Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          FQshkIX/bbbS48yFJSjbpR3nRRT/EnLgP0gANmAjHW8=
Subject key identifier:   37:BD:FA:89:1F:7B:0F:68:89:0C:69:87:B2:A0:6F:5D:A0:99:6B:FA
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019A0A8136945FAC82E5CFD6DB0F44EA6639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          060B
Signing time:             Wed 22 Oct 2025 06:00:31 +0000
Manifest this update:     Wed 22 Oct 2025 06:00:31 +0000
Manifest next update:     Thu 23 Oct 2025 06:00:31 +0000
Files and hashes:         1: 0YsqmYoX8nSnq9tL_jZR7_IicOU.roa (hash: Ld1DlRt0TARzLlXLVHsaGFQTRwffTa4AKCb432jsq74=)
                          2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=)
                          3: 5aiNMpTbEsFotHPhSom_BLzlcx4.roa (hash: UmVtbJKGVJKhOV0/7a2vDBmEaTfGr1/DLMtgALmVgoc=)
                          4: A3WhCggzu4rYOo1yOfgZK9-xHYQ.roa (hash: 6lM2sKn0Kt/HS6iHxtxrLQeD9LqB5QoOTReZqqvo3Jc=)
                          5: PlUFC6HKWWFjpql9DijziKwkcxw.roa (hash: 4W/hkwQltLoMthbvB9BB52pdcgOpX1UVyOI2+0P/Mmg=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: RwTT2uZE/VHx6jWDr2OQbv/YcJTJi8gUXl76t7j88po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:81:36:94:5f:ac:82:e5:cf:d6:db:0f:44:ea:66:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Oct 22 06:00:31 2025 GMT
            Not After : Oct 23 06:00:31 2025 GMT
        Subject: CN=37bdfa891f7b0f68890c6987b2a06f5da0996bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:2b:f9:a2:17:7c:5b:c3:0c:73:26:cb:3d:
                    57:f7:37:6d:e0:a3:59:ce:24:cd:3a:d2:33:21:ea:
                    ff:83:96:72:70:64:0e:f3:b3:c5:fc:d2:55:74:a7:
                    fc:55:e2:72:da:db:9d:f8:48:1d:6f:f3:a5:f0:2e:
                    17:b4:05:d6:da:43:d9:2b:b3:4d:52:f7:c9:83:8c:
                    0a:cb:fc:8b:62:51:48:19:e8:e7:85:38:42:10:87:
                    b6:69:1d:ff:bf:5b:56:6c:4f:4f:35:c5:0a:0b:0f:
                    9e:47:9a:c3:8e:ca:b0:1c:64:7e:81:5c:60:96:60:
                    0b:45:db:5f:e7:72:2e:3e:fa:e8:49:1b:21:34:ca:
                    a3:e2:1d:43:b6:d1:87:43:57:02:05:95:4f:3c:31:
                    b5:4b:a6:24:53:2d:9a:43:c9:48:48:3d:15:18:cf:
                    b9:90:cd:e1:4f:5f:c5:6a:0f:09:7a:7f:53:e1:c4:
                    db:44:b8:c9:7b:9b:6c:79:ef:84:be:f1:df:87:ed:
                    05:66:7c:9e:25:40:62:14:f5:05:df:5b:0e:ad:bb:
                    18:e0:33:c0:49:1a:95:e6:3d:30:66:8f:67:e6:22:
                    ff:2d:82:6b:7a:79:60:d6:87:87:4c:53:f1:3f:84:
                    ed:40:7b:c4:a6:74:65:cc:ad:75:20:de:d6:cc:df:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BD:FA:89:1F:7B:0F:68:89:0C:69:87:B2:A0:6F:5D:A0:99:6B:FA
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f0:d1:3f:ce:8a:dd:c4:53:88:b3:aa:34:d2:21:ac:fe:d7:
         89:3a:26:3c:32:af:aa:08:b8:38:88:a7:09:28:fd:6a:b3:22:
         48:f6:aa:74:37:e5:cc:1b:a6:0e:2f:3c:ea:0f:4e:7e:50:84:
         39:49:39:bb:e0:02:e6:83:d6:ef:9a:94:13:b8:1a:5e:4f:51:
         ff:d3:68:92:a0:d3:9a:e6:2c:e8:d1:f2:34:ce:68:e8:94:78:
         c0:c6:d0:b4:8c:d5:bd:04:52:4e:2d:97:1e:53:18:27:e5:26:
         82:11:a3:74:ac:12:1b:42:14:3b:97:07:3a:0f:e6:22:bf:43:
         4e:d0:cf:d2:f5:f6:50:5b:73:c6:58:96:4a:5d:f6:a1:3c:56:
         62:7a:be:3e:6e:a2:df:8b:4e:9a:9f:da:1e:2d:dc:c3:43:f5:
         83:4e:3d:33:61:ed:45:7d:69:00:10:c3:5f:2c:ec:73:1a:77:
         e1:7c:05:74:54:84:ba:40:88:12:a9:94:ae:3d:c3:61:a7:79:
         8b:f8:0b:66:53:11:bc:7e:99:46:1b:b2:1a:3b:60:25:9a:6f:
         8f:8f:70:c6:66:1a:f9:f3:35:23:fa:34:d8:69:46:e2:41:af:
         d6:17:0c:1f:f9:4f:0e:22:9f:38:e1:53:52:38:71:8c:62:0c:
         00:16:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:03 2025 by rpki-client