Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          LdlqT94VhXAPKo/MD1iVHjVWMMWX2tDF6Ak0T5oFOgg=
Subject key identifier:   76:58:4E:FC:B4:19:3C:47:8B:24:57:D4:8E:18:08:F1:9D:A2:07:84
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       0199FE101E6D994421129CF9BFC36CBF9570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          169E
Signing time:             Sun 19 Oct 2025 20:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:33 +0000
Files and hashes:         1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: /L6r6LLRGv+g3Z+f8ovaiscwBbG06nhD3vvhBIePiJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:1e:6d:99:44:21:12:9c:f9:bf:c3:6c:bf:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Oct 19 20:01:33 2025 GMT
            Not After : Oct 20 20:01:33 2025 GMT
        Subject: CN=76584efcb4193c478b2457d48e1808f19da20784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:02:9f:77:9c:ad:10:74:4d:d2:55:19:9d:
                    8b:8e:be:f4:f5:10:62:a9:6f:93:1d:bf:9b:70:f0:
                    29:76:f7:c5:9e:c3:13:cb:e6:9b:86:14:5c:a9:6c:
                    35:15:e4:9f:57:4f:15:6e:75:1b:b7:14:29:12:3a:
                    cd:82:b8:b1:9b:0f:85:4d:dc:93:27:49:6a:8b:11:
                    7d:9d:4a:af:78:e8:e7:15:2c:93:f3:a9:d0:26:ca:
                    42:41:e5:fc:9a:b2:ec:f1:cf:aa:e8:28:2b:ba:8b:
                    db:dd:ff:a8:a6:0d:0e:f3:e5:14:f7:15:b3:97:60:
                    13:d2:b0:8b:03:3c:ec:3c:ac:07:80:39:2f:a1:b3:
                    a4:88:81:76:53:4d:52:cb:c2:71:f8:d0:f7:67:e3:
                    29:c9:36:48:3c:80:79:46:80:ca:fd:74:ed:fe:4d:
                    9b:d1:83:67:5e:83:bb:9c:9a:3b:5e:d9:41:b0:2a:
                    9d:5c:fe:27:4f:a7:0f:57:f2:54:39:4d:19:ff:04:
                    df:6e:95:a0:0e:03:d1:c1:d5:16:87:9b:48:bb:cb:
                    22:00:da:e0:83:63:43:f2:52:bf:5f:fe:b9:13:ea:
                    f9:c0:e4:0e:90:20:77:a4:d6:60:7c:e3:fe:76:3b:
                    8c:bc:2c:e4:22:6f:19:ca:82:cc:b2:2c:2d:3b:cb:
                    64:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:58:4E:FC:B4:19:3C:47:8B:24:57:D4:8E:18:08:F1:9D:A2:07:84
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:91:6e:8e:38:29:54:58:3c:72:61:a2:d6:8d:a5:6d:03:24:
         f1:9e:96:24:72:a8:89:91:51:e7:2d:57:6d:35:af:5c:62:d0:
         72:f8:6b:19:02:92:15:f2:58:56:9e:e0:45:5b:72:36:98:77:
         7d:97:eb:9d:36:8e:5a:0f:ab:a2:07:02:0f:db:fb:65:17:2c:
         01:e2:fd:56:3d:9f:29:ab:43:76:bb:60:5d:b8:d4:ee:52:79:
         30:c4:a1:31:4a:86:1d:03:b1:2f:37:3f:e7:cb:90:37:36:e3:
         32:c4:7c:c7:b2:70:d5:d9:16:51:24:e2:de:46:d5:f5:d1:e9:
         8c:99:7e:24:8f:44:eb:10:1a:50:50:92:c9:8a:e2:10:62:9e:
         0a:ef:25:66:a7:c7:a6:bd:89:cb:d3:47:e3:c8:36:41:90:81:
         7c:88:0e:c4:82:8a:1a:0c:f5:2e:d8:de:66:cf:b6:12:82:64:
         89:79:ee:a8:8b:1d:48:3e:14:57:d0:4a:53:83:0e:81:95:93:
         12:9a:3d:81:4f:1d:28:18:02:19:50:d9:24:24:28:5a:d8:0f:
         43:2d:01:ec:6c:be:6c:1e:74:74:c3:27:26:44:89:e0:82:e5:
         24:1f:9c:77:9b:c3:07:aa:a1:0c:07:08:48:b7:7c:07:53:ae:
         0d:07:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:23:45 2025 by rpki-client