Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          GS5wmdR1AQ4CAu41Sf1IKuYrDEgmBmmdps54lD/iR9s=
Subject key identifier:   2A:1E:98:45:FA:8B:8C:09:A8:CF:31:81:51:9E:95:B9:24:65:3F:4F
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       0198D5157E141D03985FD4CD03FB6E3A2224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          054A
Signing time:             Sat 23 Aug 2025 04:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:12 +0000
Files and hashes:         1: H7y3h5egzZRq_DcRMXxnHePpEqo.roa (hash: SsgPkP/OTMccNNIk11dqOnNXkC8Kebf+Srm+sRJHeWM=)
                          2: IMkZVlT8eK-xJK8Ea9SflvQkFCY.roa (hash: J6Aqupuzh1XHZTyQ8eqa5z/nXeBEsxyVOCdiPL4Sgt0=)
                          3: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: QUw1pgWQSHHDjRY98Hx7+X+n2yyCKzuRJ/h1pJTWE84=)
                          4: ixZP8lw2F7ZQ1n6z2ul-PVTfMYc.roa (hash: 8HnGm/A9kKO8qk6ptSile1LUya5t/LNEUOnSh7y0uik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7e:14:1d:03:98:5f:d4:cd:03:fb:6e:3a:22:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Aug 23 04:00:12 2025 GMT
            Not After : Aug 24 04:00:12 2025 GMT
        Subject: CN=2a1e9845fa8b8c09a8cf3181519e95b924653f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:bf:93:e6:d1:44:b1:df:4a:42:ce:c1:57:
                    83:d0:d4:02:05:32:4d:0e:a4:38:10:fd:92:e5:59:
                    89:98:f1:d9:96:d6:82:5a:45:49:4f:f1:c8:aa:07:
                    a6:7d:2b:f0:bc:a7:90:5a:5f:ac:81:bc:4c:82:3f:
                    7c:0d:b0:21:f7:9d:15:cc:10:d2:3d:d4:b2:ef:17:
                    8e:44:2a:07:46:9c:7f:21:f5:d3:9f:37:08:24:c8:
                    c9:c4:5f:d6:84:67:4c:cf:5e:97:27:40:8b:ab:3d:
                    c1:1b:87:6a:2e:7b:1e:71:4c:53:db:27:c4:7a:1a:
                    29:82:94:f7:fe:45:c7:71:e0:ce:21:d7:63:33:d1:
                    0a:9b:d2:47:9b:d7:d0:ae:be:10:76:7b:b7:4a:91:
                    14:ed:c5:f9:a2:27:0a:d4:a9:5f:55:bf:9f:2f:c8:
                    67:d7:fc:12:8c:97:3b:d7:9f:14:14:51:3c:b5:b3:
                    2d:2a:63:42:bd:ca:b5:c2:e2:60:83:9d:94:7b:40:
                    ba:de:3a:e4:2f:33:79:aa:91:d8:7a:7b:79:23:ce:
                    60:fe:f9:39:21:3b:a2:23:6b:c6:7d:99:7d:26:09:
                    10:36:09:0e:1e:40:58:e5:eb:57:b4:ff:ee:e1:d6:
                    1a:89:45:13:8d:b6:38:68:32:fc:11:ce:cc:58:04:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1E:98:45:FA:8B:8C:09:A8:CF:31:81:51:9E:95:B9:24:65:3F:4F
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:18:04:53:07:54:9c:4a:dd:18:4a:ff:d3:64:8b:73:a7:84:
         ed:46:da:78:86:0d:09:96:a8:d5:ba:6e:f4:24:2d:aa:68:5b:
         33:cb:7c:a0:a9:22:76:2a:8c:de:81:73:47:cd:e0:2e:a5:17:
         5b:19:79:e3:07:bf:e6:31:11:55:43:af:b2:86:20:d3:9a:71:
         d4:ea:ad:8e:11:65:3e:7c:f5:47:4a:44:02:bb:34:02:3b:54:
         bd:12:c9:ab:12:97:76:bd:bb:a6:78:4f:e1:c4:e3:e5:0a:6a:
         ff:38:a9:80:14:d7:ab:2a:2f:2c:af:af:e6:96:77:9d:c7:f2:
         c7:7d:14:7e:b7:d0:b6:b2:2a:79:f3:67:13:d2:6a:92:be:6c:
         98:ff:b7:f6:66:8f:97:df:1d:c8:30:73:15:cc:3b:1b:fa:3e:
         d5:cd:11:3d:c4:2a:05:93:82:21:c4:e5:c7:84:d8:9f:88:ec:
         b4:2a:44:57:f4:f8:c0:33:d4:fd:fd:a8:e9:0e:3b:ee:90:5b:
         cc:1b:41:e3:40:2a:9c:ef:74:12:b4:b7:dc:a7:1a:b5:02:1e:
         eb:15:d3:d8:17:af:53:2e:65:72:1a:b4:a3:97:c7:6b:0e:dd:
         fe:8f:1c:96:0c:1a:d9:01:6b:5a:d9:69:9b:b2:da:30:4e:33:
         fb:d0:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:37 2025 by rpki-client