Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File:                     VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier:          9J0PIzGgFtZAEP5Jx9lHcjYuXqdDJVcGFN30OZY/6rw=
Subject key identifier:   67:29:C2:B7:93:61:D1:7E:FB:6C:F3:81:1A:42:E7:B7:F1:7C:DE:C8
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer:       /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial:       0198745056254839B032BCC5E78F2D88CCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number:          05F5
Signing time:             Mon 04 Aug 2025 09:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:18 +0000
Files and hashes:         1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=)
                          2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: XUTmfnwTco43b+7wZ9u6fUcIIAuovme5Nz/AVrXY6ZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:56:25:48:39:b0:32:bc:c5:e7:8f:2d:88:cc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
        Validity
            Not Before: Aug  4 09:01:18 2025 GMT
            Not After : Aug  5 09:01:18 2025 GMT
        Subject: CN=6729c2b79361d17efb6cf3811a42e7b7f17cdec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:a3:26:a9:44:86:1e:ac:0d:6f:9d:b1:66:
                    53:c5:a2:d3:2d:65:75:24:2a:66:b5:5e:41:dd:f2:
                    53:67:7b:b1:ae:78:1d:27:83:40:41:60:83:9c:1e:
                    3d:b8:ca:cd:2b:b0:2b:53:8e:b6:0a:3e:d4:81:66:
                    1a:ae:b3:98:87:59:24:c9:8b:0f:e6:d2:4d:55:38:
                    0b:38:c0:99:e6:6d:ff:2b:28:51:15:1a:fd:89:79:
                    7b:cb:e7:1d:f9:02:c9:36:1c:98:89:b4:ef:da:b2:
                    63:5d:f3:18:1c:f7:79:7c:47:64:08:d4:4c:b2:43:
                    92:54:a1:7f:93:86:df:74:e3:62:c5:ed:8b:b2:e9:
                    f4:b9:d9:eb:f8:f7:77:10:ce:a6:bb:c6:69:e6:d4:
                    13:76:3a:56:59:77:de:23:33:98:5d:c0:6d:91:72:
                    ce:af:2d:bd:1e:54:10:1b:d5:bd:fd:42:a2:08:15:
                    4e:41:17:fc:04:0a:1f:38:ba:42:59:7b:27:c4:13:
                    93:e9:56:ab:42:cf:b1:8d:85:30:d1:91:ae:25:ac:
                    a3:7b:54:d5:c3:f3:77:16:dd:67:6e:b9:a6:ff:31:
                    c1:83:f4:43:ca:3b:1e:16:c1:41:bd:b3:58:6b:46:
                    8a:32:9d:1a:e7:e6:1c:83:79:f0:91:5e:06:99:c9:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:29:C2:B7:93:61:D1:7E:FB:6C:F3:81:1A:42:E7:B7:F1:7C:DE:C8
            X509v3 Authority Key Identifier:
                keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:87:26:0b:89:c1:61:9f:55:a0:27:81:dd:04:51:4c:4f:e7:
         be:b9:10:41:d8:4d:26:ce:73:e3:f6:a1:b6:be:da:78:fc:a7:
         3b:63:a9:a1:6a:1a:fb:ac:45:16:7f:e1:ac:5d:4c:b0:e2:9b:
         37:9c:b5:e7:19:5e:b6:f1:29:d1:15:fe:67:4d:dc:10:2b:90:
         47:a9:90:d1:dd:40:b6:19:a6:4f:67:dc:a7:2f:3f:7f:d9:73:
         7e:f2:09:7b:dc:3a:25:ff:e1:72:27:84:dc:00:56:f8:85:5c:
         20:50:55:0d:7b:e5:cc:be:fc:98:f7:f4:01:3d:c9:5a:91:19:
         7d:55:ab:44:c5:e6:b0:3a:aa:61:4b:98:24:06:f4:d7:7f:4e:
         ab:48:73:22:c9:b8:2f:6d:91:26:9d:8f:1f:52:a8:75:cd:f4:
         32:51:74:eb:6b:3f:ea:e4:b6:29:2f:23:21:52:1e:ee:8e:58:
         6b:9e:6a:82:20:cc:fe:b5:74:fe:78:ff:3a:cc:90:e6:e5:e7:
         66:72:6e:98:9f:be:ec:3a:ad:f8:38:d7:3a:b1:42:11:d6:58:
         42:aa:68:44:db:4c:7d:3c:c5:b9:37:aa:15:5f:08:e2:35:24:
         3f:d4:bd:3f:44:cd:db:65:b9:56:35:7d:c6:61:8c:56:10:04:
         a2:54:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:05 2025 by rpki-client