Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
File:                     VP-6LGIMGFPZrUdaBQviFxcYtmI.mft (raw, json)
Hash identifier:          gxNdRuAjdYx43kYIIBsza2hSoeQ3XK+qgjsXvTE+Nb0=
Subject key identifier:   6F:A8:41:6D:C9:CC:4E:13:89:37:82:02:B3:6A:28:27:1D:EB:66:30
Authority key identifier: 54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62
Certificate issuer:       /CN=54ffba2c620c1853d9ad475a050be2171718b662
Certificate serial:       019A7301B1F82501644EAE16FB7097CB0AFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
Manifest number:          142C
Signing time:             Tue 11 Nov 2025 13:01:22 +0000
Manifest this update:     Tue 11 Nov 2025 13:01:22 +0000
Manifest next update:     Wed 12 Nov 2025 13:01:22 +0000
Files and hashes:         1: VP-6LGIMGFPZrUdaBQviFxcYtmI.crl (hash: Gw15Zigs13ubH7upydW+vs7C8JsNxseht2Ubj/bFutA=)
                          2: m3PogkJItz_iNaq0_EdnA6-ldI4.roa (hash: nYagGPxBVRS3j7ztvVbYe4dLyrJG3Tb3hiHq/vtvQQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:b1:f8:25:01:64:4e:ae:16:fb:70:97:cb:0a:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ffba2c620c1853d9ad475a050be2171718b662
        Validity
            Not Before: Nov 11 13:01:22 2025 GMT
            Not After : Nov 12 13:01:22 2025 GMT
        Subject: CN=6fa8416dc9cc4e1389378202b36a28271deb6630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:b7:9f:6e:5a:b7:d8:21:7c:c7:6e:f4:0e:
                    64:3e:d9:54:ce:0b:52:2a:98:72:64:87:f4:8d:4e:
                    31:b8:8e:7c:3a:64:76:4c:8e:bd:c1:ec:ba:89:97:
                    73:a0:e7:d9:94:8a:38:df:df:4b:ae:fc:0b:86:61:
                    27:39:52:ae:42:2e:b9:00:0b:52:04:94:8a:eb:95:
                    9c:90:15:14:0e:01:b4:42:1d:14:1d:44:a3:ce:e7:
                    8e:ff:fc:98:b7:9b:31:2a:24:f1:45:93:a3:22:19:
                    eb:1a:da:9f:5b:44:91:e0:ac:e3:c0:d1:c1:64:22:
                    be:50:1f:55:9e:e0:d6:f1:cc:71:ce:72:6e:ec:1d:
                    43:4c:c3:b8:86:63:99:ce:b2:26:65:37:eb:2a:22:
                    73:33:bb:89:54:89:eb:c2:f8:d1:70:ef:11:9f:e1:
                    74:78:90:7c:61:4b:9e:4e:67:16:fa:df:17:b3:42:
                    cf:bf:92:02:7d:b8:6e:60:7b:75:f6:65:aa:f1:39:
                    cf:0d:d4:98:24:fd:26:34:b9:ca:7e:f5:36:a1:81:
                    3d:6c:31:df:dc:96:4e:2c:f7:68:6e:6e:e9:f3:27:
                    99:d5:11:39:66:30:22:72:b6:57:4f:ad:06:f9:0f:
                    d6:25:1a:1c:b5:06:69:df:f0:3e:1b:ae:27:39:61:
                    15:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A8:41:6D:C9:CC:4E:13:89:37:82:02:B3:6A:28:27:1D:EB:66:30
            X509v3 Authority Key Identifier:
                keyid:54:FF:BA:2C:62:0C:18:53:D9:AD:47:5A:05:0B:E2:17:17:18:B6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP-6LGIMGFPZrUdaBQviFxcYtmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36e4a6-fe18-4d4c-980c-cd3acc1065c7/1/VP-6LGIMGFPZrUdaBQviFxcYtmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:39:64:29:ca:1a:0b:e7:d6:9c:a3:c6:73:8d:d8:31:2c:48:
         2b:ea:37:dc:d8:28:39:c1:42:9e:9b:38:91:bb:26:bb:70:e9:
         0c:5f:47:a0:8d:54:8b:cb:92:20:59:ef:4c:de:ce:01:98:b7:
         df:a2:8c:fa:b0:62:c1:6e:70:05:e2:0e:17:26:b8:56:ff:e3:
         c4:9b:33:9f:cc:8c:6b:8f:25:2a:aa:81:69:4c:be:b2:77:02:
         ee:fb:cd:0f:8c:31:80:d5:b2:a8:ef:6e:d0:f2:25:22:58:7b:
         04:c9:2f:a3:50:54:19:a3:8a:21:d6:79:ca:ab:c0:fb:4f:ab:
         5e:b5:c7:60:d5:da:47:a9:ac:a8:8d:17:df:6e:fb:51:78:d5:
         99:9d:e5:44:15:82:4f:1b:44:d2:2e:12:06:dd:e9:07:4a:b1:
         92:fe:e8:3d:5d:a6:02:08:75:59:4a:2b:da:5e:ca:05:e2:6f:
         a8:50:b8:ac:be:58:d9:c8:f8:84:b3:61:06:ba:48:7d:23:89:
         dc:85:f9:59:91:c7:d6:7f:ba:ec:7c:6c:87:cb:ae:96:6f:a4:
         5b:39:43:4a:5a:e8:31:a9:57:98:09:8b:5e:9a:1b:77:9a:df:
         d4:b9:47:b4:c5:16:07:38:3a:a1:1f:e7:4e:b5:72:88:88:48:
         e4:df:08:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:03:29 2025 by rpki-client