Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          aaUhpecRhLA9Ag2SdFRo1R8HpLyk/XvNiSPYG4uW5Ts=
Subject key identifier:   D4:0B:75:57:BE:1F:E6:04:F5:3D:F9:0C:AA:4B:21:10:04:65:9D:0D
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       0199FBEBEB9CA159ED1ED7E200A6E163B35B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          0EFB
Signing time:             Sun 19 Oct 2025 10:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:46 +0000
Files and hashes:         1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
                          2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: /sWE8wD+0jrOT4Fs5FbdOqYQIJRv+19s5CJrd/sAtiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:eb:9c:a1:59:ed:1e:d7:e2:00:a6:e1:63:b3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Oct 19 10:02:46 2025 GMT
            Not After : Oct 20 10:02:46 2025 GMT
        Subject: CN=d40b7557be1fe604f53df90caa4b211004659d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:a0:f3:33:6a:b6:cb:c3:e6:c0:a6:fc:7d:
                    68:cc:83:fc:b5:1e:55:05:46:9d:d6:9b:4f:3a:98:
                    c6:7b:27:52:c2:b4:7d:33:e3:bf:b8:63:7e:6d:ad:
                    e5:37:1e:9c:54:8f:81:75:e7:24:7a:5f:94:4d:e3:
                    a0:59:4c:43:c4:be:ae:eb:af:46:84:e6:78:73:79:
                    0e:04:1f:e2:73:2c:9c:65:59:af:05:a9:70:7e:f9:
                    50:3a:b2:fa:dc:a4:d2:2a:26:ab:eb:75:1e:04:5a:
                    32:8e:3a:97:78:fb:43:67:1a:ae:cb:64:56:85:e6:
                    de:ba:5d:03:e0:0f:11:33:8d:1f:36:8e:f1:9c:89:
                    2b:ab:98:7a:46:52:05:ba:e3:0b:16:32:55:be:f2:
                    38:87:b9:a0:e1:cd:d3:02:9c:84:33:c8:a5:75:f6:
                    4d:ed:54:e4:9b:08:62:11:a7:43:80:44:5b:38:2b:
                    e7:4c:d5:c8:76:79:f1:6f:6f:81:20:fe:25:79:c8:
                    22:52:62:47:c8:bf:d2:88:ff:92:1b:ad:92:ab:c2:
                    e1:87:54:b3:1b:df:fb:de:43:80:be:7e:31:02:63:
                    76:1d:f0:f5:05:62:ea:d1:a1:e4:d8:cd:a2:fd:a2:
                    36:8b:e2:67:40:fb:10:9f:4d:ce:a9:ef:d4:2d:d0:
                    5e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:75:57:BE:1F:E6:04:F5:3D:F9:0C:AA:4B:21:10:04:65:9D:0D
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:28:cb:31:47:37:2c:6a:f3:eb:9b:69:aa:a4:3a:89:81:
         0f:a4:4f:db:1f:2a:21:b0:e5:90:cb:6a:87:61:fe:d0:f3:12:
         61:5f:b4:61:78:5a:2c:0a:f0:ed:94:eb:b1:76:48:2d:fd:0e:
         14:ba:86:2d:6c:8e:39:96:27:be:55:2a:10:37:19:a6:73:08:
         8b:76:f7:0f:4d:b1:49:c0:57:ba:f3:9c:4e:55:26:7d:2f:fe:
         ae:06:df:92:21:2a:f7:96:d6:13:75:00:e5:5b:5d:2f:5c:75:
         f5:44:1f:2c:84:f4:70:51:f1:27:00:31:e5:d7:e8:ff:44:06:
         3f:c4:89:a8:e8:00:6b:24:ee:d6:ff:4b:42:16:0a:cf:77:fd:
         c0:30:ec:d0:ad:46:05:24:65:f5:6f:2c:09:da:d2:3b:89:11:
         52:92:f9:7d:04:c3:a6:a2:40:c0:eb:8e:e0:fb:af:b8:4f:5c:
         23:35:b6:d9:0f:ed:a0:a1:f4:a6:0c:e1:c9:f5:cf:62:a2:b1:
         d7:c8:bf:8c:95:c7:73:fd:6e:62:dd:11:b2:2e:09:f5:28:0d:
         8b:b9:ce:14:fe:95:bd:fd:44:69:c8:f6:be:08:7e:bc:03:92:
         51:d9:68:fd:5b:5b:a0:d3:bd:1c:9b:a1:d7:52:10:96:66:73:
         14:6d:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:48 2025 by rpki-client