Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          4GqbgmhojMvE3ycZy8ZeJSfg/89FdoK9zS1pbHoVRmI=
Subject key identifier:   82:2D:4E:01:D1:2E:E5:3B:D1:73:D2:0B:D3:8C:FC:D8:E1:E6:F2:75
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       01987675D030AF8C6953DDBC8607FE28B416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 19:01:29 +0000
Manifest this update:     Mon 04 Aug 2025 19:01:29 +0000
Manifest next update:     Tue 05 Aug 2025 19:01:29 +0000
Files and hashes:         1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
                          2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
                          3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
                          4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
                          5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: nerXE+8u3ng3fP254R89UqKoQ9KM5udgH/jCLLNGcSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:75:d0:30:af:8c:69:53:dd:bc:86:07:fe:28:b4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Aug  4 19:01:29 2025 GMT
            Not After : Aug  5 19:01:29 2025 GMT
        Subject: CN=822d4e01d12ee53bd173d20bd38cfcd8e1e6f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:ea:70:b0:5a:07:1e:cf:81:58:f0:2c:8b:
                    35:fa:d0:ff:79:97:66:83:28:bf:29:1b:c8:a6:53:
                    26:1f:29:56:a2:51:ab:cc:7e:7b:73:64:d0:6d:20:
                    ff:3c:fd:57:2b:6f:ea:ae:c2:de:e1:56:67:fd:c9:
                    1f:5b:e8:63:b1:2b:2a:02:13:e5:9f:a8:5d:75:e6:
                    80:ea:f6:bf:18:12:f6:4e:b1:96:92:a8:80:ce:0a:
                    1d:35:e6:77:77:e3:68:18:0a:6d:4c:2e:12:67:e8:
                    ce:20:d9:b7:7c:7d:d9:df:da:2a:c4:2f:37:cc:c1:
                    f0:2c:f1:48:e4:0f:9d:f8:fb:db:72:05:46:40:25:
                    ea:07:4e:60:ae:57:08:ba:f4:e5:be:3e:ff:c8:ca:
                    96:09:bf:52:53:54:16:4f:c4:59:59:cb:4a:12:a4:
                    ec:f1:1c:ed:14:58:9a:84:58:1a:90:7a:60:99:bc:
                    84:13:d5:a0:9d:c5:c5:3d:37:ec:2b:07:e4:b1:d4:
                    38:a6:59:8e:64:d6:85:ae:4c:13:7e:2b:e6:3b:99:
                    1e:6f:0d:84:c0:a2:3a:88:b9:2a:99:3a:fb:5c:83:
                    59:05:e5:db:f2:d1:02:e1:df:34:dd:24:02:55:29:
                    02:18:1c:dc:93:0a:06:7f:af:2e:e0:bc:8f:fe:c3:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:4E:01:D1:2E:E5:3B:D1:73:D2:0B:D3:8C:FC:D8:E1:E6:F2:75
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:22:05:45:48:18:7b:8c:78:77:92:11:4e:33:0d:0c:eb:1f:
         ef:e2:d2:0d:71:52:a3:df:62:5a:1c:79:7b:74:f6:81:60:4e:
         98:5b:1e:cd:72:2d:df:ce:6f:fa:04:e3:0b:af:ad:f2:19:23:
         5a:c1:8a:47:2c:af:54:6e:e5:53:89:bf:fd:c3:ae:4a:45:ad:
         b1:30:c9:8f:90:42:d4:f9:b6:78:7f:5e:bd:78:5a:1a:c3:a8:
         e0:8e:16:57:01:19:c5:f9:dd:17:aa:4a:55:0f:6e:d6:d6:f5:
         4f:a2:de:a1:7c:04:2a:5b:73:d3:dd:04:c7:fc:37:34:6a:f7:
         ed:0d:cc:e7:2a:e6:e6:17:91:c3:fd:63:a2:6d:ce:b3:3e:1b:
         02:91:ca:ea:d6:cb:50:ad:ea:ae:9a:78:91:67:e2:76:ec:dc:
         88:c2:9f:47:bd:b0:7c:6e:62:d4:6e:13:81:5a:e1:81:6d:e9:
         e2:28:f2:c1:ff:d4:72:d6:3d:d7:bc:b0:22:2b:55:fd:36:d3:
         0f:cc:82:16:4f:2d:fd:d6:84:57:a3:1d:dc:03:c5:3d:09:76:
         02:67:00:84:92:e4:17:7f:72:47:d7:11:92:1c:48:fe:18:ce:
         58:ed:fd:fc:c4:3b:d3:ba:a6:56:f2:bb:66:b3:2f:5d:a1:68:
         d1:09:10:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:21 2025 by rpki-client