Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File:                     VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier:          6krehjyr/IADop8QboppERTE4wF67dC7nWcRwLzEZ+s=
Subject key identifier:   6B:A4:EE:6F:7F:99:E9:46:02:FE:87:F6:73:A9:09:90:6F:AC:96:42
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer:       /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial:       0199FB7CBAEB4A6CFAD340F5F441430B27CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number:          171C
Signing time:             Sun 19 Oct 2025 08:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:19 +0000
Files and hashes:         1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
                          2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
                          3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: MGHRPzr9zATsdavEEmq5iKOGcR6B4WgdeuV/QVQWJbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ba:eb:4a:6c:fa:d3:40:f5:f4:41:43:0b:27:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
        Validity
            Not Before: Oct 19 08:01:19 2025 GMT
            Not After : Oct 20 08:01:19 2025 GMT
        Subject: CN=6ba4ee6f7f99e94602fe87f673a909906fac9642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:ad:cc:b3:97:30:f7:6b:f6:0b:a7:ff:7e:
                    43:2a:44:e0:05:73:98:58:b4:89:7e:e5:11:c1:e6:
                    05:43:85:d0:47:03:45:2f:84:aa:53:32:8c:3f:50:
                    c9:99:61:58:bc:d7:f6:c0:98:57:ac:d3:bf:ad:5b:
                    93:65:d1:2b:45:a3:4e:92:da:0f:c5:1f:26:22:8b:
                    50:6a:da:88:b1:cd:9c:90:13:da:bd:3f:b4:8a:7f:
                    81:8e:3d:d0:48:58:6a:ca:3d:8f:13:19:17:d9:e4:
                    dc:e4:15:fc:97:f7:d5:c9:e4:21:e4:48:52:53:eb:
                    cb:b2:bd:9d:40:bb:db:6c:31:fa:96:13:33:69:e3:
                    79:dc:2d:a4:02:67:3d:c8:b2:d9:53:aa:b2:0c:a0:
                    44:52:ca:be:19:2c:72:81:51:f4:74:58:04:ab:85:
                    35:10:83:1b:28:91:22:84:35:7c:b5:00:b9:a5:96:
                    4a:58:39:19:c5:33:5d:1d:02:b1:25:c5:93:06:35:
                    97:59:a0:c0:06:33:a0:8a:27:9b:49:b6:e8:27:97:
                    9b:66:88:67:4d:a7:85:86:a2:d5:c6:35:a5:04:85:
                    8c:3f:1d:17:a5:56:b1:ff:52:5b:be:f9:cd:08:a5:
                    ea:5f:57:42:ac:70:33:17:1d:57:7e:21:54:ea:02:
                    ed:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A4:EE:6F:7F:99:E9:46:02:FE:87:F6:73:A9:09:90:6F:AC:96:42
            X509v3 Authority Key Identifier:
                keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:b0:69:c3:de:9c:1f:01:48:90:06:11:b5:26:1c:42:e1:
         47:43:25:26:aa:fc:50:aa:20:56:1c:af:b5:4b:00:4f:75:6e:
         9d:96:54:9d:a4:d8:4c:7d:f8:61:43:e1:ec:72:61:f5:17:7d:
         fa:af:b7:86:f9:5b:99:e7:de:1c:49:25:db:c0:9d:22:96:de:
         c2:20:c7:b6:13:f0:47:37:57:2d:f8:dd:9e:f1:d1:4d:c1:93:
         70:23:47:7c:ba:1e:58:32:39:cb:9a:f5:eb:ec:37:52:87:06:
         7f:29:19:3d:84:c3:0e:12:3f:93:2f:a3:f8:75:91:9a:d8:a2:
         95:43:d3:04:98:93:4d:17:28:42:20:93:53:01:42:1f:85:4c:
         42:f9:72:36:f8:f4:32:db:80:f0:05:20:ca:9b:71:a4:73:e9:
         e7:89:dd:cf:63:b8:4a:c0:d0:f2:fc:d5:af:f1:97:be:9e:9d:
         01:1b:9f:b1:ba:f0:b2:bc:30:be:19:fe:47:5a:c8:30:80:46:
         6e:22:8c:d9:9b:a6:2d:a1:3a:c0:9c:81:67:8d:a4:b5:b6:9d:
         94:86:44:dd:c7:49:35:e9:e4:53:8d:37:03:99:4a:f6:11:e2:
         81:4d:a8:1a:f4:ab:5f:24:a1:64:93:ce:b2:35:e5:9c:1b:2d:
         94:a9:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:15 2025 by rpki-client