Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File:                     _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier:          5lWSu9+zqMrgXU0uwElq3VDXyhVxQYCXZICEkGE5JBs=
Subject key identifier:   2F:F1:3D:21:66:B0:53:8F:26:43:CF:9C:8B:6C:5F:21:E4:F7:05:6F
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer:       /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial:       0199FBEB28CD00B06390943576014D76115F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number:          09DF
Signing time:             Sun 19 Oct 2025 10:01:56 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:56 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:56 +0000
Files and hashes:         1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=)
                          2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: av5QgqVyq02C31GLDYUrh9sv8bv+CBHFnPwLfUDjmhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:28:cd:00:b0:63:90:94:35:76:01:4d:76:11:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
        Validity
            Not Before: Oct 19 10:01:56 2025 GMT
            Not After : Oct 20 10:01:56 2025 GMT
        Subject: CN=2ff13d2166b0538f2643cf9c8b6c5f21e4f7056f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:6b:77:b6:82:57:07:77:74:68:38:ef:9c:
                    6a:bc:6f:3b:9f:c6:ea:4d:a1:7f:7b:e9:58:eb:5a:
                    f9:63:f7:56:0d:c0:f1:2b:b1:b3:54:de:d9:95:a3:
                    63:11:be:26:de:2b:98:0b:27:77:6c:c1:af:9f:f6:
                    3d:04:f9:9a:6b:80:cd:d7:0d:d4:ae:f0:8c:e0:83:
                    94:34:4f:17:99:ba:14:c3:34:f4:63:aa:e8:3f:b0:
                    90:2f:3c:b1:c2:ee:d7:cd:a7:9c:68:9c:c5:a2:84:
                    3e:e7:bc:cb:97:bd:cc:55:1c:8b:91:8c:99:be:b9:
                    1e:92:ad:62:bb:a0:3f:c8:fd:d1:c1:be:0d:9d:07:
                    e5:7e:43:88:f9:33:98:d4:02:33:8e:1e:16:f4:f6:
                    f1:aa:0e:49:1b:bd:e8:ae:95:bb:d7:69:d3:5f:c1:
                    c3:2a:5e:f9:cc:4d:89:01:78:aa:55:44:41:91:82:
                    d0:dd:3b:b7:44:6e:02:b5:2c:9f:5b:69:f6:47:19:
                    49:2d:49:9f:d4:bc:2e:3c:5c:2b:d0:40:bd:cf:9f:
                    cf:be:e6:65:2d:d2:b0:57:5d:cb:38:92:23:13:9b:
                    30:39:75:75:f6:1a:a8:a2:a8:da:06:25:dd:30:98:
                    aa:d1:6c:8d:a2:03:5d:77:ae:c1:43:3d:a3:d1:3c:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F1:3D:21:66:B0:53:8F:26:43:CF:9C:8B:6C:5F:21:E4:F7:05:6F
            X509v3 Authority Key Identifier:
                keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:15:0e:35:96:d9:16:c8:45:67:c0:7b:5e:ee:23:dc:a6:
         c4:5e:89:1e:d7:d4:57:96:07:59:ea:2e:ec:65:e7:c2:ca:0c:
         3c:00:ea:1c:b8:d2:7e:25:97:3b:d4:78:67:a0:ff:ff:8f:c8:
         d9:23:c3:86:36:71:46:0b:b9:76:9e:bd:b9:48:35:ad:ba:b7:
         3c:75:8e:9c:ad:62:4a:25:00:75:3f:dd:08:7d:29:88:16:ec:
         d3:48:a2:a0:62:ac:43:38:e9:c9:54:d9:94:36:7c:3b:00:21:
         29:5e:58:f1:eb:e9:63:16:ad:39:41:e9:73:61:e6:f2:1c:db:
         2c:d4:c0:3b:e3:71:aa:e6:07:7e:55:23:63:53:27:94:15:e7:
         6b:e5:b9:ea:4e:70:5a:92:b1:9c:e8:7a:c9:01:7f:1b:c2:94:
         13:5b:d5:4e:61:a2:8e:d1:f5:f0:c1:82:44:f5:b5:b0:3a:d5:
         2c:4d:0e:a7:4b:1c:86:32:58:41:26:dc:da:81:5e:fe:a7:d4:
         dc:da:cb:6a:91:cc:fd:de:58:c6:96:58:55:00:c4:3e:74:34:
         e6:4c:2c:1e:cd:a0:11:35:70:f6:21:cb:c5:16:d5:79:f0:d6:
         80:05:c3:06:44:ff:b8:30:e0:bb:a8:0d:94:0b:a4:10:27:0f:
         de:e6:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:44 2025 by rpki-client