Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File:                     VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier:          1aRCzw5hzLmeUHawhRvsDoyyTHGgP38Hgv2fTmTslRs=
Subject key identifier:   06:27:E0:A5:1E:1B:32:A8:A0:3E:A8:46:A4:68:87:12:B0:9A:8A:4B
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer:       /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial:       0199FBEB458AE6A32B275A7D6AD30AA4E6BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number:          05C5
Signing time:             Sun 19 Oct 2025 10:02:03 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:03 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:03 +0000
Files and hashes:         1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: fHprucqRDjjsYGIHs+LW6avPQpcdcVDffCTWrHM8jjw=)
                          2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:45:8a:e6:a3:2b:27:5a:7d:6a:d3:0a:a4:e6:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
        Validity
            Not Before: Oct 19 10:02:03 2025 GMT
            Not After : Oct 20 10:02:03 2025 GMT
        Subject: CN=0627e0a51e1b32a8a03ea846a4688712b09a8a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:ae:7f:f8:c5:4d:d6:48:f1:2a:82:f1:f5:
                    8d:8e:1a:a2:c3:85:ce:87:93:94:df:d3:08:c5:9a:
                    7a:d9:bf:8f:d9:22:e8:b7:02:b1:03:c9:65:04:6c:
                    9a:60:ad:dc:42:f8:e3:a9:0b:a7:04:e8:f0:1e:7b:
                    3a:1f:86:e2:90:89:8e:13:91:e4:55:18:34:9f:61:
                    65:5a:32:4d:53:21:18:47:30:f5:b6:c6:08:c0:b9:
                    7b:b1:2b:d3:ec:3b:cd:11:f2:09:50:3a:81:78:9d:
                    32:b3:3d:04:0b:87:5a:c7:34:1c:eb:16:a2:85:fe:
                    2f:da:4f:a2:60:19:23:31:9a:ef:7f:5d:25:8d:ec:
                    29:f8:f9:c5:4a:19:e3:c4:e2:af:37:9e:90:4c:f1:
                    01:12:56:66:30:65:c9:aa:24:f5:55:23:99:e9:c8:
                    11:70:5e:9f:ef:62:b8:72:a4:f0:71:9c:8e:18:ee:
                    97:88:24:dc:74:39:3a:65:10:76:43:47:26:45:19:
                    7b:54:8a:9d:78:de:c7:9d:53:a4:2b:6e:5b:67:6e:
                    2a:cf:41:3e:fb:a0:33:89:23:31:7d:13:22:db:e0:
                    56:5e:64:6c:79:03:ea:1b:ed:dd:52:b1:5b:fd:b6:
                    60:be:06:61:b6:08:48:d0:c7:53:9b:b5:0a:a3:db:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:27:E0:A5:1E:1B:32:A8:A0:3E:A8:46:A4:68:87:12:B0:9A:8A:4B
            X509v3 Authority Key Identifier:
                keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:26:b2:54:82:24:a9:8a:04:c4:59:94:5b:0a:87:62:e7:
         f8:6b:5a:8d:fc:13:dc:79:12:b9:b4:86:01:50:d9:5c:c3:82:
         c8:24:c5:25:b5:80:6d:d8:ab:46:6b:87:a2:1f:e6:f7:8d:ab:
         cc:a9:45:78:92:28:77:87:6c:e6:0f:94:57:f6:6a:09:e9:db:
         f8:9e:4c:36:90:b0:e0:48:13:77:12:1a:c6:1e:b0:93:fc:a2:
         e2:ca:15:90:72:88:80:66:8f:c4:20:5b:e3:30:ee:f4:b8:ca:
         f5:d9:11:b6:43:ca:99:ac:b4:f1:1a:f1:5a:0b:16:9f:bb:b5:
         19:6c:99:e9:82:76:f8:62:81:46:21:93:c3:9a:36:a3:88:6d:
         98:88:3a:78:55:f6:1b:e9:64:19:bf:6c:9d:c3:71:9b:97:d7:
         4e:1c:e0:57:69:6b:7f:98:18:b4:db:96:2b:52:93:e2:d2:39:
         36:9c:07:6b:9c:f7:b3:6a:52:e0:0c:a2:1a:09:5f:1c:7d:b1:
         98:63:6b:b4:cc:d7:fb:d9:8d:f7:3c:04:08:08:95:74:68:fd:
         10:d3:2f:4d:3d:d1:a6:07:2b:fb:5a:5a:b8:a0:1b:d0:bc:23:
         af:51:9f:37:d1:26:4a:57:bb:00:1e:24:e6:eb:01:07:fc:1e:
         a5:3e:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:45 2025 by rpki-client