Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          KmUm5jWvGZ4/y4JUhxypv0XLIPQj1d2GDb0tX92OHJw=
Subject key identifier:   12:2F:59:25:31:D8:87:5B:FD:E5:11:71:9D:92:5F:FB:D9:61:C7:2B
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       019A4DAAA0FCD0C873FA21B87D3679BBCACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          1419
Signing time:             Tue 04 Nov 2025 07:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:19 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: ITh0VVd74NODGcRAjRbWMKbTPVyKBKp8yN7Fpopti2M=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:a0:fc:d0:c8:73:fa:21:b8:7d:36:79:bb:ca:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Nov  4 07:00:19 2025 GMT
            Not After : Nov  5 07:00:19 2025 GMT
        Subject: CN=122f592531d8875bfde511719d925ffbd961c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:54:68:43:f7:d9:57:b3:39:cd:78:04:5f:
                    fb:35:34:9d:a6:5d:e3:55:e4:7c:f1:f5:a7:ff:ce:
                    ab:ea:5e:c4:f4:12:ce:5f:28:0c:32:d2:6a:a6:ad:
                    6e:d4:56:c5:9c:fd:a7:cd:9f:14:bd:33:a7:bb:e8:
                    38:8f:90:5e:d6:b7:80:8d:50:57:ae:35:cd:ca:ed:
                    5f:c2:97:48:75:43:22:bd:23:41:ad:96:b5:8b:f3:
                    fb:37:60:1f:ea:c6:93:5e:b4:be:51:64:a8:9c:91:
                    6d:cf:d1:c2:3c:23:d4:66:eb:57:56:5b:4d:4c:9d:
                    eb:54:ce:9a:84:ce:4b:c0:94:99:eb:c3:da:d6:3d:
                    80:ca:06:5a:1b:b8:a0:71:ae:ea:22:1e:9a:d7:4c:
                    9e:fd:66:b7:b6:2d:04:5d:84:b7:84:fa:98:ec:26:
                    07:15:45:b0:39:63:23:3e:f5:fa:f5:0e:4b:cb:7c:
                    3d:df:65:8a:f4:67:25:95:e7:46:8f:05:db:8b:6b:
                    cc:09:73:12:68:f0:57:91:c3:f6:16:35:db:22:06:
                    11:6e:fb:cf:9a:23:51:7a:dd:05:11:0e:04:e7:55:
                    92:c9:52:ea:51:ac:fb:e4:5c:d4:7f:21:9f:17:be:
                    f3:05:c5:fe:fb:d4:3f:cc:52:48:e7:68:8c:37:c7:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2F:59:25:31:D8:87:5B:FD:E5:11:71:9D:92:5F:FB:D9:61:C7:2B
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a8:11:f5:48:29:66:70:2e:c4:bc:f8:e4:0e:76:c7:c0:8a:
         73:9a:79:6b:c3:94:e6:2e:2d:8e:70:ee:4b:12:71:a1:c7:2a:
         76:d5:36:42:8f:99:43:fb:71:58:0c:1a:78:32:89:c5:d0:7d:
         d4:f3:c5:bb:e9:e5:67:7f:50:d0:11:d8:e2:60:10:1a:56:fe:
         b7:f1:ff:78:14:42:0d:03:69:cf:b1:4a:07:01:40:27:4e:be:
         63:d1:fd:5f:a7:74:86:6d:a5:d3:7b:d7:31:0e:6a:d6:e7:0a:
         96:c6:93:bc:48:3e:25:5f:71:75:d3:0d:ae:e3:b4:3e:56:1a:
         35:25:98:51:5a:0b:a5:74:fa:74:54:c1:ed:be:c8:b7:fa:a5:
         20:b6:c4:26:27:e4:07:d4:16:c1:f8:a5:a1:37:56:34:be:3c:
         8f:0f:4b:25:e9:39:fa:e2:64:41:51:bd:bb:1b:d6:ed:9a:2f:
         e9:77:7f:c0:4d:1c:35:1d:b8:29:2a:8f:d2:db:54:a5:2a:e6:
         38:e3:c9:7c:57:8b:5c:b4:c3:5c:e0:93:a8:cb:c8:a0:f8:0f:
         c5:25:ff:52:e3:af:54:69:47:1f:45:02:87:9f:f6:4a:8d:cb:
         89:c9:32:1b:1f:77:58:2d:e4:e2:df:fc:9d:c8:3c:58:77:40:
         06:bc:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:02 2025 by rpki-client