLdFRQWY=)
                          2: xMdRmutHFokxkkQckhp-estBVrY.roa (hash: B+GeVyXFQ8LdKQlX7fXVWpcWBfpc+XAscpHvCnfEhnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:6a:fe:d8:55:b2:1e:5d:20:b1:f5:bb:f7:ae:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: Oct 20 09:01:45 2025 GMT
            Not After : Oct 21 09:01:45 2025 GMT
        Subject: CN=6943d3332b0e0e0345d5bcc6588ffc0ff61e4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:55:3a:3d:f8:a6:b2:26:d3:5b:9c:19:61:
                    04:0d:08:85:ea:e5:51:33:fc:e0:d4:cc:bb:bd:8a:
                    17:1f:0d:59:18:13:a3:d9:98:cc:3d:16:79:1c:ca:
                    9d:b8:48:89:b7:ae:83:0e:67:b3:f7:0a:3f:ef:13:
                    2e:81:9a:f6:3e:81:5b:3e:f1:63:13:33:07:b8:3a:
                    b6:37:22:5e:49:cc:38:8f:eb:53:5e:09:4d:f7:bd:
                    1c:95:bc:da:12:2d:62:71:8c:ed:70:52:a9:e1:1b:
                    d4:c5:d6:5e:2e:84:9a:88:dd:28:b5:77:57:ed:a3:
                    60:44:3b:d7:a9:e7:0c:ed:86:b3:f4:8a:51:36:be:
                    13:c2:ce:16:12:2c:27:78:98:5c:03:b3:79:9d:f1:
                    fb:db:df:ae:2c:8b:8e:bc:d8:de:f7:e3:85:98:10:
                    cb:92:cf:25:9b:0f:70:ba:6f:ab:35:97:8c:de:21:
                    b5:98:42:42:17:f3:25:e1:f0:16:80:e4:a3:32:3a:
                    3f:fa:d3:8b:b6:12:7c:6e:c1:59:bc:31:2b:93:6e:
                    35:3d:ef:d0:75:6f:b9:e7:7a:74:69:99:35:e1:26:
                    6d:81:86:1f:26:d9:75:2a:a6:02:d1:09:2a:9c:b5:
                    cf:87:5a:0c:c8:bf:a7:87:4e:2e:98:44:01:26:7a:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:43:D3:33:2B:0E:0E:03:45:D5:BC:C6:58:8F:FC:0F:F6:1E:47:55
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:40:a7:90:ed:2f:fd:76:84:b5:bb:73:70:49:ab:dd:c7:
         08:fb:3f:9d:40:5c:f7:a3:62:7a:2c:d7:1d:8e:c6:be:fc:04:
         ec:03:56:33:c2:87:ec:67:80:81:84:ea:99:92:c4:36:ac:8f:
         36:8f:be:ae:66:00:f3:b9:8d:bb:06:d1:d7:77:ad:b7:d0:24:
         24:c8:f7:17:c5:8b:0b:86:97:f2:49:fb:68:04:35:25:d4:76:
         fd:1d:a2:ec:e7:90:9e:1d:46:a2:81:79:2d:60:68:22:77:43:
         c5:83:02:1e:23:89:88:13:5d:f3:e3:c9:27:00:73:52:ff:c8:
         18:14:66:62:9f:de:7f:86:f5:6b:d9:c1:81:a1:ce:21:e6:d0:
         09:17:d6:65:06:5e:ef:5e:84:ef:fb:07:16:0e:ac:aa:be:6a:
         79:3e:e0:37:fb:56:1e:32:10:41:3f:16:e9:5a:22:86:17:81:
         5a:6b:64:3a:44:5c:c4:5f:ce:83:cf:f7:9b:df:e7:46:a1:d0:
         86:d6:77:de:e9:44:4f:b0:f3:4f:1e:f8:eb:67:2f:a1:0c:ee:
         c9:00:0b:19:48:b7:55:a2:8b:4e:c8:c1:68:b9:7a:12:c8:05:
         22:59:ba:e1:64:86:35:b7:eb:75:03:5f:18:14:e8:de:a1:94:
         e9:bc:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:27 2025 by rpki-client