Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          ILJModw+pfbGc3wWfjfjCEhbSmchfrQ+R68CvlSMSbU=
Subject key identifier:   AD:93:A5:B7:88:CE:C0:B7:4C:B4:4D:A8:52:DC:8B:7A:4E:EA:4E:77
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       019A50E44C75CC79F39379760DE60C8FE032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 22:02:10 +0000
Manifest this update:     Tue 04 Nov 2025 22:02:10 +0000
Manifest next update:     Wed 05 Nov 2025 22:02:10 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: gTo4IFc7PBECC9vFiXDEM4NgWqBQQR98+uBJolu6lJs=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:4c:75:cc:79:f3:93:79:76:0d:e6:0c:8f:e0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Nov  4 22:02:10 2025 GMT
            Not After : Nov  5 22:02:10 2025 GMT
        Subject: CN=ad93a5b788cec0b74cb44da852dc8b7a4eea4e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bf:94:26:d4:38:06:de:c3:6d:04:e5:ab:e2:
                    b4:e2:fc:f1:da:e0:38:3d:66:cd:fd:47:7a:98:7e:
                    64:5c:1a:b8:b3:8e:38:ec:25:f4:a1:48:69:73:36:
                    03:17:06:1b:35:b0:0a:1a:84:80:e6:5b:06:7c:e4:
                    2e:f4:ce:36:e2:18:51:04:6c:c4:2a:02:fd:37:a8:
                    cc:d8:3e:31:a6:db:8d:19:3f:52:12:c4:ca:2c:57:
                    b6:75:46:f9:06:ea:12:57:60:4a:24:1e:0e:3e:e7:
                    b9:5d:b1:0b:e9:f6:99:89:73:05:58:78:74:3a:fa:
                    c6:db:c2:4a:28:27:2d:d8:df:f1:2e:16:45:aa:76:
                    90:2b:02:80:3d:cd:3a:b9:de:6b:4f:d9:66:f1:20:
                    51:29:34:fe:ae:16:e7:01:a8:63:0f:20:4d:12:2f:
                    82:40:6c:3b:86:a7:78:17:24:d2:f1:e9:1d:0a:70:
                    e4:e5:f0:5f:b5:a8:14:c6:f8:d4:80:9e:03:4d:b1:
                    25:93:12:94:42:44:92:5c:e6:65:6b:ff:ed:6f:62:
                    c1:8f:11:ef:1b:83:ac:24:f5:03:d7:d6:d6:14:41:
                    ea:27:7b:cd:0c:57:13:61:b9:7a:ec:0a:45:27:3f:
                    dd:21:4f:63:b5:2b:6c:e1:4d:23:66:1a:0c:ce:34:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:A5:B7:88:CE:C0:B7:4C:B4:4D:A8:52:DC:8B:7A:4E:EA:4E:77
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4e:5b:4e:aa:ce:86:9e:5c:f6:99:34:68:03:09:75:48:dc:
         1a:41:ff:5f:d9:fc:c3:12:58:05:6e:1b:a3:5d:78:48:50:75:
         a0:31:57:e8:43:b0:eb:db:ec:a9:8c:bb:48:ba:dd:db:cf:10:
         61:fa:21:17:c3:04:25:18:52:15:b0:1d:e6:d6:b3:b3:f1:f8:
         e5:44:da:ae:2a:0e:18:20:44:2a:d9:eb:5b:fa:dc:0b:b0:c3:
         22:5e:bc:fb:fc:a0:d6:bb:42:e0:ca:56:0a:3a:bd:61:5c:dd:
         ef:5f:7f:5a:00:ac:3c:2a:7f:72:c9:f3:21:0b:db:81:2b:6c:
         f4:bc:7e:5c:d0:1a:28:ac:47:5a:e7:d3:2e:94:3b:e3:30:17:
         a5:8d:d5:9a:19:d4:56:2a:52:b9:bc:6e:cb:e9:6c:fe:2b:24:
         05:bd:12:fb:36:d7:70:24:67:52:25:99:9c:44:72:36:6f:b4:
         22:84:25:6b:8e:6b:a1:62:8d:58:b5:39:ac:a3:85:e8:56:05:
         73:1c:2d:31:c9:d6:60:7a:3e:46:99:c7:6f:8e:bf:3d:b7:88:
         62:83:7a:d0:fd:1e:98:5b:04:04:8f:f0:08:91:d4:7a:64:12:
         dd:6b:cc:f6:a9:a6:7c:1c:49:a6:3b:be:6d:ec:4b:8f:ed:26:
         f6:5c:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:25 2025 by rpki-client