Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier:          Y9BuXvnnCceczjevBKeEZqxmB15rAmT8KXx7C4XMEyY=
Subject key identifier:   0E:D9:BC:09:47:0C:8D:CF:C2:5F:6A:68:F1:05:A0:05:A9:6D:D9:D5
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       0199FE474A84B85C7840D079A3F9B92F3A81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number:          0BC2
Signing time:             Sun 19 Oct 2025 21:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:48 +0000
Files and hashes:         1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: iCDnvLWH/pwk4gshsLdhqQ5FF+558byLWMd+ksgB86Q=)
                          2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:4a:84:b8:5c:78:40:d0:79:a3:f9:b9:2f:3a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Oct 19 21:01:48 2025 GMT
            Not After : Oct 20 21:01:48 2025 GMT
        Subject: CN=0ed9bc09470c8dcfc25f6a68f105a005a96dd9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:77:7e:ae:f6:11:aa:cf:e1:ba:f3:2a:d8:
                    67:2a:75:27:17:9e:78:38:f8:6d:f5:c4:4a:c4:94:
                    88:e7:55:be:2e:e9:d2:3d:bb:d7:b0:0f:b2:38:f8:
                    c6:ee:1d:ee:ba:8d:7d:11:5b:8c:b5:c4:65:76:9b:
                    18:cc:3b:41:5a:88:1f:c8:06:e2:bc:2c:da:19:e8:
                    27:5b:89:da:96:c3:bd:0a:31:c1:db:55:e6:6e:bc:
                    aa:2a:ce:9a:f7:d3:c1:5c:6f:af:70:ea:71:00:9c:
                    9d:74:e0:aa:b1:57:a8:e9:3d:1b:76:b9:fa:bf:6f:
                    8d:d9:ed:dd:40:46:6c:a6:8c:58:36:e4:e8:19:be:
                    1a:ef:03:74:d6:a5:1c:05:d6:67:ce:cc:ee:ed:d3:
                    d6:96:32:ae:f0:e6:a8:34:e3:69:83:44:72:d4:70:
                    e6:a3:e6:cf:b4:6a:fa:41:c0:00:76:50:ee:30:6f:
                    2a:3e:04:75:d0:b9:38:a5:5a:c8:35:d7:5c:da:4a:
                    77:ad:83:bb:e5:c7:cf:61:ac:d1:0e:9e:93:88:f2:
                    31:97:e5:be:83:5a:10:da:f0:8c:2f:7d:84:1e:93:
                    04:f8:a6:a3:a5:16:16:48:79:6c:ba:07:c2:91:b4:
                    cc:f3:f0:a2:0a:29:ae:f9:ca:09:e3:a1:5b:31:a1:
                    3e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:BC:09:47:0C:8D:CF:C2:5F:6A:68:F1:05:A0:05:A9:6D:D9:D5
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:22:ca:84:9b:0d:7f:7c:31:d7:d4:db:df:77:74:94:e2:
         c3:4a:5a:3d:3d:33:40:26:2a:b3:1c:4f:c2:93:e3:7e:d5:2c:
         5c:6c:b1:b4:46:cd:c3:cd:a3:38:c6:46:5f:fc:36:a7:b1:56:
         da:64:b2:7b:8e:0d:86:e3:9b:e8:22:e4:1e:72:6b:8e:e5:65:
         c1:0c:85:b3:46:76:62:61:c9:70:91:4c:6f:5a:57:2e:92:54:
         a4:31:9b:6f:54:4b:15:2f:d7:86:98:2d:6d:a4:be:10:7e:b0:
         97:27:a9:63:b1:6e:af:51:01:93:ac:cd:35:92:01:cb:35:2c:
         36:98:14:f7:00:ce:87:64:69:42:97:21:92:d5:12:f3:9c:8f:
         f5:26:fb:76:40:07:cd:14:02:12:80:f4:cc:00:62:e6:c1:d0:
         a7:6d:ae:97:e7:11:c5:20:b8:81:f1:f6:b2:f5:57:1b:cf:28:
         64:60:cf:c6:44:c5:d2:95:27:ed:53:00:79:99:c2:65:3f:89:
         94:2b:28:72:34:38:f9:06:3c:06:49:d5:fc:12:1a:c3:89:aa:
         2d:b4:c9:84:db:99:21:03:03:87:0d:97:4b:31:30:b6:aa:36:
         d4:ce:80:74:a1:b4:f3:6e:ba:d0:a8:99:b0:eb:9b:e9:57:c2:
         c8:b9:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:09 2025 by rpki-client