Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File:                     vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier:          Dy0q91VUnpIkTL4imFEvirIBUSRX6xHho1xPQu0KyzM=
Subject key identifier:   4D:12:A0:64:CB:7D:EA:45:53:B3:75:53:27:F7:BF:10:2C:70:05:5A
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer:       /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial:       019883C3D13BBE379C9F216C14D214B0DD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number:          0B77
Signing time:             Thu 07 Aug 2025 09:01:45 +0000
Manifest this update:     Thu 07 Aug 2025 09:01:45 +0000
Manifest next update:     Fri 08 Aug 2025 09:01:45 +0000
Files and hashes:         1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
                          2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: 1/zIpS63Aa7FGPyU+JsUFjov2XZFBhEKXEJy10UCirE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:c3:d1:3b:be:37:9c:9f:21:6c:14:d2:14:b0:dd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
        Validity
            Not Before: Aug  7 09:01:45 2025 GMT
            Not After : Aug  8 09:01:45 2025 GMT
        Subject: CN=4d12a064cb7dea4553b3755327f7bf102c70055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:e2:02:dc:ae:4e:98:79:71:40:d0:5e:f6:
                    2c:e1:ad:aa:c5:0d:29:61:f6:a2:74:3f:82:20:dc:
                    ac:19:77:be:88:e5:73:a5:83:5e:be:3a:f9:75:01:
                    b1:48:0d:18:e8:48:2a:42:66:b3:6c:eb:f9:8e:b0:
                    35:7b:39:06:f5:7f:67:bf:11:04:86:00:28:fa:9c:
                    6b:20:94:6a:c6:c1:4b:d1:cf:a4:9c:96:4f:4d:41:
                    7d:6b:23:b2:e7:a1:a2:03:f8:b2:1a:91:a4:3f:08:
                    3f:fa:a9:99:c6:68:53:36:af:24:c8:85:e6:78:b8:
                    0c:43:7b:c1:2b:cf:ad:a2:ae:08:b9:4d:21:22:a7:
                    bc:9f:71:3e:d7:ed:46:71:f5:3e:c5:3b:50:76:d3:
                    87:cc:01:29:b6:34:78:a4:dd:88:2c:17:7e:0f:07:
                    bf:ba:af:49:3c:87:ce:d1:f2:94:1f:14:7a:ef:d8:
                    2f:18:a4:a8:b0:54:75:2f:0d:bf:6b:f2:3c:47:6c:
                    7a:c5:53:85:3d:97:50:35:16:f1:a5:e4:11:8c:27:
                    58:8d:d5:b3:f6:94:f9:7b:05:5a:c5:72:2e:2a:a8:
                    fd:c5:6a:a9:b1:d5:6a:45:e8:ac:2c:65:40:67:ea:
                    5a:63:a7:43:da:7d:7f:83:2e:c5:e5:32:fc:17:82:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:12:A0:64:CB:7D:EA:45:53:B3:75:53:27:F7:BF:10:2C:70:05:5A
            X509v3 Authority Key Identifier:
                keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:e3:37:b3:97:c1:b3:44:8b:e6:7a:5f:33:28:2e:f3:c2:
         7a:a6:80:a0:aa:c8:b9:05:49:d2:8f:74:98:0a:ef:f7:fb:7d:
         37:27:ef:b5:a7:ea:56:5a:6d:61:82:d2:dc:4b:8f:21:88:86:
         42:3b:b3:9d:6a:51:08:44:b5:e2:bf:2e:2d:06:00:c9:63:b6:
         e3:7e:76:a0:3d:bf:d4:e5:f0:f9:a2:31:0e:24:64:3b:72:16:
         61:44:5e:73:a2:42:c1:12:b2:2d:3f:01:20:73:8a:cc:e2:89:
         c5:9e:b0:74:7f:f4:f5:d0:9c:23:7a:24:36:6b:a5:33:af:92:
         a1:1d:6a:86:b3:38:a9:d5:7a:11:c3:6c:1c:92:c7:73:48:01:
         5f:f9:ad:68:5c:0b:10:fe:75:f6:1a:cc:51:9b:e0:e7:c2:c2:
         2e:e8:5e:2c:de:15:28:bb:76:61:01:a1:54:82:5e:e2:1c:7b:
         16:f2:6c:ea:c5:96:22:f9:b7:15:da:16:41:2e:bd:91:6c:2d:
         40:73:ec:fd:73:e2:7d:c2:4e:9f:73:ec:87:b7:35:e7:ce:d8:
         6e:03:fc:61:71:b5:8d:7e:1c:27:ef:6a:98:9f:fc:57:8b:26:
         42:5f:44:3a:5b:c0:a3:b2:6f:12:7d:67:e8:b3:9b:3d:f2:75:
         bb:6f:dc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:08 2025 by rpki-client