Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
File:                     VZe006Zk2swkk01I3RiOoY6PJ8E.mft (raw, json)
Hash identifier:          95Zw7knWOpoJNCYQZqFyzjbi8cijW6+yXyJAjS4T99A=
Subject key identifier:   76:B8:0A:77:72:59:2F:6E:39:E8:F2:82:46:50:5F:22:CE:05:BE:C3
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       019A4EF5A882C01EE6DDA196FB1DEA54B513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
Manifest number:          0DF4
Signing time:             Tue 04 Nov 2025 13:01:53 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:53 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:53 +0000
Files and hashes:         1: 8kfnwOtBgq_5_lkL_XTWGS_DW2A.roa (hash: R1ovdHUKN/hPy17oklKDPDEJOp9Mxs/OWbcQb2xo5Ek=)
                          2: VZe006Zk2swkk01I3RiOoY6PJ8E.crl (hash: OpFP9lIzubDn+8J4yB21OvBLhXhVfCKMceZKYGTHDBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:a8:82:c0:1e:e6:dd:a1:96:fb:1d:ea:54:b5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Nov  4 13:01:53 2025 GMT
            Not After : Nov  5 13:01:53 2025 GMT
        Subject: CN=76b80a7772592f6e39e8f28246505f22ce05bec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bc:eb:c5:6f:a5:02:bc:09:fd:3d:0a:cb:23:
                    03:17:a8:78:33:b7:16:9e:94:76:7e:bb:ca:80:4a:
                    d2:0b:ac:dd:f3:c9:ee:ac:de:54:b0:61:ec:fa:22:
                    6f:39:9c:b7:59:92:7e:db:1a:fa:85:b7:21:94:02:
                    c4:2b:57:cf:04:5a:c8:1e:ad:30:c0:cd:76:36:27:
                    40:0c:a4:60:29:78:93:77:7e:9e:93:37:ae:b1:7e:
                    93:43:c3:6e:c8:68:ab:cf:07:e8:84:12:57:0e:3b:
                    5f:79:14:af:68:1b:ea:f2:56:10:ec:4f:26:94:05:
                    c3:23:81:ac:7d:37:d7:f3:e9:3c:e6:cf:0b:d8:f8:
                    68:16:86:8e:16:fd:8d:ea:35:f0:f4:31:62:4c:2f:
                    62:32:01:06:66:d3:1d:54:a9:72:17:d3:f1:04:37:
                    bb:3b:ef:6d:62:0a:77:c2:68:79:5f:e3:81:e3:fd:
                    de:8f:01:b0:27:a5:4b:a3:99:a6:fd:a1:4c:50:7f:
                    22:f7:ab:da:45:32:c2:bd:fb:da:b5:5e:92:bd:d4:
                    dd:a3:90:c7:98:a1:3d:ed:1b:8d:3b:a5:af:ab:2d:
                    cc:e5:a2:bf:1f:03:64:92:d3:cb:d4:7b:bf:35:03:
                    9d:c9:ff:30:04:31:68:4f:f2:a3:dc:4e:35:15:fe:
                    58:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:0A:77:72:59:2F:6E:39:E8:F2:82:46:50:5F:22:CE:05:BE:C3
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:bb:fb:55:14:32:79:2e:d7:ca:48:53:16:f0:96:bb:15:
         68:81:a8:b1:f3:fb:14:84:4c:11:bc:e5:7b:c7:96:94:e5:9a:
         8f:81:34:ef:88:ef:72:56:2b:05:a7:c4:aa:c6:e4:69:4c:fa:
         c1:b1:8c:de:f2:05:3b:32:39:a1:aa:2d:a9:60:ab:a3:9c:90:
         f7:a4:98:55:d2:11:43:51:75:28:2d:bb:1c:7f:29:c8:0f:85:
         26:ae:d0:1e:e7:9d:47:db:53:bd:ad:95:6f:0f:22:cd:c5:d2:
         ed:05:e8:69:45:7f:1e:37:c2:b4:90:b9:3f:0f:ac:f2:3c:0c:
         12:52:f5:7b:c6:3c:58:62:bc:09:f6:08:d3:c0:94:12:81:06:
         47:32:b4:e7:0d:25:c7:12:3a:88:6d:b2:f8:be:19:a5:2c:39:
         7b:b3:9f:d4:48:16:db:9b:33:0a:b4:01:b1:9d:21:2c:64:d3:
         d5:27:86:c8:b1:d4:a1:19:49:f2:4c:2f:77:64:c1:12:f9:02:
         82:ba:dd:ab:bc:95:09:f2:2c:50:1b:dc:45:74:ab:6b:11:2d:
         b5:8c:14:0e:71:24:92:c1:64:8b:e4:3b:87:87:bd:49:5c:d7:
         25:8a:c3:00:d0:c6:c6:c8:5e:7d:fe:40:33:8b:60:6b:14:70:
         cd:8a:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:13 2025 by rpki-client