Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File:                     VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier:          1+XADT7QgwlAp4nQVAN9yuNWuEC7IWxXbZ5swRmPM8w=
Subject key identifier:   D0:9F:CA:CF:26:81:44:19:D2:33:99:59:13:2D:E2:68:BE:B8:09:14
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer:       /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial:       0199FDDA0BEDB94BFACEA1E34AC443BA9856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number:          0DEC
Signing time:             Sun 19 Oct 2025 19:02:29 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:29 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:29 +0000
Files and hashes:         1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
                          2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
                          3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
                          4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: LKzjQYpYU6VzoEwrGolLPL2rmNRwudl2jNQa7xg9CyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:0b:ed:b9:4b:fa:ce:a1:e3:4a:c4:43:ba:98:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
        Validity
            Not Before: Oct 19 19:02:29 2025 GMT
            Not After : Oct 20 19:02:29 2025 GMT
        Subject: CN=d09fcacf26814419d2339959132de268beb80914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:c6:5e:c3:cc:e1:d8:c2:92:92:31:5b:49:
                    80:ef:00:21:8c:38:d1:9e:3e:02:40:93:bb:89:45:
                    ce:0c:ae:2f:94:23:30:8e:c6:98:c9:fb:f5:6a:c4:
                    33:f1:4a:c0:f8:ba:d6:f2:87:16:54:c5:b5:04:6b:
                    b5:97:1f:ee:83:cc:f6:df:7d:48:bd:60:d6:d2:dc:
                    51:b7:21:a0:7a:45:5b:a9:58:7f:ca:0e:74:d1:f6:
                    34:ef:1a:31:12:38:41:3a:91:42:e3:33:37:22:50:
                    5b:f4:d7:35:ea:f1:24:bd:2e:43:e8:47:40:1c:dc:
                    9a:04:22:5c:2d:1c:0b:dd:ac:8b:02:ef:41:bc:e2:
                    d3:9d:6c:33:cc:f9:5e:4d:4b:48:e8:46:2b:2f:fc:
                    89:ed:03:c3:c4:18:ae:42:8c:a3:eb:32:37:b2:3a:
                    e5:b4:6a:98:b0:1b:4b:a2:b0:02:db:f1:94:26:78:
                    59:4b:c5:d5:74:10:dd:2c:2d:a9:7d:42:bd:1d:e6:
                    3f:fd:3c:66:cf:b4:c2:9c:92:74:6a:06:17:5c:7e:
                    ec:f5:53:ba:bd:ae:19:2d:d0:5f:c5:7a:65:2d:db:
                    e7:df:33:5c:58:53:ce:2b:ff:ef:b4:c4:fc:59:c4:
                    35:1f:85:5a:68:b6:81:d2:63:7b:29:cc:bf:f7:a0:
                    79:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:CA:CF:26:81:44:19:D2:33:99:59:13:2D:E2:68:BE:B8:09:14
            X509v3 Authority Key Identifier:
                keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9f:18:65:60:da:87:91:0f:f6:7d:57:24:6c:f4:e7:2d:94:
         94:2e:1b:18:6d:90:05:a6:13:a5:0f:c9:f6:e7:12:c7:e6:48:
         c4:3c:bc:52:40:88:73:b1:80:64:d7:9c:e0:57:b5:48:9f:ae:
         75:4c:47:08:d8:cb:d6:0b:d9:30:9c:57:92:9a:29:3a:f4:38:
         2a:d9:4d:e7:f4:0a:10:9d:7b:31:b6:ac:fa:90:36:db:69:3a:
         70:9b:26:d0:16:c4:66:54:8c:9f:59:62:0d:f4:a4:25:98:6f:
         78:28:e4:fe:e5:f5:84:4d:c6:fd:03:e2:79:de:bc:18:e8:26:
         da:a0:4f:b2:78:9e:17:43:92:28:13:b2:17:08:14:4d:b3:2f:
         0b:60:82:bb:77:9e:ae:7c:a4:db:0a:4a:7c:de:47:ee:30:10:
         9d:8a:39:26:71:33:29:08:cf:dc:6f:6b:c0:cd:e3:16:df:b1:
         9c:2c:91:e6:cd:e3:c0:ae:44:61:a4:72:20:ed:b0:27:e7:75:
         84:b1:19:e6:f5:3b:77:6b:6d:22:c4:e9:98:05:4f:3f:d6:62:
         e0:e5:7f:61:ae:1e:a9:8a:78:9a:e4:aa:25:18:96:ab:37:57:
         ec:f8:98:c2:0b:f2:ab:af:d0:e0:b1:f5:39:75:be:89:b2:4f:
         19:7d:4c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:28 2025 by rpki-client