Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          myqtvpFANgCW4m3BPnI/QFYQQENZpdx77VB0BZBsiWQ=
Subject key identifier:   40:B8:61:D7:B6:60:A9:C9:B9:85:94:0D:1D:BC:7E:9C:3D:7C:6C:3C
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       0198D6604C8605C5CE3D66D23223D66CF880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          0495
Signing time:             Sat 23 Aug 2025 10:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:31 +0000
Files and hashes:         1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
                          2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: IPq0zPlxT9fkr6WmvYO23r6oikeRPs1VZvX22raZtrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:4c:86:05:c5:ce:3d:66:d2:32:23:d6:6c:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: Aug 23 10:01:31 2025 GMT
            Not After : Aug 24 10:01:31 2025 GMT
        Subject: CN=40b861d7b660a9c9b985940d1dbc7e9c3d7c6c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:23:6c:f0:84:a3:2f:83:e1:d7:2a:d7:45:bc:
                    d3:20:e2:fc:2a:c9:bb:ca:5b:cb:59:95:1d:49:b0:
                    a3:fa:df:93:cc:0e:c2:d0:62:b6:61:1c:8c:94:77:
                    7e:32:2b:ea:10:b0:b4:c1:07:e7:e0:e8:bc:8c:3e:
                    84:de:16:00:9b:b3:96:29:e2:fe:dd:e2:32:cb:a2:
                    3e:71:6a:7a:1b:8f:0d:b0:d2:21:1c:64:83:94:25:
                    85:e2:5c:1a:68:08:6a:77:19:89:a8:ea:dc:e6:8f:
                    da:21:fb:d0:c5:ef:d6:ec:cc:b1:8b:b6:df:b3:4e:
                    d4:d6:27:f3:d3:3b:ed:93:88:9c:f3:06:14:47:82:
                    b8:05:21:42:8b:8c:17:be:87:fd:59:f6:80:ed:f8:
                    8c:92:88:a9:87:c2:eb:eb:8a:18:15:19:f3:03:f2:
                    fc:68:ef:fd:bf:86:85:fc:b2:1e:3a:a8:c9:ef:47:
                    f6:dd:c4:99:cf:6a:1a:28:f1:cb:a4:72:24:5b:8e:
                    6c:2b:3b:dc:f1:6f:33:f0:bb:dd:e0:65:5e:de:d6:
                    8c:c8:39:52:c7:40:a1:50:62:41:bd:98:85:08:25:
                    47:26:3c:1e:cb:46:7c:5f:e0:5a:7f:bb:38:9a:b6:
                    ab:87:63:8a:c0:c1:fa:d7:7c:70:b5:87:f6:1c:93:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B8:61:D7:B6:60:A9:C9:B9:85:94:0D:1D:BC:7E:9C:3D:7C:6C:3C
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:01:39:c3:03:6a:91:4d:7e:33:f2:66:07:ae:06:7c:7a:37:
         43:cf:2a:c1:6e:4b:10:73:90:70:82:05:54:64:2b:df:7e:d4:
         ac:9e:db:22:e5:fc:87:bb:64:6a:5c:4f:86:53:f5:b9:a7:53:
         a2:5b:2b:0b:d4:d8:47:3c:0a:d6:93:93:6a:6a:00:ef:59:4d:
         40:48:12:c0:81:e8:d3:43:ab:fb:8f:72:38:7c:4b:18:14:fd:
         a7:5a:54:1c:01:e6:2c:6c:52:58:5b:28:d4:f6:aa:20:34:d5:
         fd:51:f7:6d:08:16:c2:23:e6:27:90:a2:3f:47:87:be:fa:b9:
         9b:5e:ed:b9:58:39:be:df:52:02:fb:05:bc:ca:75:60:21:32:
         46:ce:11:f5:26:8f:6e:7e:9c:44:e7:b3:7b:8a:36:d9:5e:0e:
         8d:d3:98:01:3f:ed:24:c1:b0:13:e3:49:eb:51:1e:94:76:fa:
         31:7c:d5:38:78:e6:52:d3:9f:6d:01:b8:11:23:fc:2f:8a:7e:
         09:2c:5e:94:a6:3b:c6:5f:c7:a0:38:8e:f3:5d:49:28:ef:f2:
         cd:50:31:0b:dd:d9:4f:0a:90:9b:2f:07:1a:43:6b:ea:61:cc:
         22:00:85:40:1c:02:52:35:62:a7:52:c6:2b:70:d0:a9:ef:09:
         e9:99:75:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:01 2025 by rpki-client