Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          egyuMumwnMqMFuoNeCBhcQSWBYii48xDMSBkIhHinG8=
Subject key identifier:   DF:A9:6D:28:2E:3A:CC:BD:CD:8D:53:59:E4:46:A7:57:B7:8D:B3:3C
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       019872CF2BEC60E307781A5E4DAB5147061F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          03DC
Signing time:             Mon 04 Aug 2025 02:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:36 +0000
Files and hashes:         1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: CE8FUZwNkAuwcji+Gu1//0SiPZ+y81373TW6NYq5B2g=)
                          2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
                          3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:2b:ec:60:e3:07:78:1a:5e:4d:ab:51:47:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Aug  4 02:00:36 2025 GMT
            Not After : Aug  5 02:00:36 2025 GMT
        Subject: CN=dfa96d282e3accbdcd8d5359e446a757b78db33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:bc:77:7c:a8:df:cc:b3:09:53:23:2a:b9:
                    d4:61:89:58:20:2f:fb:00:df:67:a0:39:c3:50:a4:
                    6f:af:f1:1c:01:31:da:2e:c7:00:c2:9f:7d:6b:da:
                    a4:c1:f7:ff:32:bd:43:1c:fa:18:54:6e:b6:4f:aa:
                    c8:91:b2:7c:f6:73:ea:bc:bf:6d:38:94:15:df:c5:
                    d3:bb:7c:07:3d:09:cd:c4:c4:e2:64:b9:ae:86:b6:
                    2d:73:14:8e:54:51:7f:6b:19:71:aa:76:7c:3b:40:
                    77:b9:63:dd:09:82:0d:77:61:d0:58:5e:4d:30:ff:
                    34:6c:7e:b9:03:1c:ca:43:99:7b:fa:15:04:b3:69:
                    63:8b:86:00:1b:14:a2:92:83:c4:ae:56:1a:97:bc:
                    7f:fd:99:8c:0f:81:b7:e1:4f:c7:e8:39:eb:80:b7:
                    50:cc:e4:33:aa:1c:af:4d:97:61:0c:92:ce:ba:65:
                    9d:f2:fe:92:c4:07:5f:82:7e:37:e1:de:1d:71:d4:
                    a6:af:d9:51:d0:90:2a:7d:e7:41:c4:ee:59:0a:7b:
                    ff:cf:3d:c0:5b:fc:25:15:2c:b0:df:9f:b0:9c:60:
                    b5:c9:98:e5:cf:e7:0e:a5:40:1e:ed:5e:cd:45:eb:
                    db:42:88:dd:f8:03:db:17:4f:35:ea:30:6d:1a:cc:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A9:6D:28:2E:3A:CC:BD:CD:8D:53:59:E4:46:A7:57:B7:8D:B3:3C
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f2:a0:e4:d4:ed:3d:07:7f:77:09:16:8b:c4:63:86:04:4e:
         88:30:12:47:21:25:7e:88:4f:27:fd:83:5f:1c:7a:66:f5:ad:
         40:2d:9b:2b:23:62:83:f0:db:3f:1e:1f:e7:6f:b9:11:26:1e:
         4c:68:ee:67:e4:51:ad:a8:41:68:28:d8:1d:23:ff:28:6b:c5:
         ab:b5:0a:5f:05:0d:05:42:29:ef:1a:a1:4b:ab:0d:fa:af:34:
         5d:ed:a2:fc:51:59:45:c0:13:32:d7:eb:4e:bb:31:41:3e:32:
         a9:30:11:c4:f4:92:d1:d0:df:74:fb:10:5d:1d:70:1f:1b:d8:
         39:73:52:3e:a5:6f:32:34:cd:ff:cc:55:5c:f7:30:ed:fe:28:
         e0:75:1b:ca:ac:be:91:b8:2f:c1:a6:11:9f:e2:ca:b1:4d:61:
         5b:20:1a:1f:bb:92:c4:39:20:ac:b3:94:e1:19:e8:f9:ae:c9:
         96:aa:08:94:92:7a:ce:cc:06:82:da:2a:e4:e5:d2:11:0c:36:
         af:77:64:f2:2b:05:49:44:73:a5:cd:ae:08:e4:89:dc:2d:95:
         e7:ee:c3:77:b7:0c:45:6e:98:7e:b4:01:98:ee:5a:85:85:8a:
         b8:f1:07:56:ab:7b:3e:3b:14:ce:d0:29:6f:26:9b:97:64:95:
         9e:0c:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:18 2025 by rpki-client