Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          VQ9YrUg87+1uJEfCuKyl4Pxe8c+tzzZ91dxaT9UBx2A=
Subject key identifier:   8A:F4:F9:BA:12:69:4B:45:84:92:39:B5:CD:F0:B2:06:21:97:C3:89
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       01987D1C7AEE542BE373FABA50FAF6D5E824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1638
Signing time:             Wed 06 Aug 2025 02:01:15 +0000
Manifest this update:     Wed 06 Aug 2025 02:01:15 +0000
Manifest next update:     Thu 07 Aug 2025 02:01:15 +0000
Files and hashes:         1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=)
                          2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=)
                          3: 45Jor4eNQ1LufITDaohtzFD1EOM.roa (hash: 3GOmX0kX/DK1ClM2C8qHkfD8iySt13Wq6d/nSBEYCzA=)
                          4: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=)
                          5: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=)
                          6: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=)
                          7: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=)
                          8: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=)
                          9: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=)
                          10: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=)
                          11: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=)
                          12: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: MNLLY+q0GYdDg4y7XhQkeJaNREeziVlPat/3Xczg0TE=)
                          13: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=)
                          14: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=)
                          15: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=)
                          16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:7a:ee:54:2b:e3:73:fa:ba:50:fa:f6:d5:e8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Aug  6 02:01:15 2025 GMT
            Not After : Aug  7 02:01:15 2025 GMT
        Subject: CN=8af4f9ba12694b45849239b5cdf0b2062197c389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:dd:d4:05:af:cb:d5:6e:83:93:6b:88:e9:
                    0f:3f:e2:d1:19:9d:fe:bf:6b:61:90:a1:69:d4:ca:
                    33:3b:88:2c:f4:fe:57:89:35:dd:54:ad:ff:92:6a:
                    12:08:82:3c:75:60:c5:d7:20:3d:63:fb:fb:01:48:
                    7c:a9:b5:3f:05:34:e0:6a:ee:87:6f:2d:ce:e0:b7:
                    d3:c3:b2:5b:d5:d6:24:64:db:7d:f7:05:84:8d:6a:
                    31:ee:a4:d5:53:33:65:54:76:95:54:80:37:b1:8e:
                    a2:ef:01:7c:ba:69:1e:46:97:a8:50:81:97:1c:bd:
                    42:db:13:33:da:70:bd:01:ea:37:5c:6e:e4:a7:35:
                    84:46:04:7b:6c:35:cb:41:43:24:16:6a:93:fb:ab:
                    59:c9:1f:b5:88:2a:f7:f7:e5:ee:c4:f8:a4:cd:3b:
                    96:29:03:60:e5:99:2a:fd:1a:ea:5c:db:a5:4f:1d:
                    73:39:d4:74:b3:51:f9:94:fb:62:9b:cd:25:28:50:
                    ed:63:97:fb:b6:b2:e5:f1:7b:ea:ae:c4:28:40:57:
                    55:83:3f:00:aa:72:9d:75:a6:0e:ab:97:de:42:cc:
                    05:98:6b:ca:52:02:9e:c6:f4:d3:96:33:38:05:d6:
                    bb:74:82:6c:77:21:3e:73:4e:e4:40:fa:a0:c1:27:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:F9:BA:12:69:4B:45:84:92:39:B5:CD:F0:B2:06:21:97:C3:89
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f9:61:a7:43:1f:1d:eb:11:1c:e5:13:95:95:4c:97:1a:53:
         53:55:1c:a4:3c:cb:d1:2b:69:1a:af:10:d6:12:8a:15:a4:77:
         f1:3b:16:6b:a3:55:b4:56:bf:e3:26:1a:59:86:a3:4a:fc:5a:
         12:ac:b2:aa:62:ef:f7:45:6b:ef:21:5c:30:26:b6:76:63:b2:
         e0:cb:cd:e8:64:1a:68:45:94:46:9a:7d:b0:c4:d7:c3:76:70:
         d8:dc:b5:6a:60:a8:ee:8a:8d:74:3b:df:c7:6b:42:60:ad:8f:
         28:81:93:58:bc:08:c9:d7:ef:c7:f1:8f:5f:10:99:67:82:0c:
         f4:06:fb:f1:9c:98:36:07:4d:67:0c:1a:18:1d:37:84:0c:50:
         a1:93:0b:e8:b8:01:5c:ef:ec:c3:ab:56:20:5c:cf:e6:35:dc:
         88:d8:09:a3:c8:83:79:1d:63:95:8a:04:09:51:89:9e:2b:78:
         ef:50:95:b7:8b:ca:78:05:70:94:cb:29:08:5f:2e:50:f7:41:
         e3:f9:01:e2:1a:92:5e:2b:1d:0c:9b:c4:b5:3e:81:a9:b4:76:
         56:78:67:8c:8e:d7:ae:bd:e5:7a:2c:4b:96:09:52:25:30:af:
         1e:3e:3c:d7:dd:7e:2c:b0:8b:93:11:e6:71:73:e2:ea:3a:f4:
         82:ed:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:17:06 2025 by rpki-client