Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File:                     VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier:          +bk04WzlZQBGeGvIFyXsoR8xhMD7ZcxT76XWZTbFvjk=
Subject key identifier:   D1:14:72:70:50:6C:4E:11:CF:58:99:02:4A:FB:C2:27:56:EA:2F:A1
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       0198A23CFFDC0B179F053924AB0ACD594020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number:          09FA
Signing time:             Wed 13 Aug 2025 07:02:43 +0000
Manifest this update:     Wed 13 Aug 2025 07:02:43 +0000
Manifest next update:     Thu 14 Aug 2025 07:02:43 +0000
Files and hashes:         1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=)
                          2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: X4x50e4QNWz7w8dS8b8UvFcP4WQfIU8FQPpBft5e9b0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a2:3c:ff:dc:0b:17:9f:05:39:24:ab:0a:cd:59:40:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: Aug 13 07:02:43 2025 GMT
            Not After : Aug 14 07:02:43 2025 GMT
        Subject: CN=d1147270506c4e11cf5899024afbc22756ea2fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:53:b8:b0:66:b9:cc:ce:95:7b:7e:db:5e:
                    3f:5c:c8:97:3b:19:8f:17:d4:c9:fc:12:e0:e8:b5:
                    33:7b:91:f6:c3:ee:fc:74:be:98:6f:30:6c:e4:95:
                    f3:2b:ae:25:9b:3f:b1:0b:59:ed:7d:67:bd:a2:ec:
                    2a:f8:86:3c:39:e0:1f:e8:e3:9a:c0:23:65:9b:3f:
                    eb:70:79:7e:85:b4:a8:99:c3:b5:1d:aa:76:06:ce:
                    31:6e:b5:44:2b:72:65:95:fe:43:02:22:15:2c:3d:
                    c7:f7:48:5f:fe:60:a6:b9:1c:68:8b:62:16:57:a1:
                    5b:ad:40:1c:3b:2a:91:af:56:9e:c8:30:4b:46:ed:
                    e6:59:56:b2:38:63:45:81:b8:ff:bb:f6:56:4c:81:
                    be:b8:58:a5:4a:e1:15:29:30:bf:60:5e:0a:26:8f:
                    65:dc:6a:8f:8b:18:08:36:e6:f8:f6:79:27:8e:c2:
                    4f:a6:ad:dd:59:6a:fd:79:52:65:9e:7e:1c:b2:0f:
                    ff:66:03:14:45:cd:a1:95:06:f9:bb:53:bf:1d:38:
                    bd:c5:c1:74:1a:8b:36:0d:b6:89:b9:41:eb:57:70:
                    66:88:a3:94:69:9e:7d:c8:a2:64:d3:e4:6e:04:00:
                    53:b2:c2:be:69:f2:b5:5d:7e:89:16:c9:7c:e1:f5:
                    3e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:14:72:70:50:6C:4E:11:CF:58:99:02:4A:FB:C2:27:56:EA:2F:A1
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ed:f4:3e:6e:70:71:a4:f8:ed:62:1f:ec:d5:dc:d9:a0:e9:
         96:b4:4b:8c:f9:53:43:13:ad:99:1f:8d:11:f1:46:42:cd:58:
         02:b7:95:80:7f:79:ce:79:b2:42:a0:17:85:5e:0c:14:e4:a0:
         da:88:e4:e1:5f:00:18:cc:8a:f7:1b:58:71:43:2f:0d:07:16:
         79:39:e7:91:0c:6c:20:f6:8a:30:5b:da:33:d7:9e:23:48:3c:
         dc:26:65:ac:49:ab:1f:e9:11:43:52:5c:99:99:c3:c2:38:74:
         de:0a:78:2d:ee:94:bb:a1:2b:03:a1:02:ab:ec:6d:70:0b:77:
         1b:9b:69:6b:79:41:df:ae:d7:58:36:a0:40:b8:f4:be:9a:88:
         8a:88:92:68:9e:8f:ad:f8:c6:13:d9:36:80:79:4d:60:b5:d2:
         4a:e5:15:62:07:fb:76:53:48:0c:1a:43:41:e3:86:b0:c0:b0:
         85:4d:f6:36:14:d7:09:bd:1c:fb:83:7d:ec:28:9f:43:18:c5:
         08:9c:74:82:9c:55:c3:9d:4c:26:e3:4c:bc:31:4c:d7:2c:7d:
         03:c5:cb:e2:5a:45:58:4b:61:9e:7e:11:c6:e3:09:f5:f3:4a:
         72:8b:f4:c7:82:28:fe:f4:34:1c:f5:60:ce:91:af:7f:bd:4c:
         a3:d8:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:18 2025 by rpki-client