Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File:                     VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier:          hybw3C/rPzv4cTN+ffyJ9NNMOmLg3fmTR2t/I3RaSMI=
Subject key identifier:   E6:54:87:96:CC:18:82:77:3A:16:3B:3F:15:8F:0A:C6:87:21:E7:BA
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer:       /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial:       0198756279228C617477DD91E04154AD085A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number:          1652
Signing time:             Mon 04 Aug 2025 14:00:44 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:44 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:44 +0000
Files and hashes:         1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
                          2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
                          3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: Xelwh4WyRA2WVx7Q+IA2UwFHFuZtw3pt8rptxlqCqsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:79:22:8c:61:74:77:dd:91:e0:41:54:ad:08:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
        Validity
            Not Before: Aug  4 14:00:44 2025 GMT
            Not After : Aug  5 14:00:44 2025 GMT
        Subject: CN=e6548796cc1882773a163b3f158f0ac68721e7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:e8:bc:be:bc:1f:b7:23:98:0c:d2:c3:27:
                    56:19:6d:2a:a0:33:d1:f2:95:f4:1f:f3:a4:8a:9d:
                    88:92:6c:1b:02:e5:1b:14:e8:2e:c4:71:1b:ba:70:
                    dd:21:1d:15:61:e3:2e:57:64:a5:7e:f2:49:dc:d6:
                    85:76:84:04:1a:7e:ac:92:26:f2:b3:60:84:ea:4b:
                    74:85:ab:5d:45:20:da:54:ae:aa:a2:29:bd:0e:2e:
                    25:a2:f8:3f:9c:eb:a8:29:24:79:a5:c4:a2:04:c1:
                    44:7b:6e:9c:f9:c4:b3:fa:84:10:e2:da:66:0a:ef:
                    b7:e9:e3:9b:73:02:d4:c8:80:a9:8b:aa:1e:96:05:
                    f0:1c:ad:56:bc:4c:a2:0f:d5:19:42:41:ff:3f:9a:
                    7a:84:2c:bc:11:ac:9c:80:ba:9a:38:c4:4f:ad:8d:
                    d2:fd:c1:18:0d:86:b2:f5:d1:37:b4:d0:79:14:2d:
                    cf:31:0b:10:e5:5c:79:0c:5f:01:0e:3a:65:f6:8b:
                    eb:84:7c:30:4e:52:56:5a:79:6f:8c:ad:d7:07:47:
                    ac:b3:c3:4b:e7:f2:6f:2f:79:fc:0b:44:0c:e5:a0:
                    4e:36:6e:b6:00:30:7d:cd:9b:c9:21:67:a8:79:d7:
                    e8:3f:e6:41:8d:d1:bd:e7:89:11:b1:e9:8f:fa:fb:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:87:96:CC:18:82:77:3A:16:3B:3F:15:8F:0A:C6:87:21:E7:BA
            X509v3 Authority Key Identifier:
                keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:8f:1b:ec:a3:22:b4:ed:de:8e:69:2c:a3:37:22:8d:c1:
         af:a6:c3:cd:a6:27:df:4b:ce:0c:31:28:78:79:ab:22:11:0e:
         93:0b:82:1c:a2:f4:58:e7:a8:37:ab:5b:c5:2a:8c:20:c4:2f:
         b1:b2:8f:46:e2:63:3c:cf:b2:16:c5:85:a1:cc:ac:33:a8:5b:
         33:99:c6:ec:6a:bd:40:ff:3e:d7:5b:ea:78:e8:ca:53:70:49:
         ef:82:21:18:9b:95:f3:3a:e6:c8:13:c6:5e:b9:b5:04:5e:b6:
         0b:04:2b:7d:fa:cf:e4:49:cf:2f:5e:c7:2b:80:be:27:4f:7d:
         e1:01:65:9b:35:f8:d4:62:03:21:e8:e6:94:68:57:19:35:3e:
         05:ee:0f:10:4b:82:64:ae:a6:24:f3:4b:08:ef:21:df:ad:17:
         7c:ee:2e:d1:29:ec:06:39:7a:17:ba:a9:a9:5a:ac:4e:9a:b8:
         bb:5b:34:a8:2d:3a:8a:91:37:d8:4f:a7:88:29:08:62:35:59:
         7f:4b:e2:dd:08:e0:3a:48:96:9e:cd:c4:a1:ed:80:32:13:4c:
         3f:c6:d6:a6:b8:fc:c9:71:60:05:a4:84:6a:7c:c5:db:99:6b:
         f2:15:71:ea:85:4f:d7:5b:59:de:ab:3b:90:ab:e9:cc:d6:4a:
         95:d5:4c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:28 2025 by rpki-client