Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File:                     vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier:          m8cg89h04PAVfcjhMFxhnWnQPMRT6iAIqWrVuomrqq8=
Subject key identifier:   65:F6:D3:6C:DD:B8:61:5B:2E:01:87:22:B3:F5:CA:11:4C:C9:F7:B1
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer:       /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial:       0199FCFD77DF43D61E6E606EDD35F16C62B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 15:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:33 +0000
Files and hashes:         1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
                          2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: APRjO5GwIF0ic5Yj/t5R7vkLiVPEJ6WC+rAl7MZlzuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:77:df:43:d6:1e:6e:60:6e:dd:35:f1:6c:62:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
        Validity
            Not Before: Oct 19 15:01:33 2025 GMT
            Not After : Oct 20 15:01:33 2025 GMT
        Subject: CN=65f6d36cddb8615b2e018722b3f5ca114cc9f7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c9:a4:4f:3f:87:7e:8b:db:e8:47:5e:32:d7:
                    c0:1a:4f:e5:06:28:10:ab:f1:dd:72:d8:29:ef:0c:
                    62:79:6f:2c:24:df:bc:89:0d:77:6e:e4:62:13:29:
                    e5:55:09:7e:e3:da:7a:78:0d:03:c7:90:82:32:00:
                    b5:60:b2:36:1d:be:c7:68:c4:44:9d:7a:c6:5c:19:
                    df:4d:20:5c:cd:1a:bd:61:51:b7:c3:44:00:e8:0b:
                    76:4c:cf:0d:e3:f8:51:fc:85:0a:0b:80:2a:70:0a:
                    eb:f7:6b:81:0b:ff:2b:da:97:21:f8:77:df:76:76:
                    b7:00:c9:76:21:80:5e:25:f1:6b:bc:f9:62:b9:9d:
                    33:a9:36:34:ef:03:7c:79:50:98:b5:26:80:5e:ec:
                    34:49:cf:35:e0:bf:c0:5c:ea:8b:ed:bc:bb:dd:17:
                    8b:7f:af:d3:07:df:8e:d6:d8:c5:20:34:9b:4c:84:
                    65:7b:37:b1:d8:ac:e1:0d:3a:31:17:1b:f4:8e:79:
                    a8:1b:51:92:b6:a9:00:59:f2:40:b2:9f:3c:0a:c9:
                    73:77:f8:39:e1:6b:c6:5c:a6:b1:36:db:c3:92:e1:
                    1b:96:aa:d8:84:3d:c9:e4:9c:38:3d:39:a2:4c:03:
                    e3:b1:0c:6d:68:34:09:7d:bf:eb:60:48:f6:d5:b7:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F6:D3:6C:DD:B8:61:5B:2E:01:87:22:B3:F5:CA:11:4C:C9:F7:B1
            X509v3 Authority Key Identifier:
                keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:f3:88:b5:d3:8c:17:ce:61:74:dd:80:f8:22:93:b8:44:
         49:b1:58:c4:81:04:be:3d:d3:f1:fc:45:78:f4:09:e4:3c:58:
         b4:ad:ed:f0:ec:c4:a3:f5:3b:39:f9:93:fe:d9:88:5e:58:af:
         c3:27:02:8b:20:6b:f3:39:25:88:c9:22:2a:db:56:08:c9:57:
         2d:31:6f:d4:ee:34:32:04:e9:18:bd:37:7e:93:38:6d:f1:64:
         62:2d:b9:16:f9:29:d2:7b:65:a6:bd:4d:a1:a3:17:55:cb:e6:
         86:04:17:ef:98:d8:b4:c6:a5:46:bb:f8:c2:ff:69:4d:b6:18:
         d8:08:be:43:57:d8:bd:17:78:94:ba:e9:27:45:2a:d7:cf:1a:
         2f:f5:4c:2a:ec:34:7c:5a:e8:73:df:35:0f:70:d7:ac:89:73:
         85:21:20:2f:ca:b8:ea:6f:e8:89:f7:15:69:80:2d:91:89:fa:
         50:d1:23:fa:47:61:2d:66:11:1c:09:78:5d:3f:65:d6:2e:28:
         64:14:72:15:bc:d2:34:6a:6f:f0:4b:b6:89:bf:61:50:3e:6c:
         0b:13:d3:a9:38:c7:fc:a6:e9:77:be:60:95:e5:4a:15:5f:4b:
         c9:96:bb:f2:49:15:38:33:18:26:54:97:c4:cc:73:ac:05:0d:
         90:c3:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:39 2025 by rpki-client