Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          z+1IylivCCoTplSxWLZI3rKWXwMfF1VOv7GfxobXwGM=
Subject key identifier:   18:B4:FD:07:B9:B5:2F:9C:8B:28:2F:7A:90:08:E4:71:F7:9C:B9:48
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0198D4A828435A881B46E9B23A83241BEC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0C56
Signing time:             Sat 23 Aug 2025 02:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:46 +0000
Files and hashes:         1: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (hash: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=)
                          2: EpDBPVNlNeVkVgjR_m5x1NyX39k.roa (hash: xU4je7vw+hy54ZIE4xMAX4T+f8GKgqonphRIwXr+3Ro=)
                          3: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
                          4: IncQidH1EmOM3JDy5YVCBk0c4NE.roa (hash: nhq9/WaK4JTE9KAnd8mPqXQNZIF7TP9W57FIRXqjj1I=)
                          5: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
                          6: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
                          7: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: vrHTHJLaLGeod7fgZRzJ3l3/RUQXx4m11WMDX6hKtOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:28:43:5a:88:1b:46:e9:b2:3a:83:24:1b:ec:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Aug 23 02:00:46 2025 GMT
            Not After : Aug 24 02:00:46 2025 GMT
        Subject: CN=18b4fd07b9b52f9c8b282f7a9008e471f79cb948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:aa:68:60:55:67:57:ed:11:eb:79:8e:3f:
                    e3:1e:42:f9:41:7b:69:85:a1:40:3d:9c:85:4a:95:
                    4f:89:f1:f3:1d:ba:65:b7:bc:04:12:84:0f:be:32:
                    b1:b8:8f:79:6b:eb:e1:54:43:b7:a2:8d:82:46:3e:
                    c0:2d:7a:0e:1f:8b:72:62:28:40:4f:2b:89:3d:92:
                    23:45:fd:47:42:17:12:e3:51:82:e5:42:d1:70:9b:
                    8a:8c:f0:d6:3e:f4:ba:04:7d:73:50:9a:14:87:a0:
                    84:f0:31:a9:6e:63:a3:f3:5f:3a:23:c0:c7:78:79:
                    35:0e:4d:3e:05:70:55:d4:90:3d:f2:6c:97:c5:f5:
                    b1:a7:e5:8e:7b:05:01:b1:9c:26:03:43:61:bd:52:
                    7f:4e:39:e8:d1:c2:85:67:0d:b6:4c:80:34:03:66:
                    b1:11:23:b9:08:10:95:ce:7c:07:33:e3:cd:8e:74:
                    4e:85:09:2c:68:a7:3f:8a:39:f5:1f:e2:cf:56:b9:
                    81:cb:5f:d6:76:38:bc:2f:89:d1:a4:f6:ab:e4:1a:
                    69:d3:83:9d:19:db:2e:67:4c:41:0a:be:aa:b4:e7:
                    e6:29:9b:41:38:9d:21:33:91:e4:f4:81:ae:4c:74:
                    42:9b:c7:af:84:5c:06:e4:33:ce:ee:4b:dd:4a:ea:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B4:FD:07:B9:B5:2F:9C:8B:28:2F:7A:90:08:E4:71:F7:9C:B9:48
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:8c:0d:8e:3d:29:1c:4c:86:c7:f1:e8:9c:a8:73:c0:2e:
         9b:3f:be:46:ba:16:d1:e2:3f:fb:68:20:e5:65:01:12:6f:3f:
         32:c8:64:e7:8a:fe:92:9f:fc:0e:17:45:b4:16:5c:97:8f:06:
         58:fa:7a:29:94:8c:8a:af:8a:01:79:0f:43:1d:27:1c:e4:c5:
         3b:cc:af:4a:8f:89:8f:87:f5:e8:e8:c1:41:5e:e7:ba:d5:b3:
         6f:78:a8:12:35:7c:83:4b:8e:75:02:8e:52:23:50:a5:6b:83:
         03:88:77:78:14:19:b7:b0:c6:68:bd:e0:82:7c:bf:2e:b8:c0:
         71:40:aa:e9:d2:96:c7:f4:a7:70:c1:00:3c:b3:96:fe:1d:70:
         b7:a1:b6:f1:50:0f:3a:36:8d:4d:2e:e6:82:c0:8e:d5:be:3a:
         34:e2:fb:4d:e8:b2:ba:c8:df:9b:47:03:f1:7d:2f:cf:d8:2b:
         d2:75:4c:a1:2d:6e:b3:fc:9e:26:4e:b2:fc:49:97:cd:26:ff:
         16:2e:80:af:b1:f6:ac:a7:aa:c9:f4:4b:a4:42:31:71:f0:b9:
         84:75:4e:31:37:0f:f3:8f:48:db:7d:87:bb:34:6e:57:02:f2:
         f2:c8:f5:9e:07:c6:68:1e:11:0f:94:ea:3f:a4:fc:ee:62:12:
         54:82:1c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:36 2025 by rpki-client