Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
File:                     VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json)
Hash identifier:          z6gUnx1c1MEo13WU6gg9eU6hGvGWvWWjdJnDqPoVpEY=
Subject key identifier:   45:99:70:24:2A:31:62:86:26:2B:FF:F1:DD:16:3A:E6:93:E6:02:0E
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Certificate issuer:       /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial:       0198D54E8533FF647340E16BD744B12B7BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
Manifest number:          0147
Signing time:             Sat 23 Aug 2025 05:02:29 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:29 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:29 +0000
Files and hashes:         1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=)
                          2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: oBjYOdqd0tQBcF7osDDaJpsaTe3HnIjB6+lp3bXIqjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:85:33:ff:64:73:40:e1:6b:d7:44:b1:2b:7b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
        Validity
            Not Before: Aug 23 05:02:29 2025 GMT
            Not After : Aug 24 05:02:29 2025 GMT
        Subject: CN=459970242a316286262bfff1dd163ae693e6020e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:33:73:26:f7:73:10:da:4b:bd:19:f6:37:
                    ed:da:70:a5:65:cf:89:aa:84:57:ff:85:44:12:9b:
                    e6:7b:12:c3:fe:1b:85:cf:24:c6:8b:fc:b0:80:19:
                    81:0f:9d:6a:83:33:e6:bf:0c:50:46:e4:61:8f:f3:
                    92:3e:87:11:d1:f4:68:68:49:43:9e:c4:04:07:06:
                    a4:06:00:9e:e2:69:43:1e:8f:48:d1:0a:a9:21:9e:
                    1a:97:11:6b:23:b2:85:aa:bc:87:09:9e:15:b7:20:
                    dc:fc:fb:6d:44:0d:79:8a:1b:b2:49:93:08:72:8c:
                    09:50:e6:f7:f2:c9:26:fa:6b:6e:a3:20:0c:a1:ee:
                    53:dd:8d:c0:5d:9a:ad:49:63:37:54:55:26:c3:e6:
                    f2:04:16:5c:5b:94:ef:bf:06:5c:80:08:b8:c7:3e:
                    ef:d5:47:29:d1:4e:56:20:9e:48:cf:71:99:86:40:
                    e2:4f:a3:a2:00:8c:1e:0d:a8:a2:7d:f1:fb:c1:62:
                    57:27:f3:0b:15:72:e7:4a:dc:47:eb:97:28:c3:d2:
                    da:d5:72:0f:ea:c6:76:d0:b4:c7:88:94:b5:e1:16:
                    6a:a3:ad:e3:b2:80:63:3e:e2:b8:f4:8d:23:6c:bc:
                    63:3b:05:be:d0:84:8d:c5:97:59:f8:2e:14:96:4a:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:99:70:24:2A:31:62:86:26:2B:FF:F1:DD:16:3A:E6:93:E6:02:0E
            X509v3 Authority Key Identifier:
                keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:39:e0:0c:69:05:55:26:16:14:4b:5f:8d:4b:c4:58:08:
         ac:78:99:90:5d:37:16:3d:16:4a:43:c4:8a:4c:b5:f1:d4:0d:
         c6:ef:67:d9:c1:9e:20:a2:44:7c:aa:ec:cb:85:85:a2:94:de:
         07:78:a8:2f:53:6b:40:c3:bc:65:d1:21:c7:94:33:76:99:0e:
         15:03:e0:18:c2:d8:bc:46:24:c1:72:9d:26:16:c1:95:2f:bf:
         4a:f5:f5:f4:ad:02:87:95:61:97:05:0c:04:b3:fd:ce:1e:1d:
         ee:64:13:5d:57:45:d6:6a:b4:91:bb:d8:3c:cd:a7:58:50:41:
         2c:a5:a0:59:b3:38:55:3e:82:5f:69:be:a5:b5:21:16:2e:a9:
         2b:95:24:8d:73:03:7b:50:8a:dc:09:67:ac:f4:3a:5b:3c:97:
         0b:f5:02:fe:9a:96:af:b4:6f:51:50:3b:05:55:6f:ce:e9:b8:
         a2:cd:ad:f2:73:d7:0f:b0:6e:2b:33:b3:c2:7b:bf:6a:83:e4:
         19:a6:30:14:f0:1a:a1:30:e6:77:93:cb:17:b0:79:86:ae:ed:
         ae:19:d4:6d:f5:1d:be:9e:00:4e:91:16:4f:13:c3:64:2e:14:
         5b:47:e5:dd:57:da:d4:d0:61:2d:12:a1:1d:63:cd:10:9c:8d:
         98:f1:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:30 2025 by rpki-client