Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          z8IdyjOKdxiC5ZbzGvs8kUsANHpt05ol4fF4mpvqatw=
Subject key identifier:   10:6F:39:87:1E:CC:3A:35:97:50:2C:3B:CB:56:4A:00:A5:8E:7E:D7
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       0199FFFE3B4D08AD478FA39880CEDC26029D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          169F
Signing time:             Mon 20 Oct 2025 05:01:15 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:15 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:15 +0000
Files and hashes:         1: A8RA-KyHreMNSgmJAylrJgsQAGI.roa (hash: nePGMmr2buSknOQjxf358rj5Sl4Q3WncEvIivf/SZEI=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: snOSiVZYd25gYK1bQfy1YJz7AOoFE5qDEQlWkQRKWtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:3b:4d:08:ad:47:8f:a3:98:80:ce:dc:26:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Oct 20 05:01:15 2025 GMT
            Not After : Oct 21 05:01:15 2025 GMT
        Subject: CN=106f39871ecc3a3597502c3bcb564a00a58e7ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:94:44:5b:af:35:ac:78:db:08:8c:26:4b:bd:
                    93:a4:a2:ad:1c:ea:36:f2:cd:51:0e:be:fe:02:2c:
                    32:e2:6a:70:6c:81:b0:45:53:6b:a4:e5:e9:0d:49:
                    16:c6:0e:22:cf:ac:a9:10:b3:da:a5:bc:0c:18:c6:
                    25:ce:1f:4c:2e:cf:bc:2f:87:81:44:70:e8:b3:59:
                    b6:96:85:2e:48:02:8a:81:b5:a8:fb:d3:75:8b:ef:
                    15:e1:c1:22:de:43:54:20:72:13:d1:33:f1:91:f9:
                    96:9e:20:1d:76:72:16:81:60:bf:8c:33:08:6e:22:
                    d8:a0:55:5e:2b:a9:f3:d0:38:ef:7b:af:2e:18:15:
                    62:99:78:5f:1f:58:ae:96:24:d0:8e:c1:fe:92:5e:
                    28:3d:7d:58:e4:f5:26:f4:0b:19:f3:7c:a0:04:3e:
                    18:cb:f9:01:be:5e:f6:a3:65:a8:07:37:5a:57:c3:
                    5d:f5:d5:0d:0f:d3:33:89:ed:f5:38:f2:f2:5e:0b:
                    e1:e2:b6:ef:3b:d8:62:1c:56:7b:ca:7b:d9:e8:0d:
                    08:1d:ab:a2:c1:8b:e4:0b:a0:e3:ad:f8:66:49:20:
                    bb:f8:be:a0:8b:e4:31:84:db:22:ef:c9:79:de:db:
                    88:d1:63:60:32:4b:9c:ab:ea:a9:c3:76:23:f6:57:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:39:87:1E:CC:3A:35:97:50:2C:3B:CB:56:4A:00:A5:8E:7E:D7
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:fd:1c:49:36:7a:59:2c:9f:da:04:89:23:e6:6a:fe:17:7e:
         dd:da:c0:9a:98:72:36:16:60:e7:5e:a0:7f:7e:f5:de:ee:63:
         bd:c0:83:89:e9:46:75:41:c7:68:a1:ca:d7:95:cf:6f:d2:69:
         fb:7b:64:98:d2:a0:b4:bb:4c:74:82:bb:da:f1:3c:84:44:86:
         98:5c:5c:ec:65:11:75:34:42:2a:1f:2e:08:ce:21:16:1d:69:
         5a:e0:f0:bc:f7:09:92:ec:a3:de:55:fb:11:d5:5e:ff:97:8a:
         31:a6:9f:7a:45:2c:de:99:24:91:87:8e:52:f7:0a:28:d9:48:
         be:54:f0:69:51:59:d2:1a:76:bb:26:46:8f:64:0f:bd:a1:c4:
         ca:7d:b8:0e:d0:e1:a7:60:ad:63:ed:a7:11:a1:e1:44:83:97:
         4f:c8:0b:34:91:55:aa:41:6e:63:09:57:71:cd:1b:22:d2:ef:
         1f:57:31:ca:32:1e:e3:c3:2b:4c:c6:4d:61:4d:db:e6:f4:e6:
         c7:de:e3:23:d3:a6:92:eb:25:42:0b:91:1d:7b:09:6a:32:69:
         68:c3:9f:d9:55:db:2b:d0:90:81:2e:64:59:9c:16:0e:22:68:
         15:20:f2:67:c3:ad:0a:52:ed:62:4b:65:ce:46:d4:6f:9f:c4:
         a0:a2:8f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:32 2025 by rpki-client