Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          a+v9mQN6Dj3slfu5SXoZCcKR6kfA0awbY1DLPoGVT2s=
Subject key identifier:   AB:8F:54:24:37:DC:B5:34:4D:C2:E5:74:A0:38:6D:94:18:69:05:66
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       0199FD3462200C3BF48C57E386251147E75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 16:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:32 +0000
Files and hashes:         1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: fB6w6P+rJTpA6/jAIIv/meKjIp/fexm2ihXdniMt1Fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:62:20:0c:3b:f4:8c:57:e3:86:25:11:47:e7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Oct 19 16:01:32 2025 GMT
            Not After : Oct 20 16:01:32 2025 GMT
        Subject: CN=ab8f542437dcb5344dc2e574a0386d9418690566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:85:37:b7:ba:bb:93:f0:67:ad:50:a2:8c:
                    9f:3f:76:10:62:de:6b:9f:75:26:ab:44:78:a7:d9:
                    c0:80:54:02:be:1f:7e:c6:fd:c4:3a:d5:41:a6:90:
                    1d:9d:31:8c:a8:4f:1c:7d:5d:9d:74:c6:5a:dc:a2:
                    ce:d3:5a:c6:54:58:cb:0a:68:c0:92:d6:ab:63:54:
                    c5:92:c2:d2:47:95:41:83:cb:f7:29:14:8b:13:1f:
                    16:dd:bd:dd:39:15:bd:0b:29:0a:be:9a:cd:02:b4:
                    bd:cf:71:c2:73:c3:51:f3:d7:61:d4:35:dd:51:e3:
                    fb:7e:c9:27:97:34:48:90:7b:23:80:46:3f:f3:9e:
                    bf:e7:e5:41:9d:4e:d6:ac:fd:e1:8f:d7:25:b5:89:
                    9c:e7:04:76:73:fc:63:82:a0:1c:07:c0:56:fb:d8:
                    69:f1:07:21:22:a5:a7:11:a6:d6:9c:95:0e:40:73:
                    a2:f3:4a:0b:aa:2c:d4:47:d5:8d:70:cd:05:16:9e:
                    35:dd:90:0c:06:ce:ba:8d:e9:f0:fe:00:29:dc:d1:
                    60:50:69:b1:96:df:45:62:7e:f0:36:26:d4:3c:9e:
                    d2:5b:f0:d2:2e:c0:7d:26:fc:6b:3d:4b:5e:de:73:
                    81:1e:52:08:d6:8c:c6:b3:f5:57:74:b0:57:39:08:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:54:24:37:DC:B5:34:4D:C2:E5:74:A0:38:6D:94:18:69:05:66
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5d:ec:1d:a0:aa:2a:79:77:4d:35:8a:5e:30:c8:18:02:d6:
         56:63:79:ca:c8:6a:e9:d9:87:5f:5e:39:11:e3:67:83:a7:cf:
         88:3c:46:2b:0a:1d:24:39:ae:b8:91:3f:1d:d0:2e:40:ba:86:
         97:73:68:50:d2:07:f4:f5:96:34:d1:f8:f3:80:9a:a6:d0:23:
         81:15:f4:9d:bb:6e:ac:39:d8:f3:9f:50:91:bc:34:45:7a:ac:
         6d:86:9d:55:37:73:b1:4b:ed:f6:65:47:ae:53:19:d7:7d:84:
         76:3d:99:73:13:34:fb:55:7f:5c:ce:da:03:d3:a5:19:f6:ed:
         10:3f:16:7c:f6:e4:7f:59:cd:e1:a5:26:7c:67:66:d7:cf:ff:
         5c:95:43:7c:f5:e4:56:6f:74:fc:4a:6e:d5:32:cf:93:99:f9:
         b9:27:ae:0b:80:d5:bf:f5:de:09:3d:03:b6:04:8a:ce:63:e6:
         f6:48:64:ca:c4:f5:2c:98:5e:ee:c9:db:e7:8f:6e:6e:f1:07:
         1c:ee:07:d7:b4:ab:48:de:68:d6:01:b5:7f:a4:82:e0:57:b5:
         e0:8e:78:45:89:1a:a0:71:8f:9c:44:f7:d2:fd:d8:52:17:68:
         45:ee:53:27:a8:22:3d:5c:34:1b:3b:3f:37:36:ae:ea:8d:a3:
         b8:26:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:58 2025 by rpki-client