Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File:                     VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier:          7+dBohgQlQAGlenA5rvJpjCCIP+Zd536BGE7OuxVJeU=
Subject key identifier:   E8:D0:FB:23:A3:D7:0E:25:3B:96:A9:55:4C:4D:9A:E0:C9:62:51:87
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019885B12DBCA656CCCDED4C32A5F5D54439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number:          011A
Signing time:             Thu 07 Aug 2025 18:00:37 +0000
Manifest this update:     Thu 07 Aug 2025 18:00:37 +0000
Manifest next update:     Fri 08 Aug 2025 18:00:37 +0000
Files and hashes:         1: EslCT3gxkxtf5DQ7QkwYmLYeFlo.roa (hash: Uhm0SZdyDhhQLcGTvxZ7EAQVgtjflrvk9JNzMwkUJ7I=)
                          2: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: 7R55mTYoP/onNWK/yVLBB55iqf14B2sqTU19uczQRHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:b1:2d:bc:a6:56:cc:cd:ed:4c:32:a5:f5:d5:44:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: Aug  7 18:00:37 2025 GMT
            Not After : Aug  8 18:00:37 2025 GMT
        Subject: CN=e8d0fb23a3d70e253b96a9554c4d9ae0c9625187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:52:a3:cc:04:5c:c0:07:f7:40:b8:53:cd:
                    a1:5f:5e:d9:fb:7a:28:35:9d:01:38:69:5f:be:57:
                    84:0f:5c:01:e9:ea:82:3c:7b:25:ca:c7:89:69:68:
                    00:6a:e0:e6:73:fa:d4:6d:c8:a1:f2:46:74:1e:2b:
                    01:54:e5:91:c7:90:af:94:e4:d5:5f:df:30:6c:6b:
                    4b:ab:b3:b6:4d:7a:7e:ff:f2:51:47:95:eb:92:c3:
                    e4:f2:6d:fe:e0:ca:b1:cf:2e:09:54:22:64:98:d1:
                    66:ea:7a:4b:dd:5d:28:d5:30:a4:54:98:2a:31:2b:
                    14:06:83:bd:6f:ab:23:b7:a2:fd:82:f4:65:c6:73:
                    23:a4:66:6e:ff:a1:b8:a8:fc:15:40:83:78:18:a7:
                    94:6e:c1:7c:12:7e:73:37:c4:dc:e6:8f:7e:ae:d7:
                    f4:a3:a8:e7:23:6f:cf:11:83:61:10:fc:16:55:dc:
                    f4:17:4f:99:f2:14:a2:52:ab:d5:af:08:53:10:a8:
                    42:82:c4:28:2b:26:ff:69:aa:11:24:e6:76:2c:bd:
                    bb:19:e5:9d:23:59:11:76:25:61:2f:c6:10:2c:a3:
                    5c:91:66:aa:9c:93:4b:27:29:da:72:64:1e:06:db:
                    b2:b9:b2:7e:09:d4:6c:89:ca:79:e0:a7:62:57:6f:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D0:FB:23:A3:D7:0E:25:3B:96:A9:55:4C:4D:9A:E0:C9:62:51:87
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:52:8e:2e:41:6d:31:d8:ac:76:9e:c4:35:60:d0:09:f7:1d:
         b1:89:08:ce:c1:94:4a:ab:37:31:70:83:4a:79:c4:48:ab:af:
         50:21:4c:4e:7f:93:f2:89:63:3c:ee:ec:de:96:01:d9:12:9e:
         cf:80:af:aa:5a:f2:ad:00:61:09:56:73:9f:75:cb:65:ac:04:
         a5:61:ef:49:e7:f7:93:67:64:d9:dc:fb:2d:33:45:62:45:fe:
         90:93:f1:12:5d:fe:47:a5:9c:a8:5d:e3:97:31:46:6b:e1:e2:
         84:db:f8:74:49:6d:70:a2:72:14:89:98:80:52:6c:56:cf:f2:
         6a:73:2f:db:e9:9b:46:e4:9b:72:aa:20:09:ee:b3:7f:aa:5a:
         0a:bc:01:db:e2:5f:08:fc:90:e9:cc:9a:99:88:85:a9:c5:e1:
         e3:11:17:ee:e3:ab:ed:ed:3f:ab:cc:94:11:1e:24:04:86:e8:
         5f:bf:c8:96:c0:e2:ee:10:0b:a8:19:a9:0e:88:64:21:e8:3a:
         ae:e6:51:5b:72:0d:7a:de:5f:1c:b0:df:c9:95:3d:c6:b9:3a:
         d2:c6:2e:d3:9f:92:0d:d9:f9:d3:54:0d:26:c4:94:1f:29:4f:
         74:c5:bc:a8:25:da:58:1f:1c:17:60:f0:3f:b4:6f:b4:8f:9c:
         5b:6e:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:12 2025 by rpki-client