Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          yX6C8QeyhtPhtmwlIWpzIZqLaayXYWpZKzRM2bau7+0=
Subject key identifier:   D0:06:22:18:7C:06:F8:A4:FA:6F:EA:4D:EC:03:21:84:F7:C5:B1:A2
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       019A507502146EDD017CC9FC46F5EB5938D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          1713
Signing time:             Tue 04 Nov 2025 20:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:36 +0000
Files and hashes:         1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
                          2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
                          3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
                          4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
                          5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: qxllXOTxTmhzoekZ2hKSJetbA7lYlctuFcgrxVeoAmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:75:02:14:6e:dd:01:7c:c9:fc:46:f5:eb:59:38:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Nov  4 20:00:36 2025 GMT
            Not After : Nov  5 20:00:36 2025 GMT
        Subject: CN=d00622187c06f8a4fa6fea4dec032184f7c5b1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:99:91:e4:4f:68:94:f7:bf:be:5b:d2:9d:00:
                    8f:13:14:bd:ba:7e:fe:14:b5:88:07:2b:24:3e:b7:
                    9c:39:e3:f6:63:49:c9:70:db:b3:99:c8:a9:89:fd:
                    f5:9f:f5:e0:81:f2:5c:78:f0:97:34:c4:85:04:f2:
                    b2:f8:9f:d1:03:ea:2c:c2:b1:16:e8:6c:22:77:1c:
                    2b:d5:1f:7c:d1:29:09:8d:37:8a:22:cb:35:de:dc:
                    75:55:21:e4:03:f8:63:ef:e3:f5:fc:8f:57:b7:9e:
                    63:9c:9a:de:b6:60:72:0f:91:83:7f:f1:60:a5:cb:
                    e1:03:42:f4:10:1f:77:3e:b0:b6:9a:7c:d3:12:63:
                    5c:4e:f1:83:6c:e7:d6:e5:4f:7e:ae:1d:75:21:c2:
                    8e:20:07:55:56:e5:b6:6b:05:77:9b:b4:b5:16:2b:
                    aa:93:01:98:39:3e:75:1d:5a:4b:e9:a6:9d:16:1b:
                    0f:f9:a8:5a:20:3d:05:69:3f:fd:32:aa:f3:d8:a7:
                    21:bd:a7:82:41:80:33:20:97:3d:b4:7a:2a:cf:cf:
                    70:2b:e7:77:48:eb:1f:1e:64:81:45:af:79:85:02:
                    08:c1:b9:0c:0c:39:36:41:e2:b1:dc:65:83:79:46:
                    cb:1e:4e:a3:a0:69:66:24:ea:cf:ce:ed:42:49:a1:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:22:18:7C:06:F8:A4:FA:6F:EA:4D:EC:03:21:84:F7:C5:B1:A2
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:42:50:51:ba:3c:57:17:18:03:51:1f:16:9a:33:5a:80:53:
         7b:28:29:4d:c4:e1:e1:d0:fb:6f:4f:cb:50:81:12:2f:da:c8:
         e1:7c:73:28:74:e6:06:7b:12:3d:d7:13:6e:00:62:12:78:38:
         92:48:56:bc:22:46:f9:e5:f2:c0:15:61:8d:c2:f9:54:1d:c2:
         2d:bb:b3:29:76:65:ab:f9:b4:25:5a:81:24:c8:4b:6e:5b:cb:
         2e:17:0e:47:67:c6:10:2b:82:4a:3c:71:f4:fb:88:64:43:14:
         e2:36:de:5d:7a:94:0e:06:1f:88:c7:58:fc:a2:18:88:16:82:
         3e:41:f0:6f:1e:39:cf:9d:e0:3a:c7:7c:3f:fa:7b:f9:b6:21:
         aa:fb:cd:f4:98:1f:f4:86:b1:2f:66:74:b6:30:46:2a:de:6e:
         a4:45:a8:34:cc:25:99:d2:84:77:e0:e7:6e:0b:0a:92:11:eb:
         ab:92:b3:ba:34:11:25:b7:93:79:a3:4f:0c:41:90:0d:d2:64:
         6b:49:5b:78:1f:54:8a:81:d3:93:85:b4:c0:af:57:04:45:28:
         5c:ca:ef:8b:8f:78:6a:fe:fb:e2:a9:fe:b1:74:c4:84:12:13:
         d9:94:ee:e1:aa:1d:f0:b7:23:d9:db:22:9d:b0:f4:80:1f:7c:
         87:89:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:30 2025 by rpki-client