Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
File:                     VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json)
Hash identifier:          c0dvGmQPweNjL7+raBsACZYixsBxDAyVnnIopCo8So4=
Subject key identifier:   E1:1C:4A:DD:45:1B:FE:F2:E3:17:0D:84:E7:76:83:F8:2D:72:BE:43
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       019A017E9CCECE40DE3B953BB914B851FDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
Manifest number:          16F3
Signing time:             Mon 20 Oct 2025 12:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 12:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 12:01:06 +0000
Files and hashes:         1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=)
                          2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=)
                          3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=)
                          4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=)
                          5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=)
                          6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=)
                          7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: aUK187YYB9xlf5T7mW9oqKxLXibti8ez4e806/yM+Ac=)
                          8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=)
                          9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=)
                          10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=)
                          11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=)
                          12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=)
                          13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:7e:9c:ce:ce:40:de:3b:95:3b:b9:14:b8:51:fd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Oct 20 12:01:06 2025 GMT
            Not After : Oct 21 12:01:06 2025 GMT
        Subject: CN=e11c4add451bfef2e3170d84e77683f82d72be43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4a:63:84:f9:9f:ca:9d:2c:8e:81:bd:3a:26:
                    d8:1b:29:ee:2c:8a:39:6b:f7:82:f5:88:c4:10:09:
                    9c:76:c0:ed:ce:d9:8f:c4:0a:84:e4:1c:68:ff:27:
                    72:3b:1a:38:9c:47:f0:ea:a0:7d:65:6f:f1:52:a0:
                    70:39:38:f0:70:dc:02:8a:9b:b3:7f:36:84:2b:e9:
                    3a:04:39:e7:ae:28:35:26:5b:d8:eb:db:cf:a0:d7:
                    92:9b:d7:28:11:7e:e9:f2:05:29:e7:b0:30:f8:9e:
                    4d:a4:95:bf:0e:fa:26:6e:e1:13:fd:52:8a:08:36:
                    14:fe:81:42:10:4f:4f:3d:a5:3c:dc:74:53:01:7a:
                    d4:7b:c3:e1:42:1d:fd:d3:64:9e:13:e1:96:db:90:
                    2d:ae:75:eb:18:eb:36:19:3c:46:4b:e6:e7:c1:e4:
                    51:3c:98:dc:7b:71:73:17:9c:08:fa:ff:ca:db:e4:
                    0e:91:8b:dd:cb:18:e6:7b:29:cc:0b:c8:77:80:8b:
                    a7:87:5a:52:7e:bc:73:24:ba:7a:21:43:94:7a:69:
                    52:c2:0a:fc:9b:f8:82:d6:fa:b4:9f:99:3f:d4:cd:
                    08:05:1b:08:2b:07:e4:3d:ef:a8:5c:17:9c:c7:cc:
                    42:ac:c0:6a:5a:f4:8b:4d:c4:bd:bf:d5:34:56:7b:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:4A:DD:45:1B:FE:F2:E3:17:0D:84:E7:76:83:F8:2D:72:BE:43
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:9e:7f:3e:2a:aa:9b:7c:8c:99:dd:5b:9f:14:4a:89:f0:
         28:b3:a8:9b:47:4d:76:00:6d:7c:44:79:c1:42:83:df:16:12:
         24:2c:3b:69:fa:46:4d:cc:cf:74:31:b3:60:32:5d:7f:33:1c:
         2e:0f:49:d6:c6:32:ae:ff:da:16:77:2e:99:9d:f9:76:8e:ba:
         44:96:5d:37:e4:48:48:e3:d9:62:c9:b4:f4:e3:ef:47:3b:05:
         2a:da:88:ae:fa:78:33:27:14:e3:e9:f6:98:32:20:89:7e:9f:
         a5:05:be:71:6c:4d:ba:9b:22:e1:07:c4:85:96:4c:f2:c4:8a:
         43:1a:3c:8c:83:99:b8:72:e8:df:db:86:89:86:b3:40:4c:5f:
         1c:ed:33:e1:6e:6b:f0:c9:44:98:05:83:e2:90:98:75:5f:a8:
         b2:f0:bd:f9:9e:c4:63:c9:2b:f5:ee:22:a8:1f:ec:cc:28:96:
         83:cc:8c:12:5d:10:01:a2:09:79:14:c5:2d:bf:2a:35:1a:93:
         51:6c:f7:05:8e:69:c9:5b:28:4c:0c:88:41:fc:0f:df:8a:09:
         80:7d:9d:b3:38:6b:f7:6c:ba:9c:35:04:ec:5e:d4:88:3b:3c:
         43:ef:81:0c:c8:71:84:5b:9a:cc:b6:f5:e1:b8:7c:87:51:80:
         44:36:3f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:11 2025 by rpki-client