Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File:                     vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier:          ofuuvcKR8qRT0tea0RZ28Tv3m6s23bSenYXP82RJ6B8=
Subject key identifier:   37:6D:EB:15:B0:17:CE:40:1B:88:53:67:3D:2F:E9:62:EB:2C:2A:73
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer:       /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial:       01988B7CFDE6B536CF4C90FEDC18E6DCD9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number:          1626
Signing time:             Fri 08 Aug 2025 21:01:21 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:21 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:21 +0000
Files and hashes:         1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
                          2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: NkIHRFazc3fWTdjL4DaB6CoiIVLiLvOzBSfLgHvVpVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:fd:e6:b5:36:cf:4c:90:fe:dc:18:e6:dc:d9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
        Validity
            Not Before: Aug  8 21:01:21 2025 GMT
            Not After : Aug  9 21:01:21 2025 GMT
        Subject: CN=376deb15b017ce401b8853673d2fe962eb2c2a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:43:15:05:74:aa:c2:64:14:51:68:67:ec:
                    65:ab:5a:19:e2:c6:66:c1:43:93:3c:72:84:79:4f:
                    6c:ab:f3:03:dd:fc:00:74:74:9b:f3:49:c7:3e:f1:
                    5b:2b:86:b3:42:7f:c7:fa:94:41:38:a0:34:60:60:
                    78:c1:0c:75:4e:fd:87:60:c7:35:7f:ad:08:7e:86:
                    e6:dd:4a:19:d1:f1:46:63:b0:a9:d6:6f:d2:0a:94:
                    c5:d8:1c:18:f6:32:91:52:45:68:d1:8e:3b:aa:d4:
                    d3:13:8e:87:6b:9c:e0:b5:58:62:37:2f:ad:fa:a9:
                    cc:bd:9b:d2:73:46:16:ca:69:aa:a1:ea:a3:24:87:
                    b6:cc:4a:e3:d7:16:ea:62:62:ef:a6:a2:bd:e4:f8:
                    fb:6e:56:ce:ed:83:ad:a6:40:dc:a1:78:3e:4a:09:
                    a2:b9:d0:7d:01:bd:ca:b5:2d:9a:3d:6f:45:87:41:
                    66:10:0f:c2:93:91:6f:72:05:3e:01:a6:f2:0c:e4:
                    ed:91:c0:d4:d4:89:68:0c:c8:be:bd:cc:f4:dc:3b:
                    90:5c:41:87:04:1a:32:a7:04:5e:ac:15:d2:cc:e6:
                    e0:b3:13:fa:4b:20:a5:02:64:90:27:26:78:eb:c3:
                    97:cf:65:6e:a4:78:5a:e2:2a:06:91:5c:10:3e:8e:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:EB:15:B0:17:CE:40:1B:88:53:67:3D:2F:E9:62:EB:2C:2A:73
            X509v3 Authority Key Identifier:
                keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2d:9f:6c:15:5b:36:06:24:f4:1f:fb:51:73:00:95:f6:34:
         99:96:88:10:0a:ff:a5:35:92:7f:4b:af:1c:f4:43:97:89:3c:
         52:72:f0:af:5d:0a:07:06:16:11:4a:10:7b:b8:d1:ed:f2:16:
         0c:5c:d5:57:51:78:4d:4e:75:b6:6d:15:6a:0e:48:f8:23:14:
         40:11:32:ef:14:3b:bb:91:dc:4f:f4:55:02:d6:c0:b9:38:28:
         da:8a:7f:ea:d3:c3:af:8d:8e:1c:76:74:8e:35:20:a9:7e:ac:
         82:da:c0:b1:d9:12:51:59:29:22:23:dc:0b:00:46:10:fb:7b:
         b9:84:16:a1:e1:82:37:14:bb:6e:ed:9f:b1:a6:df:ff:13:5a:
         bd:fe:dc:71:c3:7a:d0:e3:7e:27:2d:a1:a1:64:c2:f1:b7:b6:
         71:74:66:ac:f4:f7:f8:fc:de:ad:ec:58:a2:90:95:e9:cb:87:
         7e:b6:cc:b3:6c:0c:96:78:ca:ea:42:0b:1d:00:10:f8:54:e2:
         6b:8e:a9:f2:45:d0:e0:3d:a2:39:9b:0b:0e:b0:c6:52:61:3b:
         6b:ac:ca:83:76:f5:27:ff:4c:2a:ac:f7:7c:a7:55:82:26:ae:
         9b:e9:8d:95:2f:b7:8e:9d:58:0c:b9:ed:7e:f1:f9:f3:1c:be:
         e5:6c:d8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:52 2025 by rpki-client