Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
File:                     vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft (raw, json)
Hash identifier:          4HWmQ4KtiXyT6AI5X8uiRPOF3VOxRYtCXnLvAiQPh4s=
Subject key identifier:   B8:6F:B0:4E:05:F9:D2:10:00:37:87:C4:C9:18:8B:B9:CF:37:94:28
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Certificate issuer:       /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial:       019874F4DF1B1F59261FF3EA5F48E7433E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
Manifest number:          0F85
Signing time:             Mon 04 Aug 2025 12:01:01 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:01 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:01 +0000
Files and hashes:         1: Mx70hNJU_cRg_ARtxD9n_NQR79Y.roa (hash: VUy0r7IF46Fy+JwVkckIUB1U8NWR6ieGTg4RW1Lrvrc=)
                          2: vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl (hash: XJfwIs2uoEgGUEMWLEs9vZeV0bG4dlhbNUMtyGapzy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f4:df:1b:1f:59:26:1f:f3:ea:5f:48:e7:43:3e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
        Validity
            Not Before: Aug  4 12:01:01 2025 GMT
            Not After : Aug  5 12:01:01 2025 GMT
        Subject: CN=b86fb04e05f9d210003787c4c9188bb9cf379428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:f8:54:4e:89:c9:5d:2c:62:21:fd:66:30:
                    83:f8:fe:0c:0f:36:3d:6b:f9:5e:e3:47:f9:27:95:
                    6c:5b:b2:67:ba:b8:ef:00:89:28:05:34:d2:d9:00:
                    f0:5c:aa:c6:fc:00:8e:3a:6b:bb:1c:21:22:4e:de:
                    33:5f:31:ba:ee:6d:0c:68:79:c4:26:94:b3:bf:70:
                    8d:5b:54:f0:17:cb:5e:3a:5c:d6:33:23:65:5a:08:
                    69:2a:39:7b:52:53:67:c9:6a:22:88:f0:04:6a:f5:
                    a4:cf:06:58:fb:99:81:01:91:28:77:e4:03:b9:d1:
                    74:68:47:54:04:c3:c4:31:6b:ba:a5:04:67:86:06:
                    05:8d:a8:98:5f:eb:d7:64:69:22:40:59:5c:25:9f:
                    c2:62:f1:0e:12:65:54:74:e1:8c:84:2a:f1:f3:9a:
                    e3:ab:f3:be:c3:a5:a6:9d:1c:88:21:a7:09:37:00:
                    e8:b5:0f:42:7d:45:01:ba:03:b0:5f:a4:c3:98:8b:
                    99:89:da:09:81:bb:61:3a:07:89:f3:cb:de:80:90:
                    e0:8f:71:a0:d7:25:ca:d6:df:3e:55:65:ea:4f:ab:
                    2b:c2:ac:ef:21:61:eb:da:5d:ef:83:b1:82:45:9c:
                    c2:4c:d2:1a:4c:60:81:b3:41:d6:e5:4b:74:2c:44:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:B0:4E:05:F9:D2:10:00:37:87:C4:C9:18:8B:B9:CF:37:94:28
            X509v3 Authority Key Identifier:
                keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a7:13:a2:1e:c7:78:f5:ac:bb:34:2e:c9:2f:17:37:b3:c4:
         21:dc:d2:28:bc:cb:46:f1:4b:c6:e5:2d:38:da:f3:65:6e:01:
         35:42:b2:eb:29:1e:f8:b5:c4:ae:6b:ab:47:d2:00:d5:da:3e:
         f4:a4:8c:1e:e1:ee:b4:1d:44:ff:53:62:df:56:ae:f9:e9:25:
         c5:7c:28:f5:29:9f:8b:76:18:e0:02:75:e8:8b:f5:af:1d:c3:
         a8:8a:83:b8:f0:9a:0b:aa:8f:e9:3d:c5:e3:d1:0b:0d:f3:34:
         23:00:07:48:82:c1:f7:b0:05:d5:a7:90:15:79:ab:4a:0f:9e:
         52:b1:3d:ce:eb:ac:93:f8:8e:0a:d7:40:e5:20:48:0e:d6:27:
         6e:ea:94:73:c7:0e:9a:3a:79:b5:81:a8:6d:b4:d4:81:db:e7:
         0b:7e:6d:15:d4:db:26:1c:a6:09:86:28:89:73:10:1b:f4:6b:
         d9:ca:58:ac:c3:ea:ab:f8:e4:c4:89:0a:43:e2:2d:16:f1:07:
         42:39:97:28:fd:3a:2a:ec:37:a8:c0:19:4d:ad:99:7f:c7:94:
         c4:38:ba:94:08:76:58:26:63:df:09:ef:88:fa:8a:e4:1c:2e:
         79:96:84:ef:39:45:20:73:66:d6:4e:1f:bb:b0:6c:33:6e:54:
         03:f7:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:54 2025 by rpki-client