Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          xe/N0tVCtSd92b8sREtDEUrZQ+Dpoa+wa7WlAWzcLkg=
Subject key identifier:   B8:61:9B:3F:E7:17:E9:BE:A6:1D:53:40:AD:C1:A6:C8:51:38:B7:1E
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       01988BB38C66B4FB513F7D1FDA520A89CA0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          101D
Signing time:             Fri 08 Aug 2025 22:00:56 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:56 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:56 +0000
Files and hashes:         1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: OU6vtyWyZCnIP1U8/GLDy0Im6kUJSOjSoy/K1ftopVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:8c:66:b4:fb:51:3f:7d:1f:da:52:0a:89:ca:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Aug  8 22:00:56 2025 GMT
            Not After : Aug  9 22:00:56 2025 GMT
        Subject: CN=b8619b3fe717e9bea61d5340adc1a6c85138b71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:6f:70:1f:0e:6f:f5:25:98:79:e8:d9:02:
                    2e:e1:0b:1b:05:62:28:2b:2d:56:66:71:64:fe:fb:
                    f3:3f:19:83:4b:ae:3d:95:f6:e6:19:15:48:ce:d0:
                    e0:ba:75:69:db:53:85:3b:4c:5c:7e:20:d4:97:a4:
                    a5:64:b9:e8:e9:ae:9a:ef:fd:95:8f:04:85:e4:2e:
                    d3:3b:39:52:b5:de:66:32:68:a7:45:8b:5b:a5:79:
                    1c:a1:14:f9:27:b7:a4:a2:60:4b:1d:c2:4e:1f:ff:
                    62:ac:ac:29:d0:a6:6d:6b:5e:e0:64:47:a0:19:74:
                    4a:85:81:07:6f:90:d5:43:d0:0e:33:71:d8:4e:37:
                    18:30:12:b1:c0:ac:a7:c8:58:51:27:ac:ad:14:d8:
                    cf:6c:b7:ce:46:aa:64:16:95:4f:8a:3c:f6:0e:ba:
                    d9:fd:a7:a2:db:46:95:fa:be:d0:43:eb:06:06:1d:
                    c0:9c:79:cd:61:a1:58:18:f5:06:80:da:41:8f:c5:
                    2b:ee:17:3f:2c:a0:09:23:c0:f5:54:3a:1b:38:0b:
                    36:ab:d6:63:0c:04:4c:90:de:1a:a3:61:94:c7:1b:
                    20:71:b4:f4:a0:17:b9:9a:47:95:24:62:9c:57:fc:
                    e6:1e:18:f2:b4:c1:01:90:9b:f0:1f:e5:3b:02:8a:
                    59:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:9B:3F:E7:17:E9:BE:A6:1D:53:40:AD:C1:A6:C8:51:38:B7:1E
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:67:4e:39:89:de:d0:5c:fd:b3:0d:10:4f:b8:c4:e8:26:95:
         92:ba:ec:5d:a3:57:84:f4:54:16:21:a3:07:f0:bf:49:38:04:
         b0:4d:98:34:9d:17:9b:fc:c5:12:04:eb:61:e0:91:7b:35:d4:
         e2:b2:0e:9d:da:0f:86:a1:b5:9a:f4:f3:63:4b:45:bb:a4:60:
         a7:8f:74:71:b7:7f:af:85:23:9e:12:02:74:88:ab:c8:95:ab:
         12:a7:fe:45:14:98:f1:9c:1e:36:d5:ba:4a:b6:1c:39:21:83:
         04:3b:3e:d9:f0:27:77:be:c7:7e:d3:fc:72:c2:11:ba:e4:46:
         46:a5:86:da:d2:09:f2:4a:ee:f2:24:86:39:8d:63:c5:d0:c2:
         43:7a:f4:44:c9:3d:78:94:ed:fd:49:71:6a:56:d1:6b:d0:68:
         c7:5f:5e:de:05:58:8f:d3:00:22:96:81:dc:c0:aa:88:1e:b8:
         f8:98:34:0b:47:91:6d:22:f9:ca:b9:7e:4b:5d:92:01:68:2f:
         dc:f9:b3:ae:5b:27:c3:61:9b:23:6e:40:a7:f0:ae:44:61:64:
         af:cf:ea:87:c2:89:d8:2e:ed:a6:b2:92:44:04:8b:39:9d:e5:
         b2:a3:12:31:44:d9:e4:db:26:83:7a:e2:3e:9f:64:be:ca:b3:
         88:db:6c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:44 2025 by rpki-client