Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          SuHZfUaXt66ohCEK/X3HLd1V5phM/eEVkccJ7SJSYPE=
Subject key identifier:   49:78:4C:5E:1F:BA:54:7F:E7:9B:FD:9A:80:64:90:00:76:13:B6:05
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019A29674C78AB5C898A9ED6418889B62A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1292
Signing time:             Tue 28 Oct 2025 06:00:26 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:26 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:26 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: 44n+3XHZiwdrQgT2/ufAzcu9pnBiXnNUqj+mRtz2CJ8=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:4c:78:ab:5c:89:8a:9e:d6:41:88:89:b6:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Oct 28 06:00:26 2025 GMT
            Not After : Oct 29 06:00:26 2025 GMT
        Subject: CN=49784c5e1fba547fe79bfd9a806490007613b605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e4:16:66:b0:42:33:bc:a1:5e:1c:ff:1d:a4:
                    79:c0:93:9c:7f:6f:47:73:1b:54:4a:5e:d5:f5:98:
                    ae:04:39:08:c9:e8:c7:43:68:91:cc:b7:40:e9:61:
                    79:aa:63:4f:6c:31:17:ed:75:55:40:3b:8f:3c:85:
                    59:e7:b7:61:6c:7e:fe:86:2d:61:bd:2c:1d:49:b8:
                    02:6a:2a:81:c7:fc:25:34:70:4f:92:11:f4:c9:54:
                    1d:5f:1c:6d:ea:5b:d7:e7:8e:3e:9a:b4:56:56:65:
                    0b:f9:25:53:52:d0:c4:89:29:5b:b6:ed:73:2b:67:
                    52:e2:79:99:f4:8e:39:54:80:87:a5:06:ae:e9:f0:
                    c4:89:73:1e:99:c6:f8:dc:d1:1d:ea:78:a6:89:53:
                    b9:0d:12:46:61:0d:db:65:b3:da:4d:92:d6:fb:05:
                    c5:a6:33:bf:e6:2e:fc:d4:bb:33:5a:35:cb:59:8d:
                    99:a0:99:86:91:c9:12:00:1b:b3:90:67:a5:f3:7f:
                    cf:15:9c:7c:45:cd:98:0d:72:75:16:36:9a:8d:bd:
                    ba:ad:88:6e:e3:9d:95:58:34:70:19:18:17:46:8f:
                    c0:de:b1:e4:7d:67:28:bf:3c:a6:4c:5c:be:44:b9:
                    01:60:bc:79:67:a2:16:76:3e:25:96:9c:06:1b:47:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:78:4C:5E:1F:BA:54:7F:E7:9B:FD:9A:80:64:90:00:76:13:B6:05
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d3:c1:5f:0a:2e:2b:17:ca:d7:12:20:f6:3c:ad:4d:7f:85:
         eb:d2:16:bf:78:d5:2e:90:c1:fd:fa:ef:59:3f:fc:c9:46:e7:
         23:6f:ba:05:3c:c3:2e:37:28:3d:35:47:92:54:f9:64:22:72:
         92:7f:18:50:ea:cf:fc:6d:05:45:e2:87:b7:e1:15:91:08:39:
         73:0d:59:50:84:63:f2:89:d0:bd:38:93:58:7b:0a:8d:c4:5e:
         27:fb:6d:9a:ae:3f:9a:84:25:5f:99:04:05:85:2a:64:7b:6d:
         84:7c:32:5e:86:b4:4f:08:40:81:88:89:ca:3d:60:35:e0:93:
         fe:2c:06:cb:0e:cc:9b:3a:05:de:b7:93:cf:7e:0c:e9:c0:b4:
         eb:28:e4:53:b0:09:3e:01:bc:70:75:e8:84:de:5c:3f:a0:62:
         ee:91:57:dd:ef:80:e5:69:f9:91:64:e6:0b:04:fb:96:a3:bd:
         30:53:61:fb:de:8e:d5:e3:0a:9f:e3:88:fa:f9:dc:75:3a:53:
         d0:8f:55:54:fd:ce:af:fe:b7:ce:d7:65:20:17:a4:ad:c9:50:
         d8:da:ea:f5:1f:42:de:3e:4c:41:bc:90:36:7d:f0:74:20:25:
         4a:8d:de:6e:84:5b:6a:c5:52:9f:bc:e0:41:0f:93:75:00:5d:
         da:25:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 15:30:39 2025 by rpki-client