Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File:                     Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier:          gdw3uL3ewRkjDgUSxNpVXImX7jCKIrfgcn/9b0gPLQQ=
Subject key identifier:   F8:26:27:A6:A0:E3:40:7B:17:F1:60:4B:79:E6:E6:51:B5:AA:FD:A0
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer:       /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial:       019A4F2B8CE46216BA491820DD5681CC519E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number:          0BC8
Signing time:             Tue 04 Nov 2025 14:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:45 +0000
Files and hashes:         1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: w0YlBRsddu62g3AM+FPqNg54nWGt8/cZazWJw5Q6lBY=)
                          2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
                          3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:8c:e4:62:16:ba:49:18:20:dd:56:81:cc:51:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
        Validity
            Not Before: Nov  4 14:00:45 2025 GMT
            Not After : Nov  5 14:00:45 2025 GMT
        Subject: CN=f82627a6a0e3407b17f1604b79e6e651b5aafda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:96:0c:a3:7f:6b:10:67:00:44:2e:0d:f3:
                    cc:fa:62:63:f9:e0:35:3f:25:c9:bc:93:47:f3:df:
                    ad:e3:f1:da:cd:91:cf:92:ef:c6:6f:97:5c:dc:59:
                    02:e2:21:58:e8:d4:60:df:20:b0:0f:62:72:c0:9e:
                    e9:80:44:74:65:c5:a5:46:08:66:85:26:d3:a9:f9:
                    c1:74:de:65:8d:09:3e:89:87:92:43:e8:bc:d1:f8:
                    2a:8e:49:8b:c0:f4:11:5c:dc:13:01:c9:0f:ab:b2:
                    d2:2d:57:7f:64:fa:14:a1:b5:1d:bf:4d:73:13:0d:
                    0d:9b:53:2e:ca:97:32:5b:94:36:8b:80:3c:75:c0:
                    70:10:1a:f9:29:c8:cf:5d:c2:ad:0a:a9:a0:c7:3c:
                    61:42:47:94:e4:fc:25:c5:71:da:0e:0b:22:b7:c7:
                    0e:13:82:b6:7d:aa:5e:3d:e4:79:36:8e:5d:05:3c:
                    d1:d4:90:c9:0f:9b:11:31:d6:e6:70:1b:6b:90:1a:
                    61:2e:ee:cb:c2:3f:fa:e8:19:b8:ae:cc:d4:f0:58:
                    ef:5a:a2:65:f7:d9:4c:7f:40:b2:10:09:6d:5a:46:
                    78:36:ea:ad:93:a7:80:31:61:a4:4e:3e:63:1e:f1:
                    50:27:ed:b6:2f:d4:a9:86:02:6d:f9:0c:39:6c:a1:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:26:27:A6:A0:E3:40:7B:17:F1:60:4B:79:E6:E6:51:B5:AA:FD:A0
            X509v3 Authority Key Identifier:
                keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e0:5b:22:c7:aa:3e:55:a5:8f:58:6d:39:98:f5:b6:db:3f:
         88:d9:07:96:b4:ad:f7:a7:87:85:dd:11:33:ca:49:3e:1e:05:
         ef:5d:86:1e:19:61:a9:38:7b:f6:0e:c7:45:b9:7f:f2:b5:1d:
         12:64:70:fa:b2:15:58:27:c7:84:24:9e:0d:04:2f:c3:48:c0:
         dc:4d:e7:62:2d:d6:73:04:c5:27:08:7c:fb:6d:ed:a5:b4:5b:
         5f:32:ec:11:88:38:49:61:43:b9:39:81:e3:f3:75:af:8e:bc:
         c1:c6:87:bb:46:a1:ad:1c:13:69:c2:9d:9b:42:e1:5b:fa:9b:
         dd:ef:ac:f8:b8:26:08:f1:de:06:df:fe:dd:61:af:6e:3e:84:
         25:1a:70:37:6d:08:04:3d:c3:2d:5f:68:9c:87:db:f0:52:92:
         41:43:33:d7:63:fe:b5:ce:3e:ee:a4:ce:86:89:95:c9:5e:e8:
         85:ac:4e:9c:ec:6b:9d:67:48:b1:a2:70:fd:40:08:8c:ae:a5:
         b7:aa:cd:45:f7:91:01:da:4a:37:da:df:ad:bc:4f:57:f4:d9:
         52:7b:e0:33:be:62:ea:20:64:9a:87:7d:dc:58:9d:79:db:66:
         3a:19:20:78:16:28:e9:e7:4e:9f:13:c4:ec:28:38:08:f0:8f:
         0f:fb:bf:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:34 2025 by rpki-client