Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File:                     VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier:          WwXsKCG/MKi48Wze8zCxd/2jxJx12QY+o7bfl/pjc+Y=
Subject key identifier:   5E:2D:99:87:B5:17:F4:EB:2C:23:B1:7B:9C:CE:2C:8A:18:50:CE:EE
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer:       /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial:       0199FC2158D13EA78EFE14B0EE72B83AC169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:07 +0000
Files and hashes:         1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
                          2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: LFD+9W8uNZxJtR9lqrbFiTqElelmVuuCRkaY9CPemwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:58:d1:3e:a7:8e:fe:14:b0:ee:72:b8:3a:c1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
        Validity
            Not Before: Oct 19 11:01:07 2025 GMT
            Not After : Oct 20 11:01:07 2025 GMT
        Subject: CN=5e2d9987b517f4eb2c23b17b9cce2c8a1850ceee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:bc:00:e3:5f:0e:d0:08:dd:fe:ec:4c:a9:
                    7e:62:27:a4:a5:d6:e5:a9:6b:de:e5:f0:2f:46:a0:
                    b8:24:9b:3e:b4:c6:38:a9:2e:57:de:0b:bf:65:af:
                    1b:17:08:bb:68:50:ba:05:6f:69:2c:72:35:6b:29:
                    d7:3b:8e:63:2d:29:db:26:ef:5c:c3:a6:06:1b:b5:
                    b9:0d:40:ab:67:10:ce:ed:be:f5:65:b6:aa:67:c2:
                    40:74:99:f3:0f:49:a3:88:3d:27:b4:42:62:78:22:
                    a4:9e:49:f3:15:83:a3:bb:e1:fb:a3:4a:10:92:00:
                    df:b9:19:f6:4d:c0:e4:99:08:37:f1:8a:e3:20:5e:
                    c6:5a:55:13:2c:f1:64:d7:01:2c:72:25:64:44:ee:
                    a4:c2:89:e0:9b:a6:d3:da:56:e1:d1:5f:f7:e2:e1:
                    f7:56:0d:d6:f1:d9:a0:24:71:fb:0a:c5:84:48:6d:
                    28:53:e3:36:de:ba:c5:48:34:75:6d:56:16:92:ef:
                    3d:d0:be:56:38:a6:8a:74:7f:b2:f3:7f:d9:e6:eb:
                    95:99:0c:8f:bf:5b:c2:d4:60:98:32:9b:5a:9a:2a:
                    7d:49:ea:0d:53:43:12:4f:7f:1c:97:44:b0:35:27:
                    65:af:45:e8:f5:3e:47:be:83:ef:e1:f1:ee:c2:43:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:99:87:B5:17:F4:EB:2C:23:B1:7B:9C:CE:2C:8A:18:50:CE:EE
            X509v3 Authority Key Identifier:
                keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:ac:5b:95:9f:6e:5d:e0:e3:71:17:50:0a:92:b9:36:ff:
         ec:a8:06:8f:8f:fe:be:5b:c2:22:0f:67:a4:15:04:79:5f:c0:
         21:62:0b:1d:2f:83:f0:07:28:14:57:5e:89:72:95:9a:fc:2b:
         72:53:c9:31:08:53:17:e1:f9:2e:ed:69:6f:9b:cd:21:04:19:
         b2:6a:a2:15:83:7a:5c:a9:e6:2b:b8:f3:b6:25:cc:66:f2:bb:
         da:2b:d3:ad:05:67:5a:52:d6:5e:fe:c0:a5:f3:d8:20:87:d6:
         be:1b:ca:20:e7:f3:75:14:bd:88:7f:05:81:d3:27:cc:ef:34:
         ce:43:f8:61:e5:b1:72:04:96:ae:b1:18:8c:b3:51:f2:7a:27:
         b1:98:f3:07:31:cc:ce:86:f3:56:e3:84:bb:a9:c1:b1:07:65:
         3e:fe:f0:2c:1d:ff:1b:94:b9:77:b6:f3:d6:50:f5:2d:5d:60:
         74:01:65:8f:2b:e4:f5:33:06:69:95:2d:54:c0:57:25:f8:87:
         8f:ea:ea:52:5a:97:cc:98:9d:78:bf:9c:29:96:cb:f8:fe:76:
         d4:bd:41:56:30:c6:98:2c:b0:16:04:13:98:52:59:92:3c:5c:
         86:31:2a:59:45:e5:34:3a:29:cb:d3:9d:bd:fc:f4:3e:92:35:
         8a:11:a5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:26 2025 by rpki-client