Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          BbSel2xMAyzAjp0C8gpLBuncYSw3swNdKXROU7RSXl0=
Subject key identifier:   7F:E9:1A:E0:B9:F3:F4:14:DE:BA:9C:B0:E8:46:FA:24:C1:EA:8A:F2
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       019893364F0D16E6CC3F446D209AB769CB54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          0114
Signing time:             Sun 10 Aug 2025 09:01:06 +0000
Manifest this update:     Sun 10 Aug 2025 09:01:06 +0000
Manifest next update:     Mon 11 Aug 2025 09:01:06 +0000
Files and hashes:         1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: JO8PvHSyIfsaI0Kg24R7mFhwM5DwjjiqsNdzIcm3Hro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:4f:0d:16:e6:cc:3f:44:6d:20:9a:b7:69:cb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Aug 10 09:01:06 2025 GMT
            Not After : Aug 11 09:01:06 2025 GMT
        Subject: CN=7fe91ae0b9f3f414deba9cb0e846fa24c1ea8af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:7d:8e:1c:20:ae:27:d5:26:4f:4b:b3:aa:
                    98:2a:93:38:95:8f:5d:f5:15:8d:ec:83:5c:ab:e0:
                    a8:1d:44:f8:8b:81:89:c3:36:c0:31:50:bd:49:ce:
                    55:69:80:b4:ed:cc:d1:ed:7f:71:9a:82:a0:b8:03:
                    79:af:c1:7a:a1:38:09:80:43:ca:63:ea:be:64:1d:
                    d8:21:df:17:a5:ff:d4:c0:30:62:87:ba:41:c9:d3:
                    46:44:df:02:1e:5a:14:93:60:f0:03:bd:73:62:f5:
                    28:8b:11:3a:85:d5:7b:c6:a0:a8:47:32:f4:cc:d1:
                    b9:78:8b:98:78:da:2c:5b:e7:1d:72:8f:6c:6a:34:
                    83:ff:fb:d0:f8:f7:96:b5:16:eb:0b:47:94:ca:8b:
                    f4:a9:8a:24:02:09:60:bb:a5:18:96:7e:f0:9f:ee:
                    2e:35:1f:20:e3:6b:c7:d9:71:3e:fc:3c:5e:2c:ea:
                    15:8a:44:41:15:be:1c:c0:33:9e:73:01:3e:6c:26:
                    b2:3e:75:fc:14:74:ee:46:d9:28:4f:62:50:0f:90:
                    54:03:1c:a8:f4:8d:bf:4a:d6:38:ee:87:d9:70:ce:
                    7f:9d:9e:4b:dd:d2:b8:d2:34:50:3c:fb:72:07:ca:
                    df:4b:43:88:ad:26:50:7c:bc:34:24:b6:73:ab:8d:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E9:1A:E0:B9:F3:F4:14:DE:BA:9C:B0:E8:46:FA:24:C1:EA:8A:F2
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:1c:b9:b3:c2:23:60:9d:ca:c7:a4:0f:e8:d2:23:80:a3:
         22:a2:b9:9a:e6:13:56:fe:05:55:15:a4:02:df:fb:37:50:11:
         ea:99:09:85:88:3c:62:53:e8:ab:fe:b8:ea:06:5b:73:64:00:
         99:b1:8a:99:c7:8e:01:fb:15:3f:19:85:48:a6:47:80:2a:56:
         8d:26:39:5f:50:84:18:84:d2:52:28:fa:d3:a7:cc:02:bc:40:
         07:92:66:d8:b5:df:fd:33:94:75:2b:68:4b:27:e3:b0:4c:1a:
         e5:58:31:c1:09:c0:c7:ff:49:28:d1:4b:f5:21:06:36:e2:d4:
         05:a0:9d:66:22:34:39:b3:69:51:d5:24:d8:60:25:92:5a:b1:
         ca:41:28:60:44:9e:d8:cc:09:9e:94:68:26:44:03:f8:fc:9d:
         63:28:89:8e:bb:22:7c:bc:ff:e4:51:a5:72:19:3f:db:81:29:
         b2:a9:ac:6c:23:41:cb:f3:dd:43:90:99:7a:d5:b9:07:d2:ff:
         54:ee:96:f4:b6:9f:5a:af:c9:9f:ec:1e:a1:0a:a8:0d:20:dc:
         6e:56:f6:82:9d:9c:17:de:65:6b:b0:bf:06:dc:d6:84:b5:ea:
         c1:a5:6c:66:48:a6:69:18:0c:eb:2d:10:9f:3b:5e:14:9e:54:
         7c:3b:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:12 2025 by rpki-client