Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
File:                     VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json)
Hash identifier:          e6itI4K8SWq8BfRrSRG/Kinf+J9NLGSAEcsOOw0V8zw=
Subject key identifier:   63:4F:57:60:94:F4:3C:95:AF:50:5A:96:BB:7C:F9:EA:3E:EB:F6:9E
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       0199FF90382EF306DB707E203095E56867E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
Manifest number:          16F2
Signing time:             Mon 20 Oct 2025 03:01:05 +0000
Manifest this update:     Mon 20 Oct 2025 03:01:05 +0000
Manifest next update:     Tue 21 Oct 2025 03:01:05 +0000
Files and hashes:         1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=)
                          2: 6rfsfqbb66Z4YyQ85DrSCClEYyQ.roa (hash: XC2Ku0Iwp3bsO/t4i7GruB0hUrNI8+QktDyu/hHIIas=)
                          3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=)
                          4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=)
                          5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=)
                          6: UyMnXCzERFHuMfG9nOWN2JfyXW8.roa (hash: EQ7hm2P0BQiEP7hNsHxFIlwQPko0e6zROHrzHeJDMiU=)
                          7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: +KgxbABag5z/UU6XdA0sARxley8j6w6SCsVw4lEhybs=)
                          8: YLeQNZw3hcBtWoEAgnCwPxey47o.roa (hash: CS+XdvzVDUj/g/4LCEHu0vbk7Z3SBLKD2qg+1+JDXic=)
                          9: Z_y1WsXx1jtBwikmLYsrNQ0u97Y.roa (hash: JOry3wPpe1ZpS7Eexrwc4bHx5BJIx5iyu4lyAycRZfE=)
                          10: cCfaLzRMHlU0R-0fDzYcsiLXNDs.roa (hash: algSutAD2+Qqydqr9NIMxqgFJyx7cGjxYNbn3pouYJk=)
                          11: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=)
                          12: tey46OJVEFwZfsUTecWeOyFgW4c.roa (hash: fSI00uNJf0KWEPclVsZx3cz+BHLVEk1JCyV4wgOrzyk=)
                          13: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:38:2e:f3:06:db:70:7e:20:30:95:e5:68:67:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Oct 20 03:01:05 2025 GMT
            Not After : Oct 21 03:01:05 2025 GMT
        Subject: CN=634f576094f43c95af505a96bb7cf9ea3eebf69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:6d:10:b3:fe:1b:d7:d5:7c:70:73:c7:ae:
                    df:14:35:3e:e4:1f:53:15:38:06:43:77:e7:ee:ec:
                    81:e6:6f:ac:e0:0b:51:8f:00:15:21:34:e9:9c:2e:
                    e3:87:0f:c8:a8:38:0e:02:f2:1c:78:d0:6e:95:d4:
                    26:d6:5a:c5:42:6f:b9:6f:be:de:ea:5c:5c:7a:37:
                    90:8c:ab:48:1f:bf:38:1f:32:59:09:55:f6:7a:4d:
                    3d:95:dc:cc:99:dc:ca:1f:98:68:8d:4d:10:60:07:
                    9a:c2:6d:2b:fe:6d:cf:3c:e4:60:a1:6c:85:ff:b6:
                    95:36:3e:eb:5b:92:ee:f0:64:a8:3e:f7:e3:0b:47:
                    a5:48:45:90:f4:e6:22:53:2a:b5:14:23:22:db:f3:
                    d4:13:ce:e4:78:89:ac:cd:8f:0b:40:65:86:38:d3:
                    1a:e3:af:32:56:94:73:f2:50:c1:8d:0b:d2:32:be:
                    d6:1e:9d:3f:2b:26:0f:50:b1:cb:fe:76:b6:83:b3:
                    41:30:2a:5b:e1:11:33:76:2b:22:bf:a3:d4:ba:38:
                    4e:28:6f:e4:b5:9c:ef:72:57:d8:46:bc:19:99:e2:
                    a2:91:cf:2e:15:ae:b1:d4:5c:10:e0:11:8f:bf:83:
                    a4:0c:24:c1:35:d5:b7:c7:29:cf:c5:ce:48:d7:be:
                    2f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:57:60:94:F4:3C:95:AF:50:5A:96:BB:7C:F9:EA:3E:EB:F6:9E
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:dd:56:fb:47:bd:ed:ee:88:3e:1c:b5:d2:28:0f:0a:88:ae:
         71:8e:3a:30:dc:25:36:6a:c2:da:ed:48:1d:fe:cc:68:4b:6d:
         96:a4:62:b3:f7:9e:d9:ac:4c:47:14:db:fe:c0:35:57:ef:87:
         64:92:ce:f3:a4:e7:18:d3:08:a0:50:ee:4e:71:16:79:c0:c6:
         8e:b3:e5:49:b4:45:d6:ea:d7:2b:5c:55:f4:2d:92:f9:30:a6:
         89:97:d2:9e:af:dd:9d:75:6c:e1:f7:a3:c9:46:b5:e0:6c:12:
         51:0c:69:5e:31:18:bc:96:5b:94:cc:aa:16:b2:0d:34:c7:d2:
         7a:c0:c1:35:92:5d:3c:f6:1c:6c:fb:d0:22:d8:4e:08:87:f8:
         f2:dc:74:53:b7:ba:9b:65:00:e0:1e:fc:17:04:e5:69:5a:9d:
         5b:e0:18:fb:62:63:86:92:be:ca:87:b4:c9:d9:e7:11:00:f3:
         2a:3f:bd:f7:24:ad:84:47:0f:dd:39:0d:48:2d:80:73:a1:0c:
         60:92:27:d6:a0:c0:23:3b:ad:0d:ae:51:f7:f8:13:dd:58:69:
         0d:57:70:a8:7f:bd:fb:44:cc:5d:5f:9d:1a:28:6f:de:74:08:
         0e:41:b7:2f:27:5e:b5:ca:50:0a:ba:c7:e2:ad:56:2b:85:b3:
         2e:23:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:24 2025 by rpki-client