Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File:                     1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier:          sEVo+6MXU6F3NKCCaRQmlqKOScSYLI2KZwdSve941XY=
Subject key identifier:   5A:2F:92:15:93:8E:BD:A2:B8:7F:B2:AF:75:1D:C5:30:C3:AE:61:3D
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer:       /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial:       019A71B7C53AB27E5A911931B12E5950E7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number:          06F9
Signing time:             Tue 11 Nov 2025 07:01:00 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:00 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:00 +0000
Files and hashes:         1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
                          2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: ncpX4zsaYQ+cmWPDA8Aq/bxM0VZq9udFQMH8iHRJ4gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:c5:3a:b2:7e:5a:91:19:31:b1:2e:59:50:e7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
        Validity
            Not Before: Nov 11 07:01:00 2025 GMT
            Not After : Nov 12 07:01:00 2025 GMT
        Subject: CN=5a2f9215938ebda2b87fb2af751dc530c3ae613d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ca:0b:6a:cc:74:8e:db:08:59:5c:1a:b8:44:
                    db:8b:6c:9f:07:49:49:b6:49:bc:0b:e1:34:13:25:
                    85:f5:9f:51:51:18:89:e1:35:55:6d:ac:88:a7:14:
                    31:e0:f9:40:42:bf:fb:6e:95:65:df:14:d3:2e:29:
                    05:45:ae:c4:ec:32:80:53:e7:83:2c:12:4d:aa:3f:
                    69:37:8b:ec:77:08:c3:5d:2e:f6:43:52:9f:d4:6d:
                    f9:54:20:dc:31:36:19:df:62:1b:12:db:a3:0a:e2:
                    08:e1:15:48:f6:1c:80:41:fa:6b:74:df:7e:77:7f:
                    61:89:79:c2:5b:11:eb:d3:25:ec:e2:c4:1a:e0:23:
                    19:c3:77:18:62:06:c8:36:06:17:02:27:85:53:29:
                    e8:c8:81:48:73:21:68:96:97:4a:36:a4:ac:2b:de:
                    47:47:21:7c:f0:a6:bc:6d:3f:c6:ed:64:3f:08:71:
                    ab:c0:b7:65:51:61:a8:8a:69:03:28:55:d7:e8:32:
                    e1:db:18:7f:ff:1e:ef:51:28:65:7d:82:2a:a8:87:
                    46:4c:e0:69:5f:c5:7f:d6:fe:9d:0b:eb:f2:e6:1a:
                    e8:eb:39:53:55:b0:2a:ca:97:cd:dc:5d:1f:c7:4b:
                    13:ca:58:c4:9d:87:7b:72:85:0e:5a:d3:a7:9c:02:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2F:92:15:93:8E:BD:A2:B8:7F:B2:AF:75:1D:C5:30:C3:AE:61:3D
            X509v3 Authority Key Identifier:
                keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:8d:af:28:20:41:f7:29:30:42:a9:ab:dd:e9:d0:01:5c:
         8a:e0:15:20:8b:51:25:dc:6d:f2:86:e3:63:2e:9c:72:52:a3:
         60:1e:d6:92:8e:68:a4:cd:bb:0c:39:89:4c:32:9b:02:e8:9f:
         78:6f:f3:62:a3:6d:79:50:45:10:55:07:f6:f2:89:3e:df:3c:
         29:99:e8:33:6b:a8:f3:c5:59:71:27:66:70:0e:30:bd:54:a4:
         22:a2:4c:81:55:39:bd:08:c3:28:0f:06:52:5a:f1:ab:fe:e2:
         77:7f:9c:c4:c6:b6:f2:94:7e:e4:34:ca:6c:6b:56:6b:72:1d:
         28:08:6b:de:8c:c8:dd:27:65:4a:42:0f:4f:fa:09:fc:ca:8c:
         7e:47:77:4d:eb:88:41:14:0a:1c:ff:e6:d8:03:19:77:da:dd:
         59:47:87:77:02:95:75:e9:44:af:b2:44:bc:4f:59:f2:52:df:
         b6:e6:fa:42:d3:4a:83:b0:a0:33:62:72:75:ee:22:2d:ea:d7:
         f2:7b:78:4e:e6:a5:07:10:db:80:14:6f:46:d7:62:c7:71:94:
         3d:6c:4b:c4:bf:fe:f4:cb:1d:a1:1a:77:fc:90:10:52:f8:a9:
         43:b5:2e:06:a8:1e:ee:fa:bf:79:37:c6:45:90:38:27:40:46:
         cd:d5:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:06 2025 by rpki-client