Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File:                     Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier:          40ttN49CReAYF6nB2RgBzlFIa6yHMiMDKQK3NfsOyrY=
Subject key identifier:   45:B4:09:F6:96:EA:2A:7B:79:25:34:4F:D8:D3:63:C8:03:5E:9C:AD
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer:       /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial:       01989F3A9B9D1021DBB17D788CB5EB8C1F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number:          1630
Signing time:             Tue 12 Aug 2025 17:01:14 +0000
Manifest this update:     Tue 12 Aug 2025 17:01:14 +0000
Manifest next update:     Wed 13 Aug 2025 17:01:14 +0000
Files and hashes:         1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
                          2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: NopZlbnco2e2lckx2Hjz961T+u97kDpB9eC/SXWzBJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 17:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:3a:9b:9d:10:21:db:b1:7d:78:8c:b5:eb:8c:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
        Validity
            Not Before: Aug 12 17:01:14 2025 GMT
            Not After : Aug 13 17:01:14 2025 GMT
        Subject: CN=45b409f696ea2a7b7925344fd8d363c8035e9cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ad:28:0f:8d:82:a1:0e:10:c0:0a:1f:76:9b:
                    38:61:ae:8d:40:b6:02:7c:24:23:ff:a3:2e:b2:ad:
                    1e:ad:89:1e:25:83:1e:f0:06:af:c5:aa:67:c7:de:
                    0a:a1:b5:d5:23:28:98:fa:1a:cb:7f:df:25:1d:96:
                    99:d1:70:88:d6:df:a5:24:e0:28:3f:cb:f2:71:4d:
                    fc:53:c8:70:ca:cb:75:df:73:8b:6e:15:09:5c:ca:
                    eb:10:39:60:69:7a:1f:64:75:55:48:80:03:cf:b7:
                    76:78:4e:7c:a1:43:cb:a2:09:3f:d7:fa:28:60:a1:
                    8c:b9:5d:70:27:f7:87:ea:83:19:92:5c:92:b5:69:
                    2f:72:0d:7d:7a:51:cd:70:4f:65:9a:9f:7f:6b:0c:
                    67:31:9c:24:7c:fd:ac:3a:27:c1:28:52:14:bb:08:
                    f2:9a:3f:f1:c8:58:85:bc:d5:21:cb:aa:9e:c1:99:
                    b9:c9:12:5d:eb:e8:53:a5:70:05:3b:d0:d2:70:f9:
                    46:27:13:78:fe:8b:19:56:ab:53:f9:3f:2d:f4:13:
                    01:08:ec:6e:c3:24:92:63:f9:83:d9:48:91:f6:7e:
                    18:54:b0:90:b8:ba:93:ca:b2:25:b4:0c:9c:50:87:
                    b8:55:e1:71:50:a0:7e:f4:74:99:c6:62:f6:00:a6:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:09:F6:96:EA:2A:7B:79:25:34:4F:D8:D3:63:C8:03:5E:9C:AD
            X509v3 Authority Key Identifier:
                keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0f:6d:72:60:05:c5:d8:b2:81:9c:0d:72:cd:57:a0:bf:f9:
         37:c1:0f:52:7e:42:48:c2:04:84:43:9b:6d:69:ea:a4:80:da:
         4c:c8:78:53:ca:eb:a1:7f:76:ce:5e:28:bf:2e:53:31:a0:03:
         2d:1d:a4:0a:75:57:32:2a:f5:29:7a:51:e7:b9:fb:b1:ab:ee:
         c9:c8:18:8e:9b:43:0a:47:0e:22:c7:bb:ca:f1:c1:00:07:79:
         3e:32:e1:3d:de:26:86:14:df:bb:cd:86:6b:bc:80:0a:a9:26:
         3a:1d:28:bf:9b:10:8a:2a:7a:fa:82:cb:e5:69:cb:76:8f:53:
         52:79:81:ed:b0:26:3f:45:90:f3:b5:cb:5a:81:62:2d:75:96:
         ad:19:db:c3:3c:75:f2:bd:ab:85:5b:70:a9:49:02:76:45:5c:
         b0:b5:5b:07:4b:de:9d:a0:bc:e3:97:98:83:6f:8b:04:3c:f4:
         69:cd:b8:42:50:2d:a0:cd:cc:11:ef:28:21:02:a9:f0:fd:53:
         bb:2b:7c:10:45:bf:8a:09:9a:59:ab:9e:fa:2b:11:91:f3:e2:
         22:26:e1:db:4e:bc:31:20:c4:20:81:1c:d8:bc:04:29:bb:da:
         3d:90:26:17:1f:95:71:34:b0:81:ba:d9:29:c8:5f:57:32:6c:
         c0:46:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:25:13 2025 by rpki-client