Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          YwsssdpHPxJ4EflhHv3Wl75km0tL+Xo9EBsNWXKgpVc=
Subject key identifier:   B2:76:82:BE:34:BA:F3:60:51:56:86:0F:61:80:7D:29:17:40:98:B3
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       0198D5F12EB25FEE2664EF07C6E7C8EA5C4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 08:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:09 +0000
Files and hashes:         1: UwlL4l1LRiE3vykISfbzsy5TSkQ.roa (hash: ENtIGGU96W9e4YjxZ7Qzg80Ai/cpSTda8jT8DyJC8KM=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: 9HHXCkUNUeng3t7kHREZZ7vqKF15rQHOr3V7PH2vQUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:2e:b2:5f:ee:26:64:ef:07:c6:e7:c8:ea:5c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Aug 23 08:00:09 2025 GMT
            Not After : Aug 24 08:00:09 2025 GMT
        Subject: CN=b27682be34baf3605156860f61807d29174098b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:75:64:6a:51:0a:79:d9:a7:2b:47:92:17:
                    1a:b9:1d:5a:15:7a:a6:e5:32:ac:9b:57:b8:be:c6:
                    33:4e:bf:a2:7b:80:ca:cc:3c:25:dc:7d:4e:36:3e:
                    1b:3f:3d:27:69:34:86:5b:49:b9:55:ae:a4:ad:4f:
                    1d:22:25:46:47:4b:d5:f2:a5:f4:32:7b:d9:12:d9:
                    89:aa:b5:63:b9:1b:a0:21:9a:4e:d0:41:35:5c:bf:
                    43:46:69:d9:66:b8:64:8a:1e:22:f2:bf:b7:0c:ba:
                    72:b2:11:39:a3:b0:40:60:a8:97:3a:7b:ab:f7:ca:
                    cb:0b:ec:e3:d4:8f:5c:4d:69:12:77:5c:4d:eb:18:
                    74:ad:c2:b4:2b:e0:98:16:a7:9e:42:26:02:ff:33:
                    15:fa:ea:31:bf:f7:39:f0:fe:c4:67:01:5d:4c:9d:
                    32:b4:a9:e7:64:24:19:93:a2:b6:9e:69:f3:f6:42:
                    53:dc:e2:6c:6b:91:e9:d5:e2:03:4c:c7:07:1d:9b:
                    69:93:47:7c:b0:9c:01:62:38:ec:38:13:4a:4c:4e:
                    f8:f1:9e:c0:ac:96:de:dc:4c:41:27:71:92:bf:7e:
                    34:4f:aa:63:8a:55:18:35:92:cf:cb:59:05:a3:b5:
                    89:30:5c:ff:ef:1e:75:6a:b5:f5:3e:15:92:32:3f:
                    dc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:82:BE:34:BA:F3:60:51:56:86:0F:61:80:7D:29:17:40:98:B3
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:91:24:42:27:56:d7:e1:e9:59:df:8b:4d:75:74:5d:dd:9d:
         a0:84:80:28:8b:8a:35:c3:a9:da:a1:7d:2d:fb:a7:5a:76:16:
         96:09:58:2c:00:2b:75:15:6d:f3:48:8b:60:78:81:c7:77:cf:
         56:71:6f:30:7a:1e:7f:50:c3:b8:b7:36:f3:f6:ca:34:fb:c7:
         4b:ea:21:ae:83:df:15:b3:90:b7:22:06:ba:07:7d:88:23:84:
         f1:e1:4b:75:c0:d4:c0:e4:2a:3b:10:cb:df:12:d0:9c:2c:d4:
         1e:e8:27:46:2c:82:f5:fb:1e:2d:9f:f8:79:87:1f:38:20:55:
         1d:83:2e:2c:23:37:5f:87:84:e0:01:96:14:16:14:65:ea:79:
         91:83:cd:9a:36:43:c2:cd:f3:64:21:ea:cc:05:86:d6:f8:d2:
         88:1f:79:29:2b:26:91:c9:6b:06:3e:c2:0d:36:3c:9c:09:56:
         6a:8e:27:ad:e0:26:75:82:b5:f8:1c:0e:fe:02:bb:35:d3:13:
         96:a5:dd:62:c2:9a:5a:72:a3:cf:b7:0b:56:43:f2:cb:5e:5d:
         04:c7:d2:ea:a6:cc:dd:e1:39:30:c4:5d:d2:c2:cb:07:c8:09:
         eb:85:72:76:82:f0:d4:35:68:f8:6b:fc:83:19:83:e2:f7:b3:
         a2:c9:3b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:31 2025 by rpki-client