Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
File:                     VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft (raw, json)
Hash identifier:          v2e62JIaNMBvcO0Ot25HbhcQJYcwubx/bn+pPXcLZRk=
Subject key identifier:   C4:21:CC:50:92:2C:10:61:D0:E8:C7:3B:F7:2D:DF:59:5A:EE:19:6E
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       019A02598882AAE794191DCBBE1BF911C230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
Manifest number:          056C
Signing time:             Mon 20 Oct 2025 16:00:13 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:13 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:13 +0000
Files and hashes:         1: EKm6lRYBy71eLpah99Z7siLol84.roa (hash: vHi1kL6cNlMxGSyF4hR0aJzdSYex1J7WkrgUK7ir1c0=)
                          2: HN2NjgcrA1uNmOFiqlfNJWjX5-0.roa (hash: sKvzDTDf2qwp6uU7QVuroNn534QLUvAgYTCUUX0q+2Q=)
                          3: VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl (hash: EaUaL5OMS8YbOwrlwcQkHVmUwifUyTYL+idvsU94FEQ=)
                          4: WWYl82GSEd1qQAxiD5G7v3lLaQM.roa (hash: v6KLQe+v+na5DQ568uRBwOpKNe98JkD2TIoeCWqcFqk=)
                          5: kG1QnbiKhR1_tyATAaFEcNwW9fw.roa (hash: dq/cUM8o3KObsN+DIvgVTWLfHsTnIl7FhpJVaY6Naw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:88:82:aa:e7:94:19:1d:cb:be:1b:f9:11:c2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Oct 20 16:00:13 2025 GMT
            Not After : Oct 21 16:00:13 2025 GMT
        Subject: CN=c421cc50922c1061d0e8c73bf72ddf595aee196e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:3f:c6:83:18:01:70:b4:94:50:02:82:b7:
                    b5:bc:d2:58:c1:5d:42:41:25:b6:af:56:c7:3f:c9:
                    c3:08:77:01:a0:55:87:84:64:b1:c5:54:6d:aa:9f:
                    00:ba:22:fd:7c:37:10:bb:c4:46:d8:42:11:a4:a3:
                    3d:64:12:71:2c:85:e1:f5:51:65:f6:dd:29:12:fa:
                    f7:04:ce:0f:5c:5c:6a:6a:fc:33:99:e6:13:d3:b9:
                    2f:b2:f9:09:cc:33:f9:4b:12:9c:7c:7d:4f:ba:12:
                    32:7c:72:d4:1c:b1:81:3c:4c:ba:ab:48:cd:2f:35:
                    e0:d4:6b:ff:ba:61:6d:be:c8:8c:e3:0f:eb:10:55:
                    1e:b4:36:dc:2e:54:7f:f9:af:54:77:db:3c:54:95:
                    3c:5c:b4:24:1d:0f:c4:41:fe:ee:f4:31:72:80:0d:
                    b4:25:40:a3:d4:46:f1:30:90:79:cf:1a:02:fa:3a:
                    a4:ae:34:34:67:18:3d:97:8c:0f:e8:68:3e:53:7c:
                    1c:47:a7:80:27:67:f3:12:f5:e7:31:be:ca:08:5d:
                    71:6f:13:3a:c5:45:de:2c:25:40:28:ee:02:93:ba:
                    2f:27:e4:57:8b:f6:ad:69:3f:33:c2:16:5e:50:e7:
                    c0:4f:56:57:63:2d:6e:22:3b:cd:4b:a5:83:87:2e:
                    89:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:21:CC:50:92:2C:10:61:D0:E8:C7:3B:F7:2D:DF:59:5A:EE:19:6E
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:da:fa:13:6b:83:97:c4:bb:f9:46:76:32:47:3d:83:ef:cf:
         7f:be:28:c2:c5:b4:41:2e:e2:c6:a2:d2:4b:71:18:07:50:ca:
         6f:49:62:6d:d7:a1:66:29:b1:c4:7e:16:a0:18:ed:2b:d3:c8:
         07:d3:70:60:4f:1e:66:18:1c:ef:9e:2c:94:c9:05:e4:a3:08:
         3a:68:36:00:46:79:5e:1d:e0:65:32:5f:ca:a0:2b:a7:3b:03:
         99:f8:5e:5b:7e:eb:ab:50:e0:af:3e:c3:5d:6f:7b:89:06:b9:
         cc:57:13:3b:fd:7c:3f:b3:f3:60:a3:14:34:2b:96:48:2d:4c:
         5d:14:48:44:ea:63:e7:95:71:d2:bb:09:04:f2:4a:2c:45:2f:
         15:6f:38:01:2a:31:35:47:e4:50:b3:7c:72:2f:0c:08:45:1f:
         fe:53:bc:7c:16:2b:6d:5d:c0:98:84:e6:8c:b7:af:07:6a:91:
         e0:48:e2:61:b7:a0:16:88:6c:ee:4c:c8:d8:ed:e4:f9:48:45:
         eb:cc:12:3d:5f:a6:f2:8d:93:46:8f:a1:5b:38:11:c7:01:34:
         ec:d2:89:1e:67:7a:80:d2:33:88:ef:6c:4c:07:f2:ec:f5:21:
         e2:62:06:e0:a8:08:b5:d9:c7:65:ca:b1:57:22:09:7e:2e:fc:
         9b:a8:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:35 2025 by rpki-client