
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          svCTi60IC7zOAKGy+o0H1PD+6KkzyBbrJf2ddsNkl74=
Subject key identifier:   19:84:D3:C2:D6:AD:EC:A8:1A:24:23:C9:B3:7C:9D:43:E0:C0:BE:E3
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       019A4D3CCE4833D5A299E18EB004C03F5797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          0F76
Signing time:             Tue 04 Nov 2025 05:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:21 +0000
Files and hashes:         1: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: U9WDj+gfnp8u/THYhQZiaCd4meoA+nSCohBV9HqWEQI=)
                          2: y77QbXKRiye418rSbAFqIemComQ.roa (hash: ssUcd0LDD/xfi2UdCI3WRFi3tuO7iUpDjNv4QY4EqSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:21 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:ce:48:33:d5:a2:99:e1:8e:b0:04:c0:3f:57:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Nov  4 05:00:21 2025 GMT
            Not After : Nov  5 05:00:21 2025 GMT
        Subject: CN=1984d3c2d6adeca81a2423c9b37c9d43e0c0bee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:96:1e:90:82:df:61:fd:b1:29:65:8e:a5:
                    48:7b:eb:18:4f:15:0a:36:14:0f:f6:28:20:3b:58:
                    e8:5b:52:54:4a:b3:01:9d:48:b4:f9:a2:dd:65:23:
                    65:08:b1:5d:57:2e:31:88:61:88:3d:75:4b:e9:6e:
                    56:33:44:fa:14:9b:6e:0d:68:dd:1c:37:4f:94:a1:
                    dd:b9:af:94:31:78:d4:10:1a:55:38:e1:ca:e9:dd:
                    12:32:25:99:84:dd:83:5b:76:54:45:9e:ad:b6:69:
                    f8:bd:5b:ff:c7:c2:b1:b9:20:74:61:6a:0d:1c:b5:
                    de:92:90:41:e1:8e:3d:65:fc:ea:c7:95:6f:2e:ec:
                    ec:db:9a:47:b2:9b:0e:d5:ac:12:3c:d8:c0:d0:9e:
                    c9:95:b9:b6:3a:1f:58:48:e0:ae:9b:53:fe:5a:24:
                    38:84:38:ea:33:2c:80:e6:41:ed:55:61:7c:2e:40:
                    57:4e:16:c1:52:36:15:b7:d7:85:d0:34:3f:b1:8e:
                    52:cb:2e:10:f0:98:20:ed:09:b6:05:c4:30:56:e9:
                    dd:08:96:fd:82:78:fa:b4:8d:50:42:83:7d:83:ed:
                    79:e1:5f:5c:e7:f4:be:6a:bc:ee:30:5a:a0:91:7f:
                    08:0b:e0:af:17:8b:2e:06:07:9e:76:91:ef:3c:f8:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:84:D3:C2:D6:AD:EC:A8:1A:24:23:C9:B3:7C:9D:43:E0:C0:BE:E3
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2f:06:1d:d4:65:4f:2f:ea:be:3f:e1:2b:1e:e5:18:61:44:6f:
         7c:ca:21:36:09:30:3d:4d:8f:c1:ec:60:b0:33:76:4e:4f:75:
         0e:2e:0f:ef:19:bc:ba:f3:0c:41:ce:9d:55:30:51:9d:29:5b:
         b4:ca:5b:2b:55:20:70:a2:db:5d:98:b2:b3:66:1f:ca:5d:05:
         25:66:12:d3:89:3f:7a:d3:32:1f:33:e8:f1:70:7f:2a:4c:83:
         cc:aa:77:95:ad:5f:16:e1:ec:7c:83:50:1c:81:4b:27:8a:80:
         53:a1:1a:0b:b6:c5:83:b7:7d:82:5e:0e:2b:33:10:20:17:83:
         ee:de:92:f0:5e:06:34:9d:63:ec:00:a3:32:da:ff:73:66:e0:
         07:01:d9:88:ae:a3:31:90:93:9c:66:45:3b:bd:cf:0b:53:46:
         00:ba:18:ae:aa:33:cb:05:5d:97:3e:0a:4d:d4:28:de:30:21:
         a4:c6:0c:2c:a1:94:97:d0:65:6b:aa:39:fe:10:04:5c:bf:df:
         88:b3:97:68:e0:99:fa:fe:5d:9e:f9:aa:eb:e6:d4:84:63:fe:
         79:8e:d1:ab:4d:a9:ed:bd:3a:d7:05:c9:10:c3:52:30:b7:85:
         17:db:5b:a1:de:73:2e:37:25:8c:6c:c5:44:a3:db:98:5c:4f:
         85:83:00:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPM5IM9WimeGOsATAP1eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWUwZDczMGUxYTU2ZDU3ZjgyN2UyZTU0NDZkMDFkOGQy
NjE1OGUwHhcNMjUxMTA0MDUwMDIxWhcNMjUxMTA1MDUwMDIxWjAzMTEwLwYDVQQD
EygxOTg0ZDNjMmQ2YWRlY2E4MWEyNDIzYzliMzdjOWQ0M2UwYzBiZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rKWHpCC32H9sSlljqVIe+sYTxUK
NhQP9iggO1joW1JUSrMBnUi0+aLdZSNlCLFdVy4xiGGIPXVL6W5WM0T6FJtuDWjd
HDdPlKHdua+UMXjUEBpVOOHK6d0SMiWZhN2DW3ZURZ6ttmn4vVv/x8KxuSB0YWoN
HLXekpBB4Y49Zfzqx5VvLuzs25pHspsO1awSPNjA0J7Jlbm2Oh9YSOCum1P+WiQ4
hDjqMyyA5kHtVWF8LkBXThbBUjYVt9eF0DQ/sY5Syy4Q8Jgg7Qm2BcQwVundCJb9
gnj6tI1QQoN9g+154V9c5/S+arzuMFqgkX8IC+CvF4suBgeedpHvPPjn/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmE08LWreyoGiQjybN8nUPgwL7jMB8GA1UdIwQY
MBaAFFVeDXMOGlbVf4J+LlRG0B2NJhWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQt
MGExY2E1NDkwYWZkLzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQtMGExY2E1NDkwYWZk
LzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwYd1GVP
L+q+P+ErHuUYYURvfMohNgkwPU2PwexgsDN2Tk91Di4P7xm8uvMMQc6dVTBRnSlb
tMpbK1UgcKLbXZiys2Yfyl0FJWYS04k/etMyHzPo8XB/KkyDzKp3la1fFuHsfINQ
HIFLJ4qAU6EaC7bFg7d9gl4OKzMQIBeD7t6S8F4GNJ1j7ACjMtr/c2bgBwHZiK6j
MZCTnGZFO73PC1NGALoYrqozywVdlz4KTdQo3jAhpMYMLKGUl9Bla6o5/hAEXL/f
iLOXaOCZ+v5dnvmq6+bUhGP+eY7Rq02p7b061wXJEMNSMLeFF9tbod5zLjcljGzF
RKPbmFxPhYMA4w==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:13 2025 by rpki-client