Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File:                     VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier:          B6Mn0kGxUz3rJnqmKtYQ89xDYIgfJarfAtGhu9ylruM=
Subject key identifier:   43:F9:78:A2:DA:46:98:7A:60:39:3D:E1:D8:65:DE:67:04:33:BE:DD
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer:       /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial:       019A1F51966C4346E8D2C58940BA3537FD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number:          0E9B
Signing time:             Sun 26 Oct 2025 07:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 07:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 07:00:31 +0000
Files and hashes:         1: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (hash: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=)
                          2: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
                          3: Ux9674M8NjPfocnrYudKeCUjMbo.roa (hash: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=)
                          4: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: Nnm7stK8u7aBSNPN9fqnS+hGue8FgmviqxiXfZ81zzw=)
                          5: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
                          6: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:51:96:6c:43:46:e8:d2:c5:89:40:ba:35:37:fd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
        Validity
            Not Before: Oct 26 07:00:31 2025 GMT
            Not After : Oct 27 07:00:31 2025 GMT
        Subject: CN=43f978a2da46987a60393de1d865de670433bedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:a2:99:e7:ae:18:47:b6:94:cd:f4:c3:03:
                    49:2a:53:c3:e8:a6:53:6a:ab:ed:4f:86:a5:9c:46:
                    9c:ed:76:0f:8f:b6:32:0b:29:8b:8a:46:5d:2e:e2:
                    63:c0:7e:13:78:74:5b:39:7d:32:4c:7e:79:14:a3:
                    c7:44:30:1b:cd:51:f1:30:55:0d:e6:34:d5:7e:98:
                    f6:09:16:d0:3d:e7:b2:4b:0e:5e:50:77:9f:55:91:
                    2a:f3:0b:2f:24:25:53:0f:ca:8f:38:ff:e7:15:f0:
                    1d:a4:b0:18:25:c1:a5:ef:ea:58:a7:dc:a5:b4:99:
                    a1:0e:21:84:25:5b:01:04:23:b8:f1:13:4c:f4:75:
                    da:d4:f4:d5:4d:17:43:8f:56:a8:56:2d:b2:3d:8e:
                    d1:d6:40:73:55:5f:ba:a5:33:19:80:cf:53:1b:85:
                    7b:64:1f:91:4d:2e:46:a9:4e:d9:35:2b:30:25:43:
                    82:ce:24:88:11:33:68:1d:75:fa:85:89:83:89:ae:
                    a9:f7:19:66:2b:35:a3:fb:e8:c1:e4:aa:47:d0:79:
                    0c:7e:68:81:d2:b0:8c:75:db:41:bf:ab:8c:37:84:
                    dc:13:e0:02:1e:33:16:1d:d4:bd:ad:dc:7c:53:76:
                    a2:72:09:06:de:5e:7b:c2:27:a7:bf:72:24:33:ce:
                    e0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F9:78:A2:DA:46:98:7A:60:39:3D:E1:D8:65:DE:67:04:33:BE:DD
            X509v3 Authority Key Identifier:
                keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:43:3c:e1:5d:51:b1:43:f4:7a:45:ea:b3:e8:60:2b:a5:82:
         bb:23:82:dd:cf:4f:91:4d:1d:30:5d:4b:55:e8:9e:c1:ad:28:
         78:10:89:8f:3d:68:ab:23:78:24:32:34:b2:bb:3a:1a:ce:cd:
         c2:cd:11:4b:7f:b2:23:e9:39:1a:db:c4:7f:ba:32:ab:68:1e:
         9e:92:7b:64:67:5c:64:b9:7c:7f:07:fd:5c:36:a9:91:4c:b0:
         ba:44:eb:8f:52:ec:93:82:25:89:6a:8f:62:a1:ed:6e:70:7c:
         df:e4:fb:5e:a0:29:1c:af:be:ab:ac:1c:53:13:3d:b7:1b:06:
         33:d4:f9:8b:35:8b:d9:81:e5:b8:4e:cb:5d:8f:2d:fa:78:90:
         60:c5:15:c8:c3:cc:a8:91:ad:c4:f9:15:d7:87:c3:db:38:62:
         64:d0:24:da:ef:2e:b0:7e:66:c6:63:59:ff:b3:89:03:a1:07:
         c3:4a:79:46:d0:8b:2e:31:15:ee:d3:7d:a2:c1:5b:4a:e2:58:
         f0:e4:cb:ef:5c:57:82:ba:e5:0d:82:77:2e:4b:2d:67:33:4b:
         06:7f:34:61:82:37:86:2c:47:7b:a6:6f:68:1c:82:30:62:86:
         12:2e:83:37:fb:40:73:4f:3f:a3:f7:d2:eb:95:68:94:25:e8:
         ab:43:e9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:56:01 2025 by rpki-client