Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          jDXzHQQ8OxoVjEA8lQu354bolIW25Uz/UA6aavySiWE=
Subject key identifier:   FA:6F:C0:A9:88:7F:36:91:80:B3:E0:84:2F:04:E7:A9:DB:BA:C8:44
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       019A522CA783AD1A353B497F80559D267AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          023F
Signing time:             Wed 05 Nov 2025 04:00:49 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:49 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:49 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: bxe91Xagj7ZVZBb5uRCtAntbedC4r5n6DzXAeBz2w40=)
                          2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:a7:83:ad:1a:35:3b:49:7f:80:55:9d:26:7a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Nov  5 04:00:49 2025 GMT
            Not After : Nov  6 04:00:49 2025 GMT
        Subject: CN=fa6fc0a9887f369180b3e0842f04e7a9dbbac844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5c:a6:5c:31:3c:96:2d:5e:cf:58:48:30:b7:
                    76:70:ac:06:d7:d6:e2:a8:1e:9e:fc:45:bf:8a:f0:
                    d0:cc:7f:f3:d1:3a:be:fa:56:2a:9b:d7:fe:6d:79:
                    6d:ac:3e:dd:3d:35:77:a1:4e:b8:8e:a1:ca:2a:f1:
                    b6:bf:a6:9a:8c:4f:48:85:ff:cb:6f:47:81:e9:37:
                    a9:21:b9:a8:f8:35:56:a0:c5:a2:96:80:88:2d:05:
                    6b:94:90:50:7d:16:d6:9f:25:cc:44:19:83:41:45:
                    a8:f9:9d:f1:c5:f5:27:6d:73:57:14:d0:b3:37:41:
                    ee:75:7c:69:5a:8f:ce:48:d0:18:b2:83:d0:83:8d:
                    02:cc:4e:cc:ed:c5:6d:1b:b0:27:ba:c2:98:6a:fe:
                    71:3e:90:3d:e2:55:1c:8e:7a:48:56:46:79:01:a3:
                    38:c0:35:04:2f:7a:25:8d:0e:3c:42:ff:e5:32:72:
                    ad:8e:38:a8:7f:57:e8:5d:eb:6f:53:47:36:d7:20:
                    04:e1:71:dd:09:8f:08:d2:0d:c6:00:f4:1e:74:6e:
                    93:f1:eb:7e:9d:49:4c:d8:44:c9:0b:1e:37:f1:ae:
                    05:21:87:5f:c0:b0:2e:b0:0e:bf:0b:3b:68:33:d9:
                    62:35:e6:1b:f1:75:f9:e7:f6:9a:7b:7f:3f:24:c2:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6F:C0:A9:88:7F:36:91:80:B3:E0:84:2F:04:E7:A9:DB:BA:C8:44
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:42:f9:3f:a1:b4:b2:39:93:fe:c2:5c:93:f3:09:ee:5a:
         78:68:bc:a0:19:12:0f:8d:ad:32:62:ff:a6:16:2d:d1:a1:11:
         a0:ef:87:8d:66:02:5f:1b:67:f0:b3:fe:32:33:09:1c:db:de:
         82:7e:0b:4c:22:be:60:64:83:04:35:14:3d:9a:3a:9d:21:0e:
         9b:15:c2:6a:25:b8:33:50:2d:a8:ef:71:2d:1a:16:1f:5b:3b:
         d4:c3:af:ff:90:ff:3c:fb:e6:dc:07:0a:92:2a:73:8f:de:5d:
         07:a5:0f:0e:cd:69:53:f3:8f:32:55:fc:cf:3c:49:ec:b2:98:
         21:b6:6d:c8:46:64:a5:95:e5:e8:e0:81:cf:9f:16:e4:bc:6d:
         72:c9:8c:d4:3c:de:86:0e:42:48:e9:36:ab:48:6f:e7:3c:30:
         32:12:f3:33:fb:ba:35:eb:71:79:33:77:98:c9:ca:1b:c3:d7:
         34:a9:51:c1:3c:97:b0:55:1e:d6:21:43:36:95:87:54:dc:af:
         95:1b:1e:13:90:cb:24:48:24:f3:a7:42:f6:b7:71:36:f0:15:
         99:88:aa:fa:ad:5b:36:37:8a:16:c2:02:97:d9:56:71:36:9d:
         8f:0e:95:c7:bf:c9:7c:32:a0:71:11:dc:c4:35:1f:9d:e8:e6:
         eb:68:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:13:36 2025 by rpki-client