Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          5s4v34foM3hixonGcko8YQZIat7v/NWvIbUNQak84VA=
Subject key identifier:   E9:51:19:E5:38:45:8E:25:69:FA:45:29:DF:E3:EB:8C:02:96:0B:57
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       019A1EE3DC2D3853DD8DE8FD7A569F3607D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          01E1
Signing time:             Sun 26 Oct 2025 05:00:40 +0000
Manifest this update:     Sun 26 Oct 2025 05:00:40 +0000
Manifest next update:     Mon 27 Oct 2025 05:00:40 +0000
Files and hashes:         1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: zV3QsnvrH5zm5tRgROVD3L82vVggMsm8xO3kPx/wz/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:e3:dc:2d:38:53:dd:8d:e8:fd:7a:56:9f:36:07:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Oct 26 05:00:40 2025 GMT
            Not After : Oct 27 05:00:40 2025 GMT
        Subject: CN=e95119e538458e2569fa4529dfe3eb8c02960b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:ff:15:8a:19:e2:b2:75:f7:8b:c4:9f:89:
                    fb:3d:0d:bc:98:c2:e2:c2:ed:01:78:92:cc:1c:f6:
                    09:46:77:b0:d8:23:e7:87:8a:bd:84:fb:1a:9b:26:
                    6f:b7:ac:ea:61:0a:53:81:84:d4:3a:62:7f:79:ff:
                    8c:82:85:20:31:6b:40:bc:b4:0c:f3:bd:d5:4b:b9:
                    df:ad:68:1f:16:8a:9a:02:09:6f:d1:c1:59:5a:8a:
                    ee:b3:a9:37:e3:f7:bc:f6:0f:d6:73:9c:50:e3:42:
                    93:e4:a2:ca:8c:08:e6:c8:45:6a:38:8d:d5:74:0c:
                    ac:ba:b6:8b:cc:46:ae:c4:3d:33:5e:95:92:e9:ce:
                    41:b0:ed:76:c6:60:f2:96:c3:e0:41:72:2d:46:f2:
                    55:12:59:9a:99:1b:f5:50:e0:41:32:0a:cd:1d:a9:
                    ec:ae:aa:3c:02:c6:91:c2:ea:08:aa:a9:2d:53:cd:
                    2f:02:60:cb:fb:18:da:f9:12:fa:2d:c5:2a:96:8f:
                    a3:ac:27:b9:e0:fd:35:43:9c:9d:49:8e:07:3e:c6:
                    0a:97:27:08:c6:24:1a:7c:c2:9d:b2:4f:65:74:7d:
                    9b:ff:f6:5f:18:ce:04:65:bb:34:58:59:40:c4:76:
                    1b:cf:99:64:83:4c:71:04:d7:19:d3:88:4c:59:d0:
                    8c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:19:E5:38:45:8E:25:69:FA:45:29:DF:E3:EB:8C:02:96:0B:57
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f5:e9:2d:42:01:fe:08:7f:d5:f7:c7:b5:05:2f:e5:e6:21:
         83:5c:16:00:0d:d4:64:af:54:0c:66:39:12:90:04:86:9c:33:
         a5:41:31:47:30:c4:c0:cb:21:4d:ce:a7:f1:44:6c:ac:0a:3e:
         68:08:b4:07:57:72:95:83:20:58:3c:1a:86:7e:b4:fc:4b:20:
         c5:84:83:51:4b:1e:b7:23:78:7f:bd:2e:11:b5:30:f6:03:bf:
         8f:0f:25:0f:8a:55:df:bc:35:a9:b3:e3:65:85:d8:23:23:3f:
         b0:a8:aa:98:1e:89:d4:0d:a2:88:b1:63:31:1a:9c:3b:2c:b8:
         ae:5a:e4:1b:07:d4:11:34:8e:24:6f:6b:5c:1a:ed:01:90:88:
         e4:f5:5c:38:b1:9d:4a:db:a1:d8:44:cd:55:05:16:e4:a5:26:
         47:5a:43:96:0d:d0:e2:5b:fe:2f:ba:4a:6d:79:c0:f2:45:22:
         2d:78:dd:50:41:70:76:d8:5b:2c:eb:ca:40:ed:01:54:de:42:
         87:7b:6c:8b:22:f2:b6:94:b4:17:cb:70:42:de:eb:03:8e:db:
         12:c9:08:e2:d2:05:08:6e:ee:8d:fa:bb:b4:9a:4e:4b:d0:15:
         5a:72:90:b9:a8:53:f8:14:c6:2f:43:b7:cf:bf:05:0f:d9:ed:
         e4:97:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:09:26 2025 by rpki-client