Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          iLxEbkL3zVVtjvBQjuMGkfQ6Vy16V5pVkkGK90ye9Ig=
Subject key identifier:   45:B8:84:60:07:D8:B8:7F:F1:30:36:CE:EC:9D:E4:28:4C:C2:5C:46
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       019A2C683FC4BCCDA09130CD16877EC92AD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          1295
Signing time:             Tue 28 Oct 2025 20:00:20 +0000
Manifest this update:     Tue 28 Oct 2025 20:00:20 +0000
Manifest next update:     Wed 29 Oct 2025 20:00:20 +0000
Files and hashes:         1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: eaURdho9gW8p2WbEMpu/clG7d9oaG8ugveuCSGsdb9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 20:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:68:3f:c4:bc:cd:a0:91:30:cd:16:87:7e:c9:2a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Oct 28 20:00:20 2025 GMT
            Not After : Oct 29 20:00:20 2025 GMT
        Subject: CN=45b8846007d8b87ff13036ceec9de4284cc25c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:c4:46:d8:c3:c6:af:1e:b5:6f:15:1a:2d:
                    3a:f8:e0:09:78:32:7c:c2:52:c7:ce:70:cc:c8:fc:
                    35:0a:7e:f9:a6:82:20:6f:2f:66:42:bb:6a:4d:71:
                    48:af:cf:5a:ea:43:22:39:9c:53:ec:9a:98:9e:b7:
                    fa:02:b2:ab:0c:80:de:ac:c5:ec:60:83:5f:ed:a8:
                    70:6a:2a:9c:43:d7:cb:33:7b:5c:31:54:b4:6c:0b:
                    e3:92:59:d1:e6:fc:98:92:15:96:42:1b:3f:ca:a8:
                    d7:92:ec:eb:3c:6a:d4:66:87:8e:05:21:cf:0e:49:
                    1f:ad:f5:c6:35:55:62:41:0e:51:5a:18:da:10:31:
                    57:d3:b9:75:a9:00:73:c4:dd:98:b0:d9:24:03:6d:
                    9e:99:bb:13:6b:c0:49:42:aa:a6:c3:1f:d9:41:8c:
                    58:fe:b2:9e:37:e8:85:0c:1d:99:60:dc:f3:36:90:
                    a8:cf:16:2d:a1:70:26:52:d9:6b:c3:21:8c:2a:b2:
                    1a:f5:17:a0:15:a8:8b:dd:89:d3:d8:76:f1:7b:d1:
                    b7:32:f6:b4:84:77:3f:15:25:2f:47:fe:a9:f2:8d:
                    2f:0e:d1:67:aa:88:ca:f7:1c:27:8d:13:83:77:be:
                    6e:bf:e2:6f:74:8a:0e:0e:32:cd:3b:80:cf:ec:b3:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:84:60:07:D8:B8:7F:F1:30:36:CE:EC:9D:E4:28:4C:C2:5C:46
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2b:2d:70:5a:77:90:51:77:53:66:06:82:8f:b6:3f:f5:e5:
         00:81:69:73:0f:87:48:45:dd:26:59:2f:22:bc:37:14:82:76:
         f0:36:f9:a9:1c:9a:00:17:fd:6e:3f:95:4e:81:19:71:36:2b:
         5e:37:42:2c:1f:19:d0:aa:0a:56:bb:b1:7e:28:8b:b0:8f:94:
         bc:ca:c9:51:a9:e2:7a:44:f2:17:10:52:b2:b4:02:4e:4f:63:
         89:2f:12:03:8c:59:3e:08:05:47:06:42:b1:93:1f:94:b7:18:
         41:03:a1:7d:31:3f:9e:39:3d:5f:84:d1:66:0a:82:c9:16:7c:
         d9:88:78:44:c4:f3:25:dc:21:80:2d:e3:7e:e6:50:5d:64:69:
         31:14:26:18:b6:fb:81:28:ac:63:f9:4d:fc:69:12:7c:2f:65:
         b5:6d:82:cd:01:a0:24:e8:e9:7e:59:8b:6f:3d:5e:5d:55:4b:
         2d:54:b6:ff:6f:5d:d0:cc:98:6a:07:e6:60:1e:0a:57:ce:cc:
         24:6e:28:4e:5b:f1:13:73:df:d7:e1:5f:61:12:53:af:87:46:
         5a:77:d9:83:74:56:36:45:36:04:57:51:e1:ae:f3:87:43:25:
         98:e2:0e:4b:45:9b:a4:32:84:23:aa:6d:b6:c5:dc:eb:c9:df:
         6c:7b:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 03:13:31 2025 by rpki-client