Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
File:                     VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json)
Hash identifier:          MOFEDK3YrpwJbZXw8XUL/nptxX+mK2L/T+OcO5J3P7A=
Subject key identifier:   04:C3:62:73:BD:F0:73:4D:0C:48:02:92:46:38:AB:CE:7F:D9:0B:24
Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07
Certificate issuer:       /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
Certificate serial:       01987D1C347DD9B34E82934B5FBD88992E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
Manifest number:          0119
Signing time:             Wed 06 Aug 2025 02:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 02:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 02:00:57 +0000
Files and hashes:         1: Bvl-Ue7SkDahQi1EYqyGw7UPWAQ.roa (hash: 7s/5EydJ0RA7GfaLPuDbrwS3RicCjtZz+jUH77HvUOc=)
                          2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: WhUKuUSlFx+GmTnlmzLqVb3OSc2irKAjXfgpErWTMcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:1c:34:7d:d9:b3:4e:82:93:4b:5f:bd:88:99:2e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707
        Validity
            Not Before: Aug  6 02:00:57 2025 GMT
            Not After : Aug  7 02:00:57 2025 GMT
        Subject: CN=04c36273bdf0734d0c4802924638abce7fd90b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:67:f7:67:67:ab:4f:ea:20:c4:2a:53:a4:
                    b8:76:35:d2:8f:55:ed:bd:70:a0:bd:8f:e8:fe:2d:
                    7d:35:4c:ba:ea:24:b3:6a:e8:15:84:e1:73:b6:ef:
                    52:fe:0a:fd:c2:58:8b:d0:4a:a7:43:8a:a0:05:b0:
                    ff:b1:ca:87:62:4b:4c:5d:0e:f5:06:5d:67:ff:90:
                    c6:07:f0:8e:5b:0d:97:3e:36:b3:db:93:28:2d:de:
                    d4:05:31:eb:b6:07:73:1a:54:bb:07:72:49:fb:d4:
                    a9:8c:38:d6:38:96:c7:0d:f0:f1:d6:a1:d1:00:3d:
                    c6:94:ab:a9:74:15:de:ee:a9:24:4b:0b:05:83:d4:
                    5a:b4:39:d2:bd:10:e0:00:82:af:51:1c:ea:b0:ed:
                    eb:80:86:99:49:28:1b:20:19:f9:76:3f:30:34:8a:
                    79:c7:15:1b:17:5a:5d:6d:20:58:71:62:f0:fa:1a:
                    51:65:a2:ff:ea:2c:d4:41:4a:5b:2d:b7:32:92:5d:
                    14:36:ad:4e:12:e2:83:31:fe:cc:5f:55:88:2f:a3:
                    cb:17:d3:32:8e:c3:b7:63:e9:19:c4:58:0b:8a:7f:
                    5b:f2:2d:de:06:74:f8:01:ef:f0:b9:29:ae:06:5a:
                    99:b1:8f:0c:b2:b1:29:dd:06:f9:3e:ea:81:b0:42:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C3:62:73:BD:F0:73:4D:0C:48:02:92:46:38:AB:CE:7F:D9:0B:24
            X509v3 Authority Key Identifier:
                keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:42:c0:cc:d3:8d:18:08:fe:ce:af:75:93:ba:47:ee:ed:07:
         27:01:45:9a:2c:63:d1:12:b5:22:3b:5d:cb:d3:47:7c:77:86:
         d7:35:ef:3b:e1:fa:c2:d7:92:28:70:e0:a1:63:a7:0a:ec:86:
         c7:d8:7e:5e:c4:aa:87:6b:26:26:f9:5f:f7:8e:ae:cc:dc:3f:
         68:d4:39:92:06:3d:4a:c3:2e:84:95:ba:26:b5:5d:5b:87:32:
         ed:20:73:8f:7d:6f:86:ff:92:2c:9d:24:18:06:cb:94:06:fd:
         9c:be:12:22:75:11:2b:92:21:6a:8b:b9:d9:9e:ee:8b:b6:11:
         3f:dd:99:6c:d9:98:21:01:ed:a8:e7:f4:f6:9e:87:3d:e1:84:
         c4:6b:56:3b:90:f3:75:60:89:50:d9:01:ba:28:b1:df:54:ec:
         2a:2d:54:7c:0d:b1:b7:5b:9f:60:78:dd:29:10:d8:3d:c7:60:
         b7:f8:c7:36:71:67:b3:c4:3b:21:a9:c8:11:77:32:a3:1f:b8:
         fa:e9:ea:af:38:2a:49:dd:ee:23:a0:3e:5b:ff:a9:a6:53:b4:
         b3:1c:d3:82:b9:32:a3:a1:35:eb:48:ae:01:b1:5e:b0:8f:93:
         7e:38:9a:1c:98:10:a2:26:0c:0b:fb:0b:fd:e2:59:9b:b8:17:
         93:78:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:39 2025 by rpki-client