Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          cVyA3tSQI1f3XVfLBTRdsx7j1WQV5CKcfTYOYf37UlM=
Subject key identifier:   41:BD:99:13:00:C9:E1:CC:6A:BC:FF:D5:EE:C1:65:1E:A9:8C:02:93
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       0198D66050DCBFF8779BE51C4D4CF3738F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0F49
Signing time:             Sat 23 Aug 2025 10:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:32 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: M5dvtMXDy3Gr+7K22fS6FmKo7LnciGP1GibegI7PjLk=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:50:dc:bf:f8:77:9b:e5:1c:4d:4c:f3:73:8f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Aug 23 10:01:32 2025 GMT
            Not After : Aug 24 10:01:32 2025 GMT
        Subject: CN=41bd991300c9e1cc6abcffd5eec1651ea98c0293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:0f:7f:0f:39:38:99:e9:32:68:39:e1:6f:
                    9f:02:c9:23:0f:57:11:1d:32:bc:0d:ce:96:eb:c6:
                    dd:ff:a3:2e:52:41:d1:47:90:9a:8b:36:22:c4:6a:
                    59:93:a2:61:c1:2f:9d:b9:4c:cb:e6:81:ba:8a:77:
                    ab:40:36:f8:2b:f4:52:be:99:63:65:ed:73:38:ff:
                    d6:8d:de:6e:1a:ff:75:a2:ee:81:38:8e:fa:c3:4f:
                    56:76:36:a6:39:96:5a:2a:52:e2:75:9a:b0:2a:c4:
                    fb:8b:32:7b:ea:ad:64:6a:b2:11:87:ff:57:62:51:
                    39:bb:ea:00:f7:47:3b:eb:da:61:cf:fe:81:15:89:
                    7e:83:7e:49:58:20:ef:09:a1:e4:62:9a:ad:7a:d0:
                    fa:00:6d:af:33:f3:7e:1d:80:6f:f1:a9:88:03:3b:
                    0c:69:f7:91:c4:71:50:8f:ff:8f:58:0d:e3:66:f7:
                    d8:4b:85:8d:78:92:f8:ae:4b:79:5b:b8:ee:b7:bb:
                    27:ce:45:8d:de:4a:bb:86:16:2c:51:d4:d9:3b:86:
                    d0:e8:18:9e:c8:91:68:b4:af:04:e2:88:14:41:1d:
                    2e:ee:d2:2a:82:be:e9:d3:c9:26:a3:8f:75:27:e1:
                    2d:68:91:e0:37:5a:c8:e5:e9:73:b1:f1:33:ce:27:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BD:99:13:00:C9:E1:CC:6A:BC:FF:D5:EE:C1:65:1E:A9:8C:02:93
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:bc:b3:63:95:28:62:a2:06:28:5b:38:18:89:b2:38:43:
         cd:78:d2:75:6d:07:b4:5c:af:3a:84:96:66:6c:85:17:fb:a4:
         62:f4:ca:03:f0:de:30:26:1c:75:89:c1:47:1a:c3:c8:48:ae:
         b0:87:04:fc:4a:0f:6f:09:92:5e:75:24:b7:cd:4e:8f:dd:7a:
         2b:6c:85:35:cb:14:f9:46:68:cb:e2:9b:4b:dd:70:bd:fb:1d:
         65:d3:2c:ac:1c:db:17:1f:03:2d:28:ab:8d:30:81:f4:24:d6:
         a8:47:2c:9e:73:07:e7:aa:38:2c:8d:b0:96:c8:99:d5:73:66:
         13:dc:40:10:21:43:e7:d1:7b:2d:35:0c:d6:5d:88:9c:6b:9c:
         d7:85:24:a6:80:d5:cb:76:59:3d:1d:65:85:32:fc:1f:25:3e:
         a6:a5:b8:fa:c5:ac:35:44:41:4a:cd:bc:2f:95:01:9f:02:b4:
         69:bc:3d:de:69:0d:25:ff:a5:f3:fe:56:2a:c1:8e:c3:e1:3e:
         b6:8e:6a:c3:12:13:c4:55:c6:2a:3d:4a:05:fb:ec:9e:67:20:
         51:18:9a:94:8a:1f:e0:b5:a3:de:3d:0c:33:97:f4:7f:5c:27:
         f4:8a:54:40:f2:76:f9:9f:b3:8c:4a:50:cc:b8:3f:b4:bd:83:
         ea:f4:6c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:20 2025 by rpki-client