Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
File:                     VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft (raw, json)
Hash identifier:          +0D/Ec5WhzdEIG+EpyVA2V0aPVOfsyUluQRiLZtiZjc=
Subject key identifier:   4D:BF:E4:3D:5D:A6:52:59:AE:D4:45:76:38:1C:9F:E8:D2:B2:87:76
Authority key identifier: 54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24
Certificate issuer:       /CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
Certificate serial:       0198D661343724CA274CFD82A013BB2C5EC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:31 +0000
Files and hashes:         1: VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl (hash: ZShL9n1XjNRerFTBiGrnj6sRYeGtSKuHAdnmBcyUo7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:34:37:24:ca:27:4c:fd:82:a0:13:bb:2c:5e:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546175f2e829b46657596dd8f32e1f93ecbe0a24
        Validity
            Not Before: Aug 23 10:02:31 2025 GMT
            Not After : Aug 24 10:02:31 2025 GMT
        Subject: CN=4dbfe43d5da65259aed44576381c9fe8d2b28776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:f7:e4:79:99:ba:35:60:b7:20:12:7a:16:
                    42:56:11:04:3d:5d:69:03:36:7f:9c:34:94:52:ab:
                    b8:fa:a2:22:ac:20:ce:a2:7a:70:dc:fb:af:b5:5f:
                    a9:0f:ba:ff:1c:89:f5:74:13:a9:e0:49:f6:b5:33:
                    17:22:6e:7a:9f:3b:b6:d3:e2:86:a0:45:2e:e7:8e:
                    5b:81:0c:90:b6:cf:32:89:37:ce:1f:98:03:49:92:
                    13:5b:09:69:98:43:6a:9d:50:38:d6:69:97:3a:36:
                    49:ea:a0:b1:07:c1:4c:fe:17:4d:f4:bb:b8:a4:00:
                    8b:f9:08:d1:58:bf:e1:ff:75:71:ea:64:8f:22:2d:
                    ca:4c:52:a1:39:81:b0:c4:18:5c:35:ab:dc:7f:49:
                    b3:2c:c7:b5:b1:ee:77:d8:e0:11:35:bb:cd:62:5d:
                    30:20:dc:d5:cb:62:62:51:56:8f:bb:76:1d:b4:02:
                    7e:45:49:ee:c7:09:4c:0a:c8:c1:77:a6:ff:de:be:
                    84:f9:11:b5:1c:bc:a5:f4:b3:e8:74:f0:64:2e:fe:
                    93:21:c8:06:2f:36:0d:36:0e:9e:d7:ff:d0:6d:4e:
                    90:bf:8f:75:b6:18:8f:e5:7f:db:4c:a5:2a:94:8c:
                    1b:8c:4b:5f:cc:ea:6a:74:2e:be:68:56:94:93:8d:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:E4:3D:5D:A6:52:59:AE:D4:45:76:38:1C:9F:E8:D2:B2:87:76
            X509v3 Authority Key Identifier:
                keyid:54:61:75:F2:E8:29:B4:66:57:59:6D:D8:F3:2E:1F:93:EC:BE:0A:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGF18ugptGZXWW3Y8y4fk-y-CiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/2ce775-37aa-4840-9852-bb1b0e418a21/1/VGF18ugptGZXWW3Y8y4fk-y-CiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:14:38:ee:53:c7:14:4e:8d:29:d0:7c:f4:29:d4:37:37:e4:
         36:19:0d:37:5c:ad:a7:53:fd:62:96:39:4d:37:7b:02:9e:4e:
         f7:6a:19:fe:44:47:38:78:2c:19:4c:e1:98:68:fb:98:30:a1:
         f2:d3:23:19:7e:4f:6c:c3:11:44:f6:93:2e:c9:80:ab:65:8d:
         7c:98:59:8f:65:e7:c1:33:96:33:b8:db:de:75:d7:df:5b:50:
         0a:bd:f6:c0:9a:f9:8b:ba:e8:16:4e:8d:bd:60:98:c7:90:56:
         ee:2d:38:02:ea:aa:1f:db:b1:f1:a1:10:3b:7e:4d:17:50:58:
         1a:6f:5e:6c:8b:2d:a5:31:cf:74:9a:ba:ad:13:28:19:9c:5d:
         66:68:3b:ba:6e:23:fe:33:d3:4a:ad:2f:28:09:de:af:80:db:
         dc:ca:8a:74:3a:55:0d:37:40:03:55:4a:c3:78:7a:94:f2:e9:
         11:bd:f5:f8:38:36:74:62:a4:bb:91:60:67:eb:bd:00:72:8b:
         eb:72:86:47:ae:64:06:b0:f8:f6:e8:26:12:a3:5b:e6:f8:87:
         7d:26:a7:7e:f4:b7:5d:ab:8c:bb:d3:21:87:5e:c1:26:6b:65:
         86:d0:e7:89:9c:04:56:78:15:ba:34:ca:e9:fe:2d:4a:b6:4e:
         c9:14:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:45 2025 by rpki-client