Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File:                     vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier:          x05//b9/O0DzidqbsPgbpNLoDM6XCDqFoomiGlJqr9A=
Subject key identifier:   96:21:8A:A0:41:AF:9C:C3:EB:54:CE:A4:4A:AA:08:FE:19:BC:57:E6
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer:       /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial:       019873E1EB77D68DCAB70980E3A6A6AAB387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 07:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:42 +0000
Files and hashes:         1: SyfvPrUk0EqUlUibCeR9AFkwGwg.roa (hash: zvu0Xkf7wJgRiFUAHEOyER7LyU5jW8xnRDY/dZI92fo=)
                          2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: Chc/YfvaPcc3Vk4ecFL08cHtA81zT5gxYvXziGzvDaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:eb:77:d6:8d:ca:b7:09:80:e3:a6:a6:aa:b3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
        Validity
            Not Before: Aug  4 07:00:42 2025 GMT
            Not After : Aug  5 07:00:42 2025 GMT
        Subject: CN=96218aa041af9cc3eb54cea44aaa08fe19bc57e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:16:12:0c:0b:a0:aa:1a:29:23:d1:85:f1:
                    87:92:24:bf:0b:f7:c0:e5:1a:a8:37:76:40:a7:ec:
                    24:87:b5:98:e6:0a:d4:be:31:3c:8e:18:35:57:52:
                    d2:a5:53:af:50:37:d9:77:fd:f2:83:bb:b0:1d:e7:
                    13:85:4f:35:83:2f:0a:1b:fc:5f:ca:eb:58:fe:50:
                    ec:ea:79:a0:9b:d0:48:d6:8f:c9:43:c3:72:35:eb:
                    65:09:09:8d:ef:37:5d:94:77:bb:ff:82:00:07:c5:
                    17:45:75:af:b0:7b:ac:c5:d8:4a:d9:d7:5b:dd:fc:
                    58:ba:ca:3b:03:c0:d3:2e:02:b8:39:23:01:8e:14:
                    cd:32:b9:52:c0:87:72:7f:47:49:8a:ca:26:86:3f:
                    d5:45:61:9d:b7:1d:10:6c:3b:9f:17:1e:42:e5:a0:
                    d1:d1:c8:8c:42:08:09:af:88:22:38:e1:b8:81:e4:
                    f5:09:97:54:8c:01:e1:96:e2:01:a7:36:57:f0:a4:
                    fd:44:07:7d:76:a1:1b:19:0e:20:c5:16:00:c0:b7:
                    fc:a2:46:cd:d2:49:54:98:c1:57:c8:74:28:69:9f:
                    ef:e8:2b:68:fd:4e:52:23:33:17:79:77:01:0f:4e:
                    7c:8f:fa:2e:4c:55:a6:13:be:f5:f4:88:ed:7d:14:
                    b8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:21:8A:A0:41:AF:9C:C3:EB:54:CE:A4:4A:AA:08:FE:19:BC:57:E6
            X509v3 Authority Key Identifier:
                keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:30:d1:9a:02:d7:17:af:c1:dc:7d:9f:8a:39:2d:8d:ae:ac:
         5e:46:99:ba:cb:49:4a:37:3e:c2:83:73:14:0a:d5:82:b4:92:
         02:72:28:2c:c4:fc:13:1e:6b:a0:a6:0d:52:b1:b7:5b:f4:cf:
         f7:e7:16:38:af:65:13:d9:23:1b:a4:b0:09:8a:cf:73:8e:c2:
         ac:c1:46:3e:27:08:72:0e:13:26:b0:1d:2f:f6:cd:55:33:3d:
         fb:9d:59:da:7d:15:c5:a7:ec:3d:da:cd:4e:fd:5e:e7:37:42:
         8a:ad:8e:5c:09:bc:88:de:71:1b:97:b2:f6:dc:91:99:40:ce:
         fe:01:99:09:fa:79:a1:3b:46:e9:5f:68:07:4e:f6:dd:58:35:
         1c:45:63:89:f5:7a:85:be:b0:52:6a:48:f2:ea:a2:bb:99:5e:
         7a:22:fa:5a:d1:0b:ec:1b:c3:f0:19:7c:a3:61:82:7a:57:25:
         33:fb:32:22:f2:0a:c7:23:68:88:3d:91:f0:0c:dd:c3:81:26:
         bb:56:d0:c9:6b:e4:8b:da:f6:b9:a4:0e:a7:ca:6b:4f:dc:94:
         db:06:bd:2c:98:54:4f:46:f8:ff:90:38:d5:fb:3f:6e:e9:ef:
         5c:d2:1c:04:f6:18:0a:3d:87:f9:f9:2c:df:8a:12:81:00:f9:
         bf:97:99:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:30 2025 by rpki-client