Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          ISbw/Hj7giFWsWa3M4n7XSyI9ioDwz/SfAkMM3qZ9G0=
Subject key identifier:   B4:0E:42:CA:13:D4:AF:DC:4A:AC:74:94:1B:73:C1:A7:D9:C3:22:41
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       0198D4A7C2E0104D7B5730E77EB0FEB14F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1667
Signing time:             Sat 23 Aug 2025 02:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:20 +0000
Files and hashes:         1: 1-ezSRolehonzd7m4Tnnd0luM6m8.roa (hash: On/fPJ39Z5Xcbn6zLcHyJUdx0s6S7SIPAdEzMQoJ3XQ=)
                          2: 108BiaBt5OdPpJMqalaqOeNV69I.roa (hash: cjOLOxh24OsIAnTQULMJay2aUelwjlre1sYAhylQyv4=)
                          3: 7Qe59yEW7U7chp45wrlrOOBrcpk.roa (hash: Md3Sf2aP3zQKSv1JAQBFfYI5IElvnInpSGp9RK9f30s=)
                          4: 9nLBkii6i9kqzksN6JMZwCrzYV4.roa (hash: qHoR8g3sPS0H1p08Rknlh5VjMVgipRCKDg0svuFgx6s=)
                          5: BhZvXc2lnsh5uqYjh3zsVqW7yLs.roa (hash: mydo0BfsTsL08Otk+t8zOQ+cbdabxk/K36L8MDg8etE=)
                          6: FXwS1usM9Gw8btRI8PnsNDkj9_4.roa (hash: FQ76n5rBG3AqlfwNPRTLnoowtLaTPVNfG35bOGyU4Fo=)
                          7: OzRFfGtYydKtloUFGibUfBCyMDw.roa (hash: cWKDKlEnWPEyIjxNhIulWdfjuX7dn5MJ4+8rywovQak=)
                          8: PQXaxHl_x5hCLUsVIoHDCNRTgCQ.roa (hash: 92Bl42I20RnqTYIC6hXMCEhevLacaiZKxk7OT2RhVWs=)
                          9: V9BWXIygnOhJHYu8bdQZRzbbGqg.roa (hash: re8sSZ6coeyXhQek/2jPbAPj3KlkVxVW/0zknsrcySY=)
                          10: VYwvZ9OHIlRbhHXyXxBLwaXS8K8.roa (hash: dnJzWIPR+2RTl2ECqdSA76Gag1tIQoNuzSSgRCHhVCA=)
                          11: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: klraA26KZiQIC0IkL0ubN5hu2n0Qt7FMUpmU9X7P46I=)
                          12: YfK2aOb88mXpBxncnyZwMMazaP0.roa (hash: hVpx7JF9g3hoT3mWsCzEbNroYXChIrskLkYxhbCkK+c=)
                          13: gWHF_rALnCC6aWL25OOLXmaYWd4.roa (hash: MNZsV6aY4RN1u/cCPIru0uGzTZOf4K/o0suBsxP2p4c=)
                          14: k5Aqa-da4KH0XLB24n43hX_ycfY.roa (hash: W7GIeml4QidNLEYcrSPcEhMsiifqshzVO/aRAhmqOJQ=)
                          15: mEjb7YolVkNoRPc7NFh2s3n4ofI.roa (hash: YkFvSAFSbMEKapQ4QmCFtptbDTMKOkrwWyOA+WEx7Vw=)
                          16: o0SifTx2NU1sEhX0Vll10hyck8c.roa (hash: CTAgGKzxE8Fx3onDLMa7P2lInOfEaEKTgjP3A/rkyEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:c2:e0:10:4d:7b:57:30:e7:7e:b0:fe:b1:4f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Aug 23 02:00:20 2025 GMT
            Not After : Aug 24 02:00:20 2025 GMT
        Subject: CN=b40e42ca13d4afdc4aac74941b73c1a7d9c32241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:7b:d4:34:41:94:dd:6e:80:b8:12:cb:55:
                    aa:25:8d:ac:f4:3b:d0:dc:67:63:92:5e:bc:20:8d:
                    a3:f7:0f:83:19:9a:9e:3f:fc:8a:3e:cf:9c:a4:82:
                    1b:0b:7b:74:46:db:a3:13:71:94:1a:6a:08:b3:0c:
                    28:c3:cf:65:3e:fa:bc:48:f0:1d:72:af:e7:77:d0:
                    51:bf:4a:bb:22:8b:08:fe:ee:4c:ed:58:48:12:e3:
                    3f:09:07:d0:14:f1:94:ac:74:7e:de:f0:7f:ab:43:
                    d2:e1:d4:4a:8d:dd:9b:a1:29:e5:4a:4c:29:24:2f:
                    c6:68:b0:41:d1:d2:3c:a3:07:3f:5c:cc:dc:c4:ad:
                    0f:a4:b9:f8:c7:88:3f:92:40:c1:c1:8d:77:7a:92:
                    9f:a0:98:0e:a7:09:67:87:a0:6c:7e:56:4f:02:c2:
                    02:b4:13:8f:3b:9d:78:4a:06:a0:42:b7:c4:4a:ac:
                    ee:12:23:c6:9d:8c:a1:82:62:71:b4:68:41:4d:3b:
                    7d:82:47:62:fe:74:00:1e:13:bb:ef:e8:3d:dc:b7:
                    1b:14:0f:b3:16:fe:33:3d:67:19:63:fe:8e:52:4b:
                    31:fc:56:71:08:1b:5a:33:c1:6f:07:83:5c:2e:21:
                    ce:9f:f8:7d:ea:df:25:12:24:32:45:33:f8:1d:48:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0E:42:CA:13:D4:AF:DC:4A:AC:74:94:1B:73:C1:A7:D9:C3:22:41
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b0:b9:e4:d3:34:75:60:2c:84:18:2c:bc:ea:05:4a:70:a9:
         6d:78:ce:00:a1:51:4b:56:fc:5f:b9:e0:3d:22:85:25:bb:a5:
         64:dd:cd:5c:65:00:e4:26:41:42:bd:c0:88:f3:bb:0e:c3:e8:
         ec:23:36:d9:ff:cb:6e:ca:fc:3a:98:35:36:25:5f:f8:5e:23:
         a6:b7:65:a1:a8:bd:56:64:10:20:8e:3b:d4:6d:b8:84:95:67:
         83:4c:2b:50:6f:a9:9e:f3:e6:11:2a:fd:b1:2b:de:96:ff:11:
         8e:15:08:bd:2f:c9:62:97:36:f5:f8:6a:51:9d:a8:d9:2a:d1:
         13:61:e2:b7:b9:99:57:8e:2b:e8:61:e0:ba:b0:30:40:07:26:
         41:dd:60:eb:c0:51:11:4d:dd:ad:e2:a8:02:e5:d1:5b:db:ff:
         95:82:b0:60:b3:87:d3:06:44:c5:ed:69:cc:a8:8d:df:11:e0:
         8f:e1:4d:23:39:81:e7:a1:67:23:56:0c:ad:44:bd:90:33:c2:
         2c:84:0a:4a:d0:04:31:c4:50:7a:37:70:b8:fa:1f:39:bf:d1:
         66:87:90:d3:a9:17:42:d4:fb:bd:d5:72:74:b1:c1:9e:6d:c8:
         3c:10:24:74:48:93:80:04:ea:c7:37:ab:a2:6f:94:cf:00:0d:
         c7:49:37:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:17 2025 by rpki-client