Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          BFv0iO/OFe7V42rC+E5X7DaVZHLRK046QZHkGgqBFHE=
Subject key identifier:   91:51:4D:31:AB:8F:2B:C6:71:37:01:5A:05:3F:FC:44:59:86:80:DC
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       0198D6982FCF6B2BB34D2A518AA3DFAF2C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          15DB
Signing time:             Sat 23 Aug 2025 11:02:34 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:34 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:34 +0000
Files and hashes:         1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: PFWKDhHtmlEYOrO2SD9NiFRvf8MVZbVDlWVcBLWCwVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2f:cf:6b:2b:b3:4d:2a:51:8a:a3:df:af:2c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Aug 23 11:02:34 2025 GMT
            Not After : Aug 24 11:02:34 2025 GMT
        Subject: CN=91514d31ab8f2bc67137015a053ffc44598680dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:1f:ef:af:49:01:e0:be:27:3c:a3:82:30:
                    e4:25:34:f5:3e:e6:fa:af:5e:8c:aa:0b:f6:e5:1c:
                    e8:6c:76:a0:e3:8c:56:26:03:8d:1b:7d:41:1b:78:
                    d2:02:9e:57:80:b4:4a:2b:7a:6b:55:12:2d:cb:4c:
                    98:a2:ca:ba:60:a5:3c:b0:ce:11:a5:f9:d9:50:6e:
                    29:cb:1a:5d:9c:8a:d1:4a:9b:64:bd:88:0e:4c:6f:
                    a5:70:54:6d:01:c5:46:bf:62:6c:d4:19:5a:be:45:
                    14:f6:ef:1b:13:28:f2:83:e4:b9:eb:31:79:e1:53:
                    f3:69:ae:b0:9f:b9:b9:77:b5:19:3f:14:36:99:e9:
                    2e:da:3a:f8:3d:c7:1a:54:d1:a5:fc:63:59:1c:b8:
                    09:77:ec:db:cc:8e:ed:7d:15:32:35:45:90:f2:82:
                    5b:4c:6b:1f:03:9e:d6:b1:62:41:77:9c:4d:3d:7f:
                    4f:13:ef:b4:83:3f:77:24:8f:3d:74:76:f6:96:6a:
                    4a:9a:7b:0a:d1:ce:15:3c:94:89:01:d2:a9:1f:c6:
                    7f:07:4c:f9:3e:74:09:09:39:8e:87:4f:be:45:21:
                    00:49:a0:c3:97:40:f0:f0:d4:e0:3a:44:34:49:ac:
                    00:4c:ef:af:4a:09:4a:8f:75:94:ab:37:e9:02:03:
                    06:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:51:4D:31:AB:8F:2B:C6:71:37:01:5A:05:3F:FC:44:59:86:80:DC
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a9:6f:f7:97:fd:dd:9d:5c:92:21:73:eb:6c:de:6f:89:08:
         5c:0b:2b:0c:03:0a:4b:93:3a:19:8d:1f:a0:f0:d6:f2:96:8b:
         18:49:e9:00:aa:3d:ec:45:51:9d:10:62:7c:63:f4:c1:34:c4:
         70:44:b7:3b:e8:4c:e2:44:e1:e8:89:1b:4c:6d:61:ae:fc:08:
         4d:df:6d:75:8c:b6:36:b7:e5:df:5f:98:06:95:14:33:ae:43:
         65:e6:f3:cc:0c:e4:df:a9:92:fb:31:cf:74:80:11:26:2b:8c:
         45:d3:9c:24:75:4b:ca:98:7f:33:12:38:81:b6:e2:d8:bf:40:
         9c:7e:58:85:6e:88:1a:f6:5c:65:36:07:0d:9c:15:62:59:bb:
         68:2e:98:af:b4:1b:fe:db:81:dc:40:35:27:b0:34:9b:f9:1f:
         3e:b2:79:b3:a7:d0:7b:eb:bc:56:51:cf:9e:34:fa:96:5c:2d:
         a7:d7:08:40:b3:68:58:3a:f6:d2:18:9c:c4:69:6e:17:24:2d:
         69:8f:f3:8d:0d:21:c5:58:b0:aa:74:c0:27:d0:eb:2c:8c:cb:
         c2:70:31:ba:c9:94:22:63:0d:49:68:7d:46:a3:78:6d:0e:5b:
         bf:74:ba:13:6b:40:aa:11:c0:5a:cd:49:64:ef:1b:4f:dd:2f:
         5a:7f:f3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:53 2025 by rpki-client