Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
File:                     vP7i_2ht6InD9Y3x2fXit41kHeQ.mft (raw, json)
Hash identifier:          G8MzmPW24jpwoDTV5pK6FLyml3G9hrXWcX/+56qCC+E=
Subject key identifier:   89:EF:60:F6:C0:A4:E3:6D:8B:E8:49:02:3C:E3:27:45:51:AB:38:BF
Authority key identifier: BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4
Certificate issuer:       /CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
Certificate serial:       0198D5F15B9806BB8BA14A4879502F63F054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
Manifest number:          052D
Signing time:             Sat 23 Aug 2025 08:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:21 +0000
Files and hashes:         1: 8v2Y_hDM4P4gm6VLl2fM1tYXUMY.roa (hash: Fwwqse9/8KZUX187OjpN/LZOPaaW4loyUBTUxSbinX0=)
                          2: vP7i_2ht6InD9Y3x2fXit41kHeQ.crl (hash: u1s9N3DFjS3pVYwlfYPAye+N29VxTRP5BRszj5CjMvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:5b:98:06:bb:8b:a1:4a:48:79:50:2f:63:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfee2ff686de889c3f58df1d9f5e2b78d641de4
        Validity
            Not Before: Aug 23 08:00:21 2025 GMT
            Not After : Aug 24 08:00:21 2025 GMT
        Subject: CN=89ef60f6c0a4e36d8be849023ce3274551ab38bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:ee:1d:b4:4a:7c:d5:43:50:bd:b7:30:7c:
                    35:d1:51:1f:fb:48:2d:8c:97:72:ce:42:6a:cb:5f:
                    c1:51:c4:3f:30:9b:ec:41:62:be:4b:04:77:c7:03:
                    5f:49:b2:e5:a8:c2:10:cd:73:dd:c1:02:1e:e6:95:
                    15:87:71:0e:69:0b:35:fd:d6:26:ad:d2:8c:54:a7:
                    0c:f1:36:cb:fe:20:25:f2:cd:8b:bc:54:c3:9b:d5:
                    17:ae:3e:95:0b:8a:ed:22:eb:da:1f:56:70:ba:29:
                    d7:ce:eb:85:90:85:88:03:4c:31:6a:66:11:b0:67:
                    22:7c:d8:19:6b:0f:10:11:bc:a9:d2:e9:14:41:76:
                    73:ae:01:41:45:c3:6d:9e:9e:b1:6c:c0:f0:17:93:
                    ee:6d:3c:22:9b:c3:4a:e5:c5:0c:8b:a7:83:bb:8e:
                    74:8d:5b:41:6b:68:aa:5e:4e:5b:e1:76:c6:ee:79:
                    ee:b5:fe:0c:c3:d7:4c:c6:5f:74:a8:ba:0d:11:0a:
                    e2:fe:cb:29:32:35:59:fa:84:b4:d6:7d:d8:63:48:
                    3a:4d:33:24:47:b3:b9:67:11:78:b7:d6:c9:81:3c:
                    71:e9:27:ba:b3:0c:d0:a1:08:e9:23:11:0d:dc:11:
                    d3:0b:01:1a:40:23:3c:47:eb:c1:ac:49:5c:b1:77:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EF:60:F6:C0:A4:E3:6D:8B:E8:49:02:3C:E3:27:45:51:AB:38:BF
            X509v3 Authority Key Identifier:
                keyid:BC:FE:E2:FF:68:6D:E8:89:C3:F5:8D:F1:D9:F5:E2:B7:8D:64:1D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP7i_2ht6InD9Y3x2fXit41kHeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60277c-d037-485c-a4b0-db3993cc5125/1/vP7i_2ht6InD9Y3x2fXit41kHeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:06:e1:94:04:16:58:da:dc:2d:5e:89:3d:ac:3d:18:2d:86:
         ca:f3:39:b9:8e:3b:65:4f:6b:5f:c4:e3:4c:fe:e4:a0:aa:6b:
         b8:71:4f:57:43:bc:e0:16:67:d1:68:15:c9:18:98:2c:ef:c8:
         d3:9e:49:6d:c8:96:86:19:b8:b4:fb:4d:a5:89:5e:05:c4:fa:
         67:34:18:d7:59:28:6c:0c:d1:e5:ae:ea:86:ed:4c:30:3f:25:
         46:41:1c:c0:9b:3a:84:fd:f9:81:45:fc:c8:df:19:f2:73:6b:
         5d:48:7f:1f:23:10:5a:94:ef:a8:46:ae:06:f6:30:f3:c5:e3:
         2e:e0:db:8d:2c:7a:3b:2a:73:f2:52:4d:52:0a:2b:ca:6c:9e:
         50:36:d0:61:32:0b:c7:c2:50:e5:b1:71:37:73:66:b9:ff:15:
         5c:dd:94:6b:ed:52:e8:37:01:69:33:71:73:58:38:ca:26:72:
         bf:41:5a:42:ed:1b:9c:4f:b8:1e:3c:c1:85:41:fb:ee:0c:81:
         a0:40:39:37:46:8c:8d:c9:03:fc:ad:79:d4:2e:1d:58:08:09:
         83:ea:94:0d:52:96:6c:84:91:7e:81:b5:bc:7b:8a:57:ac:34:
         5a:0e:4b:ad:aa:0d:fb:26:a4:d6:d9:15:44:9d:2e:81:51:b8:
         2e:b2:fa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:17 2025 by rpki-client