
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          Apcg96oaQ96ZQJcHIwE0tPErc4CnutMU60sqpC41Sic=
Subject key identifier:   14:D1:80:21:CB:CF:70:45:EC:E2:78:62:26:31:D9:79:27:A5:B6:22
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019A4D06926F19DBE21416A0F03B6477BAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 04:01:07 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:07 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:07 +0000
Files and hashes:         1: AsLBu-KLF_eIlciVtmCw6FoQZWI.roa (hash: Uxf292him4J1J69/hFLIe30svhXR87gNziaZeS20lGA=)
                          2: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: +hmUd6ULGwa6R4CauOfQmLlFxn2BkdsxYj48mdoaBOo=)
                          3: oi9YFEbcvlN5alPq7ixyYhFrq48.roa (hash: ADhZ+05HO4hub6uw9RxwuVi7MstO4VKG0zRMmKQDcKA=)
                          4: wKg9cqvso1ZsScpo5DIqClZRYrs.roa (hash: tU29LISc03t78s9NesDI+Otx6e7RN8GctCHPQvZVkgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:01:07 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:92:6f:19:db:e2:14:16:a0:f0:3b:64:77:ba:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Nov  4 04:01:07 2025 GMT
            Not After : Nov  5 04:01:07 2025 GMT
        Subject: CN=14d18021cbcf7045ece278622631d97927a5b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:96:f3:79:2f:46:81:32:0c:ed:38:16:9c:
                    62:0c:d3:7e:4f:20:57:89:65:2b:de:8c:8a:30:8d:
                    60:4f:dc:82:f6:0d:db:ac:7a:fd:35:a5:42:9e:b2:
                    0e:95:df:d1:f3:5a:54:c9:59:e9:ab:7b:d1:6c:0d:
                    b1:d6:87:39:c3:9f:ed:71:a4:7d:43:62:f1:9b:8a:
                    92:84:9c:6b:e1:f8:58:07:3a:03:ba:e4:bc:0f:11:
                    e5:fa:62:81:f5:e8:a9:29:59:74:6d:ff:92:90:5a:
                    58:fd:ec:d7:b7:de:ac:95:1a:07:ce:9b:5e:72:07:
                    1d:7f:ec:e4:cb:a4:a9:38:1e:55:32:87:a3:2e:60:
                    a7:d4:b3:6f:e5:c0:f9:b2:04:b5:b2:9e:6e:46:95:
                    70:fb:62:88:82:d3:03:f5:0e:8d:83:e2:87:17:4f:
                    c5:a7:da:23:32:44:cf:e3:35:78:b2:7e:e3:98:ee:
                    5d:29:42:d8:7e:52:d6:25:73:e1:f8:5b:1d:da:67:
                    85:fe:48:ff:9b:ee:4c:89:66:fb:a7:11:f4:21:84:
                    2c:8a:f5:8a:b8:5e:c3:1c:0c:60:24:0b:f3:af:34:
                    b6:b5:b4:78:bc:ca:09:8b:01:8b:24:84:7e:ad:b5:
                    43:22:ad:ee:2e:01:c7:d2:77:49:a3:fc:14:87:81:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D1:80:21:CB:CF:70:45:EC:E2:78:62:26:31:D9:79:27:A5:B6:22
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         57:a8:b6:10:ba:df:47:97:64:fb:c8:a3:67:20:fd:86:6e:1b:
         55:ed:c0:af:5b:5f:97:a7:69:5e:80:2e:8a:12:c4:40:19:00:
         d1:6c:c3:8c:b5:9b:05:ae:92:80:79:d3:92:e9:11:33:95:fb:
         3b:02:0f:db:24:61:65:db:ef:87:7c:e9:f2:c1:ae:f5:f8:0a:
         5a:c3:03:48:a4:cd:4d:eb:f7:1f:e0:e2:ee:b8:5f:56:fc:0e:
         61:94:bf:bb:97:c9:f8:1f:01:1d:bd:8f:5b:cf:27:55:4e:65:
         a1:df:21:ed:bf:58:4e:5e:cc:a2:6b:a4:0d:d6:85:bd:b6:b8:
         73:9a:49:08:6d:ec:f8:07:a0:e4:07:c3:e3:79:b0:f8:1e:59:
         b9:ff:59:70:68:eb:20:bb:77:b0:d3:ab:61:a6:07:81:e7:1d:
         f0:2f:0e:8e:c8:35:cb:7f:79:78:18:19:9f:32:8d:0f:0a:60:
         86:89:5f:3d:ec:8a:ee:d8:b2:6b:22:54:f6:a0:0a:cd:89:0c:
         6f:f6:a2:e7:d1:63:ec:bb:9e:f8:7b:fe:98:cc:2b:94:a6:3f:
         75:65:7a:a7:4d:7e:54:12:4d:6d:8c:e5:f9:0c:9d:ad:01:12:
         81:23:a9:a2:78:3e:88:06:51:d5:08:2d:1c:45:c2:b8:46:bd:
         4e:f5:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:45:21 2025 by rpki-client