Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          O+qUx0JK6Nyyp9VmWHgRG6gVWNo7QtbdxVwtlDoaZWc=
Subject key identifier:   1B:DE:E4:9E:87:0D:D2:1D:29:5D:0F:37:8F:EB:F2:DC:7D:8C:2A:A8
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       0199FB0F1225282BA1DFB04E337D39EDF3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 06:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:32 +0000
Files and hashes:         1: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: inPwjgrp4Vgl44mV++lNT+3ZMbVeeR0656X/3GjjlpQ=)
                          2: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
                          3: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
                          4: zPr7HrZQ0fX72obaVzae4hA6SNc.roa (hash: vjUhNFOtlaK42JGVIDi0wjlCpnam1o78sbpNvjcx8Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:12:25:28:2b:a1:df:b0:4e:33:7d:39:ed:f3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Oct 19 06:01:32 2025 GMT
            Not After : Oct 20 06:01:32 2025 GMT
        Subject: CN=1bdee49e870dd21d295d0f378febf2dc7d8c2aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:a2:53:83:ae:5b:ba:56:c3:61:96:c2:61:
                    7d:c6:83:be:84:9b:7f:81:1a:8f:cc:01:20:0a:fb:
                    34:ab:d6:12:9e:4b:af:79:f2:68:06:67:36:a1:32:
                    79:e8:58:5e:51:18:a2:49:a3:bc:84:07:7d:1b:27:
                    06:88:33:36:ef:82:4d:7b:ac:91:49:69:d0:2a:58:
                    5a:89:74:33:3d:36:e2:f7:8a:0e:00:88:dd:36:f8:
                    1d:27:bb:6d:76:7d:72:3d:ac:ae:d1:1f:7f:7d:36:
                    d2:cf:80:35:e4:97:f6:f7:47:1e:86:e6:c3:b1:7b:
                    9a:4a:a4:75:b0:42:f9:bf:82:63:e8:5b:c7:b5:22:
                    d2:42:ff:fb:74:33:ac:83:c5:3e:8e:34:54:4d:8d:
                    e1:d9:c5:8a:dd:3a:f7:69:ba:a9:7b:d0:a1:27:62:
                    8d:65:c8:d9:45:3e:0b:96:68:f6:4c:9f:5a:7d:01:
                    a5:0e:96:b9:8a:16:2e:b2:04:15:43:5f:cf:7e:b6:
                    eb:16:b7:de:2c:04:49:71:a2:18:b2:c1:9e:86:fa:
                    59:13:9f:02:09:78:f9:09:78:31:9d:2a:fe:67:c4:
                    98:d9:8f:ac:f4:bd:83:1f:5f:e1:b1:b1:90:73:3c:
                    30:25:26:86:3b:80:31:5d:1b:d6:c0:ce:8b:a9:65:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DE:E4:9E:87:0D:D2:1D:29:5D:0F:37:8F:EB:F2:DC:7D:8C:2A:A8
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:9b:d2:db:87:a9:1a:6c:d8:f2:2b:ae:01:0e:65:bb:21:
         c4:89:c6:1b:5a:77:52:b9:05:58:28:af:62:12:45:4d:0c:06:
         86:1d:f9:b2:fc:db:f0:d6:35:5b:0b:56:38:9d:c3:cb:ce:48:
         95:bb:6e:15:1f:a6:8a:34:ec:73:81:67:e5:24:b2:8b:af:ad:
         24:0c:82:1a:d5:c6:af:c2:b5:15:40:8f:0b:e1:c9:82:7d:97:
         8f:ef:08:ec:31:1e:d7:19:71:d6:43:06:11:3b:02:1e:ed:8b:
         a5:14:4f:bf:63:5e:42:93:a4:98:11:7d:c8:84:17:05:6d:96:
         e2:48:18:d3:3f:da:08:5f:bc:af:6b:c0:33:56:d1:cd:34:2a:
         00:a8:84:92:40:39:fd:c3:1b:a7:3a:ac:1d:99:db:4a:ac:df:
         eb:af:24:e9:b6:0c:69:9b:9b:07:a6:79:0a:3d:0d:c4:4a:66:
         44:05:de:6e:cd:ee:48:79:a2:1c:cc:60:64:65:23:f4:6a:13:
         14:44:2f:7f:ce:31:d4:e5:9b:40:8f:16:0e:22:20:8b:0c:ff:
         08:91:cc:10:6d:bb:6d:02:7b:13:0e:4e:9d:b7:88:18:f8:e4:
         1f:32:04:b0:bf:67:dc:b5:1d:ca:fa:07:34:aa:40:c2:39:a4:
         89:41:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:53 2025 by rpki-client