Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File:                     VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier:          WeBtNqdwkWB06M+4YjIHt8Rvpqc35mM6rmkDpmRmq24=
Subject key identifier:   58:EC:73:25:F3:48:F2:AF:CC:61:2E:DC:F9:F2:7E:DB:8A:6D:3E:12
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer:       /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial:       019A4C9802CF2931ED0D026391F6E5E756A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number:          081D
Signing time:             Tue 04 Nov 2025 02:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:21 +0000
Files and hashes:         1: VOCwh1utjz1n3G0fRSWrGdBLX3E.roa (hash: N86Thb+Z2Cee2FUQYjZTboBPyhDY9zRcG/ZzIf2sbhE=)
                          2: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: CfN3RgRYjwt76FjkcM4hRRSZSN91K8SJbL8xk2vNoA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:02:cf:29:31:ed:0d:02:63:91:f6:e5:e7:56:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
        Validity
            Not Before: Nov  4 02:00:21 2025 GMT
            Not After : Nov  5 02:00:21 2025 GMT
        Subject: CN=58ec7325f348f2afcc612edcf9f27edb8a6d3e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:9c:fe:3a:56:08:55:56:d6:e9:17:0f:56:
                    91:e7:18:45:aa:54:c9:a7:e0:54:16:8f:2f:a3:d0:
                    f5:2f:ff:ad:88:23:48:a0:df:50:5b:a3:16:25:20:
                    82:e0:11:b3:83:07:10:d5:89:1d:ab:f9:d1:06:ef:
                    53:9b:c6:10:18:04:58:86:9f:77:4f:c9:4f:6e:38:
                    fc:b9:ff:8c:11:d3:ed:a8:a0:8a:07:99:e2:69:69:
                    5e:8a:f7:fc:fb:4f:64:c8:6a:cc:64:ed:85:67:ba:
                    7b:9f:4f:3a:35:2a:86:f0:3c:ee:af:65:0c:32:0d:
                    ff:75:a1:02:ca:ff:cf:90:37:9f:81:56:12:b6:41:
                    3e:a3:84:cc:76:98:c4:6a:c8:ce:97:48:db:f1:08:
                    e0:11:96:0f:8a:c5:93:a1:30:06:b0:fc:71:c4:0e:
                    98:60:4c:d3:1a:53:77:c5:c1:c9:e1:eb:ae:69:e4:
                    dd:41:c5:35:fa:6e:5f:37:ea:07:82:f3:c4:72:ac:
                    b7:30:2e:85:71:95:38:e5:78:4b:76:69:e7:d6:82:
                    09:a7:c7:e9:0e:84:0b:2a:e7:dc:30:38:63:e6:91:
                    14:c2:a0:3e:1d:19:b6:0e:af:12:39:3a:3f:48:b8:
                    13:3e:0f:1b:f3:41:c8:4b:97:05:a1:5b:62:47:8c:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:EC:73:25:F3:48:F2:AF:CC:61:2E:DC:F9:F2:7E:DB:8A:6D:3E:12
            X509v3 Authority Key Identifier:
                keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:22:30:3b:ff:13:d4:a7:7a:14:fe:df:7d:78:d7:45:27:83:
         72:1b:91:f6:00:4b:bd:db:ad:d9:d2:c0:d2:44:97:c2:65:a7:
         26:8e:04:b0:36:24:76:e6:92:45:47:fd:1f:7e:35:39:52:b4:
         c6:b1:ca:1c:80:51:2e:ce:58:2b:13:b1:c0:90:73:13:3a:47:
         02:93:3b:15:0f:8f:63:67:27:42:a1:2e:d4:d0:65:ca:1a:4c:
         48:00:27:a5:d2:50:dc:6d:38:77:c7:ef:57:90:e7:e8:b5:32:
         b7:eb:17:d5:47:6b:ca:f5:56:d0:1f:07:8b:37:1a:dd:6f:72:
         e2:11:e3:06:cb:c0:c1:a9:30:d1:a3:25:65:d0:44:90:5d:ca:
         85:fe:43:a6:0b:26:23:be:c9:25:41:a8:bb:5b:a5:05:28:6b:
         89:a9:35:6a:c2:60:69:17:b5:ed:1d:b3:f5:aa:16:d6:7d:8c:
         a7:49:ec:33:bb:b3:90:4f:5e:08:42:9a:c0:55:3a:08:08:51:
         a1:07:0d:83:14:1a:74:22:da:90:88:61:2f:b0:b8:38:dc:03:
         f5:f4:e3:09:69:ff:1a:47:22:f4:0f:23:7a:6b:c0:3a:34:e7:
         ff:1d:8d:44:a3:87:fb:00:2a:0a:3f:9a:3e:f0:ac:2a:ed:67:
         c0:38:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:21 2025 by rpki-client