Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
File:                     v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json)
Hash identifier:          ApQ2Gx6QxrOoieId3Ky4A1awtOHxRwuM29BKnH2mwmM=
Subject key identifier:   AD:6D:4F:64:51:D3:E4:A5:AA:63:00:62:E1:F4:9B:5D:9A:44:16:DE
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Certificate issuer:       /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial:       0198752BBBCA17B9DDA3C58F46A96A1D344C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
Manifest number:          12B5
Signing time:             Mon 04 Aug 2025 13:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:56 +0000
Files and hashes:         1: Li-Y8dn1F69FZoMGQvQz_fZ7l4Y.roa (hash: caOJpFofpginvCZ1ci6afUcY092BORN7MXA50NlfY8Y=)
                          2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: tItEEwZdB8LjeX0Rpks89h2FTb899bVVfSm4b7gHsfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:bb:ca:17:b9:dd:a3:c5:8f:46:a9:6a:1d:34:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
        Validity
            Not Before: Aug  4 13:00:56 2025 GMT
            Not After : Aug  5 13:00:56 2025 GMT
        Subject: CN=ad6d4f6451d3e4a5aa630062e1f49b5d9a4416de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d4:34:9f:b6:27:21:f2:92:ca:4d:5e:16:52:
                    3e:84:d7:86:17:03:3a:19:f2:10:9c:8f:f0:58:ff:
                    2f:d2:fe:a3:5e:38:f4:ac:35:71:73:06:8e:5d:5b:
                    bf:24:8f:1f:d9:89:42:ff:05:e3:cc:60:c4:8b:f8:
                    5e:80:64:9f:88:81:0c:d9:38:11:c0:58:b6:e4:12:
                    5c:c4:fb:8a:e8:87:24:63:95:d1:1d:29:d1:69:29:
                    b9:db:5e:a8:53:4a:f0:a5:d2:d4:5f:a5:cb:94:da:
                    e0:29:30:5f:a5:a5:7e:e9:29:a2:e4:d3:af:bd:48:
                    9f:38:67:26:94:f5:69:60:dc:7d:a4:47:be:88:2b:
                    1f:0c:9d:f8:cf:a0:34:ee:a6:57:6a:5c:e0:8f:21:
                    45:e7:cb:a3:ed:dc:32:e6:90:88:f1:76:c6:45:65:
                    98:58:44:d2:fe:cf:a7:a4:d0:c1:25:97:17:44:26:
                    73:38:ab:c8:92:58:0f:01:83:27:a7:58:41:24:1d:
                    6d:0c:48:46:87:89:ef:fb:42:7b:da:61:a6:83:36:
                    96:b5:96:e1:ae:c1:d3:64:2b:81:3b:b6:c5:df:19:
                    14:10:99:70:cc:b5:87:fd:aa:da:37:b5:65:be:d8:
                    cd:89:8d:d0:db:ea:7a:f7:a9:dc:06:be:96:9a:d5:
                    c5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:4F:64:51:D3:E4:A5:AA:63:00:62:E1:F4:9B:5D:9A:44:16:DE
            X509v3 Authority Key Identifier:
                keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f3:cb:80:52:c2:2c:24:62:c2:34:22:18:78:25:f4:06:2e:
         85:87:a0:e3:b0:d1:2e:82:1a:67:19:65:b7:b3:bb:62:51:74:
         ce:9d:f6:23:f3:7b:36:8a:76:ad:7a:a2:57:e4:c2:8d:91:1d:
         6e:78:a8:fc:08:b7:92:9c:a8:aa:f9:ab:28:28:4e:0b:d4:ba:
         5c:c6:fc:42:5e:f8:33:a1:b1:c2:c0:5a:59:9a:ad:c5:ce:63:
         4e:f6:e7:dd:4d:12:0d:23:4e:c9:a5:a1:cb:a8:a3:f0:da:2c:
         e4:1c:4b:7a:99:aa:05:5b:02:f9:d9:23:7d:96:55:07:6d:a0:
         d3:7a:f0:95:bf:f6:96:3e:e5:d6:05:7c:cd:01:1c:f8:2a:b0:
         ef:81:d6:4e:c2:b1:25:ba:65:68:ea:98:14:ce:02:6d:f5:d5:
         ca:da:6a:f7:43:17:5f:ea:63:10:ba:1c:ff:b8:0a:6a:9b:44:
         33:64:9a:ec:e7:ff:3d:ce:8e:b2:ed:14:2d:d4:b2:3c:46:79:
         0e:73:82:a1:a4:87:43:b1:6f:5c:ea:f9:22:d1:24:a7:b5:fe:
         3c:59:b8:97:de:b3:d4:3b:fb:82:1e:43:b0:d9:49:83:16:c4:
         eb:db:d3:01:f2:6f:56:d1:d9:36:1a:e1:90:fc:68:09:b4:53:
         a5:62:03:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:16:45 2025 by rpki-client