Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File:                     VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier:          PwHOMYvOYlcZug9KTazGtlyuFAk5YmYfayCqVCbuJJE=
Subject key identifier:   3A:D9:D2:51:EA:BC:8B:74:7E:53:A2:1B:5E:F6:75:62:3F:82:D3:91
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer:       /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial:       0199FB7C9B8D7C92E2A425D0797B60E1D18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number:          07F3
Signing time:             Sun 19 Oct 2025 08:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:11 +0000
Files and hashes:         1: VOCwh1utjz1n3G0fRSWrGdBLX3E.roa (hash: N86Thb+Z2Cee2FUQYjZTboBPyhDY9zRcG/ZzIf2sbhE=)
                          2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: zmQXoVvl9uLWNA38BlgwdF8ptUsBl394j1N1tHeOTAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:9b:8d:7c:92:e2:a4:25:d0:79:7b:60:e1:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
        Validity
            Not Before: Oct 19 08:01:11 2025 GMT
            Not After : Oct 20 08:01:11 2025 GMT
        Subject: CN=3ad9d251eabc8b747e53a21b5ef675623f82d391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:b9:71:b4:5e:6e:9c:87:5c:a4:7d:96:99:
                    af:00:99:b9:19:fa:a2:ff:e3:63:d5:4e:10:d8:87:
                    ad:63:fd:23:d4:db:18:3b:92:a4:41:84:85:7b:17:
                    90:a6:75:93:14:bf:ae:f1:3e:76:0e:ce:37:9c:58:
                    80:26:83:b7:37:14:0d:56:53:8b:9e:ac:cc:fe:d0:
                    eb:75:f3:9a:38:2b:52:61:d3:e3:6b:4d:f1:78:86:
                    1a:6f:e9:74:69:c7:c3:d0:33:bc:2b:bb:1f:55:83:
                    e5:bd:39:ea:e6:98:8b:ec:0c:4d:b0:85:dc:31:88:
                    fc:82:5b:cf:6a:c9:90:ae:98:6e:b1:a9:79:06:72:
                    e4:a6:e6:31:20:ac:a7:9e:e5:99:9f:7f:95:ea:08:
                    9f:0c:c4:c5:96:bd:ec:3e:a8:12:4f:6b:ab:a1:55:
                    a0:4c:a2:38:41:71:ea:e1:55:a1:0f:d2:c0:97:10:
                    4a:1a:ad:1d:63:37:70:e5:c9:90:70:33:61:fa:39:
                    d0:28:74:ad:20:13:74:d9:9a:ac:fe:0b:b7:5f:35:
                    27:03:b0:58:45:b8:36:69:f4:68:00:d8:9d:05:23:
                    6d:29:7a:29:cf:29:4b:13:c4:67:93:f2:83:28:fa:
                    0f:43:9f:26:cb:36:35:89:21:b6:cd:6a:69:ff:c6:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D9:D2:51:EA:BC:8B:74:7E:53:A2:1B:5E:F6:75:62:3F:82:D3:91
            X509v3 Authority Key Identifier:
                keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:88:1b:ba:28:2d:80:ab:0d:9d:7f:51:01:f5:13:a7:3c:8b:
         4f:e3:59:bf:bd:eb:25:a1:86:35:d2:12:8b:f6:41:f7:fc:00:
         0c:cb:fc:af:9e:31:05:35:47:aa:cb:ef:4d:11:16:be:46:bc:
         30:c8:e1:88:b4:a5:d7:c4:cd:9a:bd:9d:df:91:7b:0d:07:6f:
         11:f4:94:5d:69:a9:c3:ca:b1:93:f3:cb:a8:89:7f:cc:5a:5d:
         72:78:00:96:67:2b:72:fa:87:14:f2:8b:c8:3a:ba:dd:c6:b4:
         44:29:52:54:e1:4d:30:a1:12:f2:a1:24:3e:5b:eb:c1:a0:0e:
         d9:0c:97:64:8b:f0:50:87:57:b0:5b:c6:79:94:d4:04:af:fe:
         5b:f2:53:32:4d:e9:bb:40:ae:56:ed:dc:03:25:21:1e:d9:69:
         8b:d7:13:98:b1:e9:3e:82:72:ad:67:81:1c:5e:63:56:0d:d9:
         ab:df:80:a6:83:ef:2e:3f:44:ce:a0:7b:e7:8d:b6:f8:c3:3d:
         2a:25:ea:78:a0:68:59:f7:76:b5:fb:85:7e:de:59:e3:6a:92:
         6b:39:b7:c4:ff:00:a5:a3:d4:be:23:68:b1:2d:36:b0:7b:bb:
         24:81:c3:78:b6:8b:56:ba:f1:14:ed:67:69:be:21:7a:93:c7:
         5d:27:a9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:29 2025 by rpki-client