Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          iUUSbQa7MT1EqikrhhU90jho3R2m4G1/9HvkFag1Qjk=
Subject key identifier:   B4:14:B6:50:7D:0B:FB:8C:F9:3C:EC:2C:51:43:EE:92:D6:51:01:BF
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       0198824282975DC3CB3092AF7683CCD50DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          074F
Signing time:             Thu 07 Aug 2025 02:00:53 +0000
Manifest this update:     Thu 07 Aug 2025 02:00:53 +0000
Manifest next update:     Fri 08 Aug 2025 02:00:53 +0000
Files and hashes:         1: e4pYTgrST_OIh_0Qkxb1VUF6r3Y.roa (hash: CwIOS1Io6ZhDFcyydlZIo2WNdIO73K5UrPWTpvd7EH0=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: LNkDPGFEmGhxeopbfWEgT+hC9g6f07eerkKONbx/k/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:42:82:97:5d:c3:cb:30:92:af:76:83:cc:d5:0d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Aug  7 02:00:53 2025 GMT
            Not After : Aug  8 02:00:53 2025 GMT
        Subject: CN=b414b6507d0bfb8cf93cec2c5143ee92d65101bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:77:8e:47:0e:20:07:79:5b:f7:2f:65:d7:
                    6a:33:b7:50:7b:a1:99:4d:04:79:3f:2c:f4:35:61:
                    19:14:fc:9f:4b:48:04:c8:2f:22:7f:79:4b:d9:73:
                    d5:56:6e:21:a7:5c:f3:99:d3:73:fc:23:26:f3:1c:
                    7d:c5:52:3f:45:b0:a9:56:a4:12:d5:29:5c:aa:16:
                    33:4a:24:03:82:64:7e:c0:e4:f1:eb:a3:82:9d:e0:
                    82:ff:1d:f5:50:9d:bf:c4:c9:6b:b7:89:45:23:55:
                    b7:54:d4:0b:d1:8a:6e:ea:13:fb:77:2d:a4:8d:62:
                    15:8b:37:f3:e5:9f:39:ba:e4:d7:dc:cd:fa:db:3c:
                    32:b2:84:d4:f3:14:9d:61:3c:8f:f9:ea:a0:40:e5:
                    b7:10:fb:f3:da:8f:46:be:c4:59:1a:3f:a3:13:4d:
                    7d:ad:37:96:3a:3e:b2:3a:f4:3d:ac:25:e6:b9:6f:
                    4a:41:f2:01:1a:d3:5b:09:e2:0a:22:cb:3b:47:43:
                    a2:53:2f:81:08:95:0b:ee:4a:ee:58:7f:bc:9a:80:
                    e0:ae:a2:c9:7f:df:2a:46:af:6c:af:de:15:5a:ff:
                    ac:3e:1b:d4:47:2c:80:bd:02:18:00:1a:d1:15:d7:
                    d2:1c:15:35:7c:00:dc:11:ca:2d:e4:0f:62:5e:da:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:14:B6:50:7D:0B:FB:8C:F9:3C:EC:2C:51:43:EE:92:D6:51:01:BF
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:60:e0:3f:bf:98:13:63:90:8a:84:bd:ef:49:4a:c0:c7:1c:
         65:6f:4d:de:6e:a1:ba:70:3d:f1:3f:3b:4c:26:30:38:28:a0:
         5e:38:9e:94:d3:2c:1b:1a:83:25:de:97:84:85:c1:2b:50:71:
         cd:b8:c8:71:4f:3e:77:2a:66:aa:c5:8a:85:63:6b:a9:90:af:
         e1:4f:34:86:e4:db:6c:c5:fe:86:89:f1:5f:bb:db:cc:88:f9:
         b9:c2:e7:a8:24:3d:1b:bb:99:fe:c9:8f:07:bf:41:f3:21:e7:
         bf:a6:8f:7b:be:66:d2:b2:25:e2:ce:10:96:07:3f:fa:54:49:
         f9:35:54:dd:3a:2f:ce:0a:56:b6:4e:34:ca:bd:cb:ec:e3:a0:
         08:5d:1d:93:58:74:0d:1b:bf:5c:64:b7:95:06:03:b8:72:36:
         53:96:e0:0d:0f:a9:45:8c:4a:b1:a9:30:2f:6f:7e:1f:60:f8:
         ae:ec:d4:68:4c:63:81:30:77:a1:46:f3:21:ef:84:94:bf:0a:
         13:18:f0:b0:29:40:e2:22:ae:be:4d:f7:8a:43:af:cd:62:82:
         83:e4:ec:96:8d:df:0e:6e:57:c0:a4:f3:0c:dd:b9:22:62:b1:
         10:1d:da:31:7f:8f:1f:ed:19:70:0b:47:c0:02:57:42:32:51:
         02:f9:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:14 2025 by rpki-client