Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          RHG3bB0mU6/1uJbc67HkO4XEWrbPxvQlzlgbtAeCy00=
Subject key identifier:   96:56:7D:1E:08:A1:DD:3C:16:DC:35:9A:91:69:D9:AF:35:9D:05:82
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019A5006F341F315C046A4EE3FE932381BCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          12A6
Signing time:             Tue 04 Nov 2025 18:00:23 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:23 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:23 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: ZyTOR8nMHrouwI8ddazDkTvv8VE0a+9O2a80nfaUNAE=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:06:f3:41:f3:15:c0:46:a4:ee:3f:e9:32:38:1b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Nov  4 18:00:23 2025 GMT
            Not After : Nov  5 18:00:23 2025 GMT
        Subject: CN=96567d1e08a1dd3c16dc359a9169d9af359d0582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:06:73:e9:46:d0:82:1a:6d:34:b5:0b:16:
                    4d:0d:d9:90:85:2a:fe:5e:99:b2:7d:96:c0:19:ca:
                    35:78:d0:37:97:79:97:af:28:ba:e3:c7:a9:b2:ee:
                    87:06:33:36:11:2b:0c:25:57:ed:3c:70:62:c3:9b:
                    fd:d1:80:43:1c:55:6b:7a:7b:ed:20:7b:80:2d:ba:
                    39:93:59:1f:69:71:31:f2:c7:f0:39:83:d8:5b:28:
                    e0:db:7e:5f:d3:57:35:88:18:45:b0:6c:2e:2e:82:
                    ca:d0:a4:37:b9:8a:9e:d5:e6:64:ef:7e:b3:63:36:
                    4b:9f:1f:74:19:1c:a5:30:94:16:b0:85:59:7a:d6:
                    37:b1:22:48:cb:07:1d:3d:f7:d2:56:35:49:c1:bb:
                    dc:f0:46:1b:81:de:ae:38:c1:13:4c:5e:7d:f9:80:
                    83:4c:d0:fb:44:1a:ab:33:88:d0:13:09:19:32:44:
                    a3:9b:59:5b:29:45:16:62:78:3c:88:66:dd:79:70:
                    30:de:54:3c:d3:c0:20:0f:b6:a0:1c:98:05:06:17:
                    5f:0d:d1:6a:0f:cb:1e:05:8a:96:fc:42:42:e1:5d:
                    71:29:8b:70:d4:76:2a:9c:0a:75:4e:4b:36:3d:de:
                    90:c2:2a:3a:40:d2:36:6d:ed:93:c8:ba:d3:80:ff:
                    c3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:7D:1E:08:A1:DD:3C:16:DC:35:9A:91:69:D9:AF:35:9D:05:82
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:9f:12:dc:11:87:50:c7:2d:04:4d:09:cc:04:ba:e7:45:21:
         7b:a9:b4:c5:92:00:45:35:0f:5a:26:69:9c:93:57:a3:92:60:
         dc:59:06:71:2a:9a:9e:10:aa:67:1c:be:ab:b9:84:ef:ed:b3:
         88:83:37:eb:ee:0e:80:b5:1b:c8:ca:51:ce:15:8b:04:a0:12:
         eb:2d:9a:57:e3:ea:34:1d:65:6c:db:a0:af:60:2f:55:cb:41:
         63:ec:c7:07:0f:e2:21:d7:4e:d6:c1:3d:66:94:00:e9:16:f6:
         0f:34:04:3f:41:7a:d2:06:34:78:a9:67:14:30:53:6a:0e:a5:
         42:97:2b:c7:42:9c:31:eb:1b:8a:71:5a:e2:36:03:b1:61:d7:
         58:6b:a6:d3:24:4d:7b:67:e7:f2:42:da:1f:3c:51:18:ab:a6:
         a3:a7:98:1c:e1:5d:57:28:23:af:19:6c:c9:9d:bd:1b:8a:ce:
         f0:ee:4f:4f:40:ad:2b:40:24:04:62:7e:dc:b5:07:d7:aa:6b:
         cc:9c:97:80:f9:9f:64:02:10:41:f9:f9:a0:bf:b0:f8:21:f4:
         e5:1c:4e:b9:95:7d:6b:7c:b2:b6:15:07:f9:71:cd:5f:0d:ba:
         87:a1:7b:02:68:17:2d:bd:da:c9:5a:4e:73:16:62:43:18:5e:
         c6:a1:e3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:57 2025 by rpki-client