Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
File:                     1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft (raw, json)
Hash identifier:          Q+l2cbJHYf56SE2iMuuj1dzFAfuaI6ayltsNzs+ocQc=
Subject key identifier:   38:D1:A8:55:34:D4:4E:05:66:92:15:08:A0:BF:41:0C:2F:56:E5:52
Authority key identifier: F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86
Certificate issuer:       /CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
Certificate serial:       019896A503F517D92F6C2D98E60B581623B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
Manifest number:          0603
Signing time:             Mon 11 Aug 2025 01:00:53 +0000
Manifest this update:     Mon 11 Aug 2025 01:00:53 +0000
Manifest next update:     Tue 12 Aug 2025 01:00:53 +0000
Files and hashes:         1: 0_5G3WRzshlLEZ0xV-9i-mzzvJU.roa (hash: lKrDP0bITSxhK9qROQpQt1df+rqNUNqNFLiSE61PZ7c=)
                          2: 1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl (hash: aMv+ApzJDQAknXKy33bY2FIGVYhwQFMAyuVqpi85Cac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:03:f5:17:d9:2f:6c:2d:98:e6:0b:58:16:23:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95ac4b2472748ceb27bf8c543e16db7bb369586
        Validity
            Not Before: Aug 11 01:00:53 2025 GMT
            Not After : Aug 12 01:00:53 2025 GMT
        Subject: CN=38d1a85534d44e0566921508a0bf410c2f56e552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:3b:ac:85:f1:1e:0a:12:26:d4:11:b9:30:
                    d6:c0:a6:82:54:cb:74:bd:d0:94:34:a7:7c:84:a5:
                    5c:f3:97:89:da:ca:f6:e3:b6:34:2f:bf:be:2e:ea:
                    f0:6e:64:a2:44:19:50:3d:73:4f:11:69:3a:f7:89:
                    4a:15:b2:80:cb:07:66:0b:5d:8c:47:d1:07:4f:c7:
                    6a:49:ed:09:8c:6b:fa:67:99:b1:5b:f8:38:5f:8d:
                    84:0c:a9:32:86:8a:5c:ec:42:47:cb:9d:08:87:ef:
                    34:74:e5:65:0b:40:03:6c:73:61:e9:64:80:42:c5:
                    ff:c2:b7:e4:05:8a:39:56:db:b1:b9:ab:e8:ad:43:
                    32:ad:5a:43:e9:1b:83:bd:65:0e:ef:05:49:0d:86:
                    ee:10:2a:5b:ab:86:c2:27:16:49:07:06:6f:35:66:
                    28:30:0c:fd:5b:28:ff:06:47:93:af:bc:97:7e:a3:
                    e2:0b:95:ec:c5:a8:21:8b:91:e4:65:af:f7:0d:2b:
                    47:be:c8:ee:6d:7e:e8:7a:97:b5:ae:c2:7f:7e:f0:
                    9d:ee:81:90:f6:db:47:39:ae:da:eb:e3:81:32:e9:
                    ab:94:9c:46:a7:c3:66:b8:0f:25:cd:a1:55:f0:12:
                    dc:22:00:6b:2c:58:ad:47:2f:c0:a1:fb:9d:9b:da:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D1:A8:55:34:D4:4E:05:66:92:15:08:A0:BF:41:0C:2F:56:E5:52
            X509v3 Authority Key Identifier:
                keyid:F9:5A:C4:B2:47:27:48:CE:B2:7B:F8:C5:43:E1:6D:B7:BB:36:95:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d0f5-7c16-400f-8e2e-52018b45fad1/1/1-VrEskcnSM6ye_jFQ-Ftt7s2lYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:37:d5:c5:5d:06:5d:ef:1c:40:a2:dd:39:c8:1c:71:42:
         02:a0:9e:50:38:57:0b:af:20:e2:ef:7b:0b:c9:5e:e4:c5:c4:
         3e:a0:1a:71:46:d3:61:ec:86:dd:b9:93:5c:1e:19:a7:a3:13:
         dc:1f:89:6d:5f:19:28:d6:e1:2d:ed:c6:b9:be:44:50:60:0e:
         2c:21:b2:87:e6:8d:55:89:06:b2:78:ac:74:0d:71:f3:d2:68:
         5c:e9:34:1a:27:11:16:46:72:15:2a:e8:4b:6b:0c:dd:20:e7:
         59:84:65:32:36:ea:80:6b:13:cf:ab:3d:73:74:aa:96:09:26:
         b9:c6:64:66:f0:00:97:76:8a:52:88:c5:c7:ec:03:9f:5d:9e:
         a1:98:c7:a7:d2:c4:1a:2b:8f:03:e0:9c:48:f0:0d:e7:29:06:
         13:48:04:96:86:89:b6:f9:b6:ea:f0:d9:36:01:00:76:5f:f0:
         81:94:9e:d0:7e:45:8a:ef:2e:39:55:94:12:0d:4c:2c:e8:0f:
         4e:f9:7d:89:cc:3c:a4:0a:84:a6:54:78:75:d0:7f:df:02:03:
         c8:0b:a6:66:92:8d:b9:5c:b1:f1:61:82:83:4a:a4:92:39:10:
         96:0a:d4:23:96:55:b3:2e:63:26:99:81:43:f5:94:fa:66:20:
         db:33:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:08:46 2025 by rpki-client