Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          FmG34W7p+zV1knpTD4rPjFFcY+4DhrNGqc6470xwzVs=
Subject key identifier:   5F:73:97:4A:A5:10:92:AB:A3:D7:A7:7A:22:E6:A9:43:1D:00:6F:54
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       019A51F5E7D5BFF90F7477F711BDAD4CACBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          1711
Signing time:             Wed 05 Nov 2025 03:01:01 +0000
Manifest this update:     Wed 05 Nov 2025 03:01:01 +0000
Manifest next update:     Thu 06 Nov 2025 03:01:01 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: +HsfxxwDQiTR5SYmvMIN5XpT0dYjgnKyUMvwle0CDjA=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:e7:d5:bf:f9:0f:74:77:f7:11:bd:ad:4c:ac:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: Nov  5 03:01:01 2025 GMT
            Not After : Nov  6 03:01:01 2025 GMT
        Subject: CN=5f73974aa51092aba3d7a77a22e6a9431d006f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:2c:0d:c1:59:6b:ac:37:a3:1f:04:83:22:
                    f3:d5:41:c2:3b:97:83:4e:5d:b8:86:4e:ac:ab:35:
                    88:98:27:91:33:57:21:bc:49:c4:6b:d8:1e:72:43:
                    4c:1d:4c:50:f4:b7:ff:36:22:34:3f:f1:0f:ca:65:
                    d1:12:ff:db:f6:02:bd:48:31:61:a5:5c:85:45:70:
                    e6:8b:e0:f2:4a:48:3a:96:c0:12:87:18:75:a4:e7:
                    43:61:cb:da:a8:3d:d8:8d:94:f7:6b:f2:da:28:ed:
                    d8:ff:5f:f4:dd:72:29:b6:12:94:3e:72:c6:40:71:
                    87:28:4d:e5:fc:c2:ca:79:4b:e5:8e:4c:78:56:65:
                    e9:cd:d6:b6:93:12:8c:4d:f9:e2:90:47:c5:df:a6:
                    e4:04:c6:fc:fc:41:cd:59:2a:ef:1a:e6:97:67:6c:
                    30:22:fb:ce:fa:59:53:69:aa:6b:b9:69:16:ee:2b:
                    f8:40:4b:33:09:a3:62:4e:eb:fc:5d:d2:a8:d6:30:
                    15:59:7d:ba:15:41:b2:9f:ac:94:f4:ce:ce:55:d0:
                    8c:70:a3:89:27:59:e2:ad:87:b6:cb:b3:59:56:07:
                    bb:d5:88:a2:51:68:78:13:b7:e9:9b:59:d1:c6:dc:
                    33:3c:ef:27:4f:9e:b3:44:86:1d:4e:94:6c:3f:22:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:97:4A:A5:10:92:AB:A3:D7:A7:7A:22:E6:A9:43:1D:00:6F:54
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5a:8b:f0:b6:46:57:e5:ae:b5:6b:f5:30:5c:1d:4f:c8:f5:
         5f:4c:fb:bd:44:30:c1:f7:ed:76:5a:6f:8e:19:6b:93:9b:9c:
         cc:96:71:c7:73:f1:be:af:4a:88:76:50:a8:d1:af:6c:9d:f4:
         29:b4:10:50:25:43:11:c5:49:f8:d1:be:5e:36:0d:0e:fc:9b:
         9a:4a:33:c7:53:1f:34:6d:9b:78:b1:33:90:da:24:fd:9a:d9:
         16:3e:2d:33:18:d2:a1:18:48:30:d6:f3:59:9d:ef:80:81:45:
         45:50:22:01:38:c0:fa:f4:bc:db:fd:b2:14:fc:7c:22:15:3d:
         41:c1:d6:d2:0b:35:4b:7f:55:f5:ff:3d:bf:71:30:ef:b3:34:
         f5:ca:18:62:f5:ab:4b:14:af:b7:15:3d:09:06:a8:0b:64:96:
         29:e0:69:56:60:f4:7f:80:e9:41:8c:d5:0a:a5:37:ee:b4:5c:
         aa:ba:70:6e:8f:78:fc:be:ed:63:e9:f0:08:49:e1:cb:e0:92:
         8b:f9:86:e6:bc:e5:ea:20:25:24:6c:61:82:5a:be:65:2a:1e:
         82:f4:b5:69:c6:d7:b6:9d:62:fe:5d:15:90:a5:32:d6:7a:ed:
         7c:ff:3c:8e:28:4e:55:a9:4a:2e:90:53:8f:20:ea:b7:e0:63:
         1f:c6:11:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:18 2025 by rpki-client