Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
File:                     Vz035lyCKPeT9IuOmiDxLC-AuIM.mft (raw, json)
Hash identifier:          W4daPCMlkH1C2FmszzIF/clAXYAX8wLEeI7eAxWbN/Y=
Subject key identifier:   5A:6B:EE:3D:35:05:58:4D:16:B0:0F:BB:89:95:2A:74:C3:1E:F7:88
Authority key identifier: 57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83
Certificate issuer:       /CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
Certificate serial:       0199FC8F5DE6F4DF3774E487B677491E660B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
Manifest number:          0456
Signing time:             Sun 19 Oct 2025 13:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:18 +0000
Files and hashes:         1: Vz035lyCKPeT9IuOmiDxLC-AuIM.crl (hash: DbONZ3skBlw7mwEFWvDWvhu24hJm5wVaKRSnPjHBu/c=)
                          2: me2Mm6iE4MmWqqMfeXBQWh9NVlw.roa (hash: KdRhruoB4ssCK1ecxTO4OFeivwA74VFCDUNtwELNI14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5d:e6:f4:df:37:74:e4:87:b6:77:49:1e:66:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573d37e65c8228f793f48b8e9a20f12c2f80b883
        Validity
            Not Before: Oct 19 13:01:18 2025 GMT
            Not After : Oct 20 13:01:18 2025 GMT
        Subject: CN=5a6bee3d3505584d16b00fbb89952a74c31ef788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:0b:2f:d6:48:cf:eb:fb:69:f5:1a:5c:51:
                    b6:95:60:7b:55:db:aa:89:5a:82:aa:ae:59:95:4a:
                    5e:28:35:9c:3e:84:84:e4:9a:95:35:59:f5:54:1a:
                    e8:a4:24:a4:df:e9:b1:96:f1:f5:29:22:03:c9:6d:
                    cd:ad:12:0b:d1:e8:fc:7c:f3:64:b9:00:65:7c:98:
                    da:dc:f1:c5:18:14:ef:08:42:62:e7:62:1b:30:c9:
                    e7:12:7e:d0:94:e8:ae:61:e9:df:74:65:c9:f3:14:
                    4b:d3:b3:c0:5d:f7:c3:be:1b:c1:e4:6f:2b:34:f2:
                    4a:de:7d:c5:19:41:ac:11:e3:db:0d:b1:4f:26:c4:
                    81:d4:84:71:5d:f3:25:f3:7f:7f:29:82:fc:c3:fd:
                    5a:eb:2b:42:23:bb:1b:b0:6d:8f:77:af:55:cd:33:
                    ff:b1:da:18:99:6e:69:47:ba:17:39:fb:2e:84:40:
                    23:73:5e:6a:f2:b4:5a:2e:98:99:e5:c7:eb:a2:2a:
                    5b:0d:85:70:98:82:c2:42:6e:48:00:2e:db:aa:6d:
                    bb:35:f1:3b:61:bb:27:c2:f5:78:30:fc:85:0f:da:
                    07:06:09:af:b2:5f:a7:ce:f4:a5:16:a4:98:83:1e:
                    1c:8d:a5:31:4b:66:2f:6b:97:11:6b:0a:e8:0e:f3:
                    f2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6B:EE:3D:35:05:58:4D:16:B0:0F:BB:89:95:2A:74:C3:1E:F7:88
            X509v3 Authority Key Identifier:
                keyid:57:3D:37:E6:5C:82:28:F7:93:F4:8B:8E:9A:20:F1:2C:2F:80:B8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz035lyCKPeT9IuOmiDxLC-AuIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7cd5b8-8df6-4c99-a623-84cd21ffb91b/1/Vz035lyCKPeT9IuOmiDxLC-AuIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:55:70:39:2e:43:82:1a:ac:b8:1d:00:0b:51:cf:eb:e6:25:
         44:84:56:b2:56:c6:df:60:38:d6:6d:e5:90:04:13:53:04:2e:
         b1:c2:e6:7a:a0:6f:40:2a:4f:3a:fa:55:84:48:e6:c2:1e:03:
         f6:55:53:69:f9:c8:a3:2b:46:88:3f:8d:33:ae:47:e8:92:7f:
         7e:ef:3d:3b:3c:de:bd:09:db:7a:8b:39:2d:46:d0:ed:82:00:
         c6:c2:0b:10:4a:dc:43:72:dc:8b:f8:65:43:e4:c1:be:71:34:
         b7:d2:e6:cc:19:d2:4e:29:9e:7e:b0:b5:ff:58:c7:19:24:34:
         4c:2f:63:4a:10:24:66:96:66:9a:0e:25:69:07:41:82:4f:16:
         de:b8:84:05:cf:e4:cd:cb:2c:10:1e:f8:47:38:8c:42:7d:3f:
         f3:29:b4:a2:fc:7a:52:0d:fc:54:ec:54:37:9b:e3:ec:ed:fa:
         0a:51:32:b2:dc:8c:77:37:08:27:7f:2c:8f:71:66:99:4f:07:
         c2:3a:6c:95:82:82:de:0e:b2:27:69:d9:4c:e5:2f:d9:eb:a8:
         de:a5:d1:89:90:65:91:12:57:9c:d9:af:d4:3c:2c:8a:d4:52:
         a0:0e:84:87:51:98:f5:10:f8:7d:05:99:9b:3d:d9:5e:63:6e:
         ec:49:63:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:54 2025 by rpki-client