Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          uviKdQyGt6njxGjOudlDxpveNB9CH8Y7oac5kNfGk98=
Subject key identifier:   F2:35:38:AF:5B:E4:37:85:94:A6:44:7F:F6:26:76:1D:75:F6:EA:E3
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       0198D70608323F81D1F52D1D8CDF5330FA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 13:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:33 +0000
Files and hashes:         1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: BsleN5tezqROC1LKaHiDDnn/DzapaLvNMZtmfNYHC0M=)
                          2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:08:32:3f:81:d1:f5:2d:1d:8c:df:53:30:fa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Aug 23 13:02:33 2025 GMT
            Not After : Aug 24 13:02:33 2025 GMT
        Subject: CN=f23538af5be4378594a6447ff626761d75f6eae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:23:9e:35:40:93:fc:c8:b2:e1:00:51:c5:48:
                    6d:e2:1e:b6:d5:df:5c:d7:aa:cd:65:11:98:5a:98:
                    75:c0:bb:87:5b:95:e4:07:b7:d4:c8:f9:25:57:fa:
                    98:b5:32:41:fc:e5:fa:34:16:a1:4d:49:6c:10:8f:
                    5a:c0:9e:6d:c5:98:61:dd:f9:5a:b4:32:25:af:5c:
                    cc:8e:c2:35:fd:48:cb:ce:4c:45:29:81:b1:22:3e:
                    d9:75:1a:41:f8:38:e0:91:84:16:c4:f6:bd:47:79:
                    7f:28:ad:d4:6a:92:e7:6a:38:1f:9f:93:95:7a:ce:
                    99:de:22:ee:0b:e5:27:8c:51:d4:2c:3c:3c:ac:a9:
                    71:ac:10:d4:4b:d4:75:4c:09:23:ed:73:cd:5b:08:
                    06:2b:ba:5a:7f:b7:b1:13:94:4d:85:26:36:c4:bf:
                    be:45:55:6e:cd:72:36:c8:e9:15:f4:04:19:f0:b3:
                    d9:0e:b7:5f:cc:d9:bb:dc:f8:46:0f:33:85:2a:88:
                    97:f7:e5:27:8b:fb:ab:c2:8b:96:90:da:3d:d3:e7:
                    84:d4:25:d4:bf:be:4a:59:68:dc:fe:e9:35:32:bb:
                    d5:16:0a:d7:75:3f:6b:08:ee:3b:98:a3:fb:8e:65:
                    df:e4:a2:2c:17:69:7c:27:83:70:c1:c0:90:2a:99:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:38:AF:5B:E4:37:85:94:A6:44:7F:F6:26:76:1D:75:F6:EA:E3
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:46:65:5c:de:97:5e:66:1d:e1:07:3c:46:b3:2b:c8:39:
         19:23:68:f3:1d:5e:a0:b1:51:19:37:1c:e6:4b:a8:f4:ec:52:
         fa:a4:90:99:04:5b:ff:5c:45:7b:13:0d:14:6a:81:c1:5a:a3:
         d1:a2:15:64:58:85:6f:a0:e0:a5:53:84:5d:51:7f:f4:94:ca:
         68:65:47:94:a0:93:cb:ab:62:f0:4d:e5:2d:04:f4:e9:24:0b:
         d6:25:da:6e:15:38:a4:18:5a:16:61:8c:66:77:a2:90:0f:73:
         67:d6:a2:5b:8d:9d:df:92:dd:fb:15:0b:eb:8d:c0:af:23:fc:
         e6:32:af:4f:fe:52:5c:e4:73:7f:b9:2e:1f:86:90:91:ae:95:
         c0:79:9e:7d:f2:02:a5:40:49:35:72:6f:3a:a2:9c:d4:1d:75:
         0c:15:b1:69:80:4a:ca:9e:29:13:b9:77:51:5e:ea:2e:11:52:
         e0:82:fc:48:96:42:76:07:f3:f9:26:56:90:5a:8f:de:11:bc:
         7d:56:f1:3f:fe:cb:97:f5:0c:58:30:5f:c7:76:0f:9f:1a:fb:
         4b:26:51:8a:cc:e1:7a:e0:b1:76:8f:4a:c8:4a:a0:2b:12:94:
         6a:0e:c6:43:c3:87:cf:48:f7:05:46:11:ac:7d:0c:24:4e:5f:
         3f:b3:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:45:30 2025 by rpki-client