Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
File:                     VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json)
Hash identifier:          QZYCTa0csb6yafaI7vsunpb7qMg9H8xW1Zc0euagn8Y=
Subject key identifier:   A2:AB:5B:AB:B0:D3:58:97:BB:72:AD:1D:35:F5:5E:81:DE:03:FB:DB
Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79
Certificate issuer:       /CN=5525775a706ac00c82fa29339e22e43108099e79
Certificate serial:       0199FC58A2F06B711946656CF4AAE9F6369A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
Manifest number:          11B8
Signing time:             Sun 19 Oct 2025 12:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:31 +0000
Files and hashes:         1: 7Hysv3h3cIK_WddtBkhV4eeOKec.roa (hash: vqkbaBvGL81dJNu1I/whqip6EIOAqXAyhwvf9zKaCBc=)
                          2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: ce4C3xnnGxv7putnTcza9WrC0yLml533tWgYjy0qVac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a2:f0:6b:71:19:46:65:6c:f4:aa:e9:f6:36:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79
        Validity
            Not Before: Oct 19 12:01:31 2025 GMT
            Not After : Oct 20 12:01:31 2025 GMT
        Subject: CN=a2ab5babb0d35897bb72ad1d35f55e81de03fbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b3:ec:8a:14:ef:68:ea:35:ca:28:82:88:41:
                    63:33:16:d1:c7:e4:72:05:70:f7:95:01:a4:1c:a2:
                    0b:f9:98:35:fc:4d:48:4d:02:91:f1:7b:08:25:a2:
                    43:50:25:9b:98:80:09:93:8f:55:db:46:18:c5:99:
                    1d:b7:ba:13:16:12:49:af:0b:e0:c5:1d:8e:dd:00:
                    ba:d8:f0:ce:7d:14:73:41:ad:a8:f6:30:5d:26:b2:
                    19:93:5c:4f:12:70:69:e7:77:0b:f0:0f:1e:96:35:
                    d6:2a:ae:4c:7a:e0:07:0e:2d:12:8f:38:e6:55:d9:
                    11:d5:8f:84:b8:4c:12:c2:74:18:86:b4:a3:f6:12:
                    ae:d7:94:e5:5e:ed:97:19:ee:91:a1:66:f5:c7:10:
                    30:29:19:bf:8a:56:0b:76:fd:26:1d:50:a2:ea:98:
                    c4:ac:4b:c5:b9:40:ee:7e:ee:cc:01:a8:51:9f:60:
                    e6:fa:d2:70:42:85:f0:70:f2:26:a2:dd:bc:fc:d6:
                    40:c5:b0:3f:45:ec:b3:d1:a0:0a:dd:2c:a8:11:77:
                    4c:60:3c:96:e8:2f:0a:e0:8c:83:ce:f2:d9:46:f1:
                    34:73:c1:f3:dc:89:47:3c:a8:d4:2b:fa:52:9b:db:
                    9a:fc:cb:89:d0:60:cf:bf:25:ca:8e:7a:2f:c8:e1:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:5B:AB:B0:D3:58:97:BB:72:AD:1D:35:F5:5E:81:DE:03:FB:DB
            X509v3 Authority Key Identifier:
                keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:28:03:92:a7:d6:f1:69:2f:d2:f7:28:85:e7:c9:68:80:18:
         50:ae:08:ee:1e:c6:cc:52:03:be:6e:b0:3f:29:0a:2e:d6:eb:
         c7:a3:86:7e:81:d8:e9:99:bc:67:12:3b:36:dd:5e:c8:c2:9d:
         7c:2d:e1:f2:c1:d1:f7:33:ba:24:ed:74:a6:83:91:92:26:93:
         1f:40:a1:40:bf:bd:5e:2a:4a:58:7a:01:c2:10:11:6a:ba:87:
         9c:ef:4a:b6:83:6b:35:52:32:36:99:c0:d9:e9:45:e5:4f:e2:
         fa:e5:97:25:79:61:87:06:8c:22:99:d0:e0:d8:f2:b6:a6:aa:
         2f:e7:90:76:d4:92:be:1f:d8:17:c7:17:c6:5c:9b:ae:d4:fa:
         19:8f:a7:c0:2c:2c:9f:8e:72:4e:f7:8d:cb:eb:a6:e5:fb:50:
         52:94:70:8e:cd:e3:c8:e9:62:ad:b4:4a:51:29:08:6e:28:65:
         38:f5:bf:01:06:82:61:ae:3b:b7:2f:71:4f:93:27:7a:cd:7e:
         85:28:e7:cd:56:84:cb:0e:6b:8e:3b:32:5a:79:e3:ef:e2:c2:
         94:d8:f6:99:e0:9a:d1:9f:0f:22:24:96:3c:ce:0a:90:dc:ed:
         f2:51:1c:3e:70:9e:cf:57:3a:5c:12:7d:1f:26:b1:1e:b9:28:
         53:35:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:23 2025 by rpki-client