
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File:                     Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier:          QRQh180luYuXw+X6r9r60twuLFRnw46swPzVeg6H55A=
Subject key identifier:   36:DC:64:DB:85:26:98:71:D6:74:F2:DA:85:40:D2:F0:5D:3A:A3:44
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer:       /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial:       019A4C97DC7C1594B43B149A1EE911C7FB02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number:          045D
Signing time:             Tue 04 Nov 2025 02:00:12 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:12 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:12 +0000
Files and hashes:         1: FZWMDDQMo_y8JJ57vskoxtwrzBc.roa (hash: htvNKiRY5N1vCsM0n5CFd0XNCYmHCVpMo5jU+IUCul4=)
                          2: GWxeu1y_CzxjapRD6Erht2PYQd8.roa (hash: YAm4XFVWKwDXQd0Bp/cmWH42UfuLzbVp2eD58NsLJok=)
                          3: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: XHEzyp0zT5CHQHS+RWNrGHIHrzrqUPeuw955dAPssyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:12 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:97:dc:7c:15:94:b4:3b:14:9a:1e:e9:11:c7:fb:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
        Validity
            Not Before: Nov  4 02:00:12 2025 GMT
            Not After : Nov  5 02:00:12 2025 GMT
        Subject: CN=36dc64db85269871d674f2da8540d2f05d3aa344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:f8:be:a3:6c:98:a1:ee:39:61:eb:a2:a8:
                    bc:d1:4b:a5:38:38:76:fa:65:7b:74:22:7c:ef:60:
                    43:f0:41:47:ed:e6:c9:5e:27:e2:04:fa:93:96:23:
                    87:e1:48:29:fa:61:a6:fd:b4:da:37:f7:98:78:15:
                    7f:c1:12:f9:68:30:aa:c4:8d:e4:8d:63:74:43:0d:
                    56:cc:f0:eb:ea:c0:ae:bf:50:ae:fb:cf:2f:2c:eb:
                    1b:ce:86:e4:b2:f9:51:77:06:f4:9b:25:51:ec:04:
                    78:0b:a0:01:7a:4b:90:52:ec:44:ef:59:4c:94:3e:
                    0a:8f:7a:a0:e6:f2:a4:75:cd:06:4d:8e:5e:7a:9c:
                    3a:2c:e1:ac:32:8b:9d:8e:66:1b:14:fb:bc:b6:31:
                    6f:01:d4:0b:97:72:c1:e6:d2:6a:73:e2:64:ea:99:
                    60:b4:b3:3d:7f:e3:c1:62:bb:26:b8:f2:05:ce:ee:
                    81:de:7c:eb:70:10:05:33:13:cf:0b:31:6d:43:df:
                    35:c3:a8:e3:4b:75:96:35:4a:9b:55:2c:a6:17:60:
                    28:21:ad:31:d2:0b:03:5d:f3:ad:ac:ed:6c:82:28:
                    a8:1e:3d:04:28:fd:7f:e2:e6:12:96:82:f9:a6:47:
                    30:13:63:69:0e:bc:f1:a4:b9:95:37:6c:97:90:50:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DC:64:DB:85:26:98:71:D6:74:F2:DA:85:40:D2:F0:5D:3A:A3:44
            X509v3 Authority Key Identifier:
                keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         20:01:28:27:dc:b4:e1:b4:29:d8:33:be:19:c7:e1:0d:96:ee:
         59:2a:f4:61:4f:2a:c5:d9:b3:90:79:0a:f6:f2:88:f6:4b:fb:
         de:e7:f0:89:8a:5e:e6:af:63:a4:22:14:3e:96:06:ee:2e:dc:
         15:99:b6:60:51:0f:8c:57:37:91:35:fe:c9:55:7a:6b:3a:a3:
         05:97:61:2b:96:db:78:ec:ac:89:66:97:10:88:63:8e:be:ca:
         17:35:b9:69:16:ac:bc:5b:4d:ee:1e:c3:d0:2f:f3:50:c2:6b:
         50:7a:ea:6e:12:20:42:3d:db:1e:0e:24:6a:05:63:98:4f:a0:
         32:01:4d:2b:f7:f2:df:51:7d:0e:6f:fa:f2:16:3e:08:b0:34:
         ac:37:aa:f1:14:cd:66:b4:b3:27:d8:81:2a:3e:f2:82:b2:eb:
         44:ab:7c:f9:77:4a:29:4a:ec:55:bd:f5:f5:6e:02:17:8f:c5:
         f6:2c:c2:a9:2e:d4:46:6b:82:d2:3c:eb:0e:2f:57:21:c1:81:
         d4:88:71:95:d6:39:87:44:c6:ef:63:b4:91:ae:01:aa:f3:c9:
         33:17:f4:f9:9f:5e:a8:44:df:57:57:c7:26:0e:a5:87:d1:16:
         36:d4:c4:12:b7:dc:94:40:b3:18:80:38:ca:29:90:ab:bd:09:
         22:6b:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:48:03 2025 by rpki-client