Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          tSPIcBlSIJtTLEsUPUVNNWTrZOl+qN5opldLFrQVkBM=
Subject key identifier:   A8:D2:6C:7B:52:7D:EB:BD:0B:1D:AE:B5:4E:78:04:7C:4D:DF:47:C5
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       0198D54EC8314F59B08D947DE58826FA505D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1298
Signing time:             Sat 23 Aug 2025 05:02:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:46 +0000
Files and hashes:         1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 9l3IJ7Rqh88WTMKiUvoL7BB61DlBREHA7avE+cxRCME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:c8:31:4f:59:b0:8d:94:7d:e5:88:26:fa:50:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Aug 23 05:02:46 2025 GMT
            Not After : Aug 24 05:02:46 2025 GMT
        Subject: CN=a8d26c7b527debbd0b1daeb54e78047c4ddf47c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b1:5d:69:73:8d:3e:2c:f2:3a:60:64:55:e1:
                    62:3b:7b:0c:c6:42:0d:9c:22:e4:aa:ea:3f:18:f8:
                    62:87:45:b5:56:b5:7f:e3:51:06:d6:70:81:6a:33:
                    48:0e:f4:2b:d1:9b:90:d1:75:dd:2b:96:d3:6d:91:
                    b2:67:1c:16:a4:83:78:8c:2e:4e:d6:80:e6:06:a5:
                    1f:48:e5:33:32:54:e4:ae:64:50:f9:4e:74:eb:86:
                    99:64:d2:75:33:3f:ea:0e:37:3e:84:be:f0:14:26:
                    0f:d2:f1:10:b4:17:dc:02:e0:a6:e8:b5:f8:e6:21:
                    0e:e2:ea:96:4f:2f:e1:b4:1e:17:b5:b8:2a:43:00:
                    9a:74:32:4b:2a:2d:54:13:69:5c:ef:92:16:fa:8f:
                    f9:be:65:23:ae:dc:ab:79:ae:6c:92:f6:02:08:5b:
                    d0:7c:f9:00:aa:e3:a4:20:8e:24:4f:47:e9:91:34:
                    5b:29:35:0a:53:62:29:0d:b7:9a:6e:3e:74:b6:bf:
                    a1:6c:8f:00:2f:76:d3:82:7f:f0:da:ab:8d:13:bc:
                    77:20:ee:7c:c3:b7:ce:c3:5d:04:c9:93:d0:35:26:
                    2f:62:82:4b:8d:15:f9:23:ab:69:b4:b1:f8:2c:3d:
                    17:09:1d:99:6f:57:e9:02:93:16:6f:6c:8d:1f:da:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:6C:7B:52:7D:EB:BD:0B:1D:AE:B5:4E:78:04:7C:4D:DF:47:C5
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:d4:cf:fa:0e:19:3e:4a:20:e6:61:e1:ff:47:d7:a1:a9:
         19:82:b4:2f:b1:a6:86:06:bd:19:fd:44:58:ca:f3:8a:cb:2c:
         72:87:a9:90:2d:3a:4e:dd:a8:a2:f7:e8:01:9e:78:c6:17:f3:
         5f:c0:b9:c9:88:71:d0:9f:81:4e:cd:a9:42:58:ed:cf:e4:c3:
         38:59:6f:22:fb:24:64:e6:2c:bb:e5:a6:11:b9:22:1b:0d:7a:
         5e:1a:8f:57:66:5b:54:db:01:a9:08:fd:c8:6d:b5:a2:93:fc:
         76:db:cb:84:ad:1b:eb:da:e6:b7:a5:c5:2b:0f:39:b6:b8:72:
         77:ef:bb:6b:0a:12:34:2b:fb:7a:cc:53:64:d2:3d:c9:60:26:
         8c:02:23:4d:fc:87:af:04:b2:ea:97:15:d4:83:ef:e2:aa:32:
         0d:93:2b:54:dd:13:00:63:71:11:67:d8:29:88:de:b7:c7:f8:
         76:27:87:04:d5:2f:7e:03:94:55:3b:b7:a0:33:c2:45:21:c1:
         03:a5:66:74:53:3d:0a:fe:ae:57:85:16:02:fe:61:f1:e1:07:
         7c:0a:6f:94:e4:02:32:ce:c8:0e:4d:9b:82:ac:f5:cd:3d:13:
         71:89:fc:1a:73:23:f0:1d:7a:3f:b3:6d:56:10:d5:1e:0c:87:
         11:fb:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:59 2025 by rpki-client