Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          tKcEjGz13H4Sw8vRCPIMRptzEuS2l1115569udZTqtY=
Subject key identifier:   45:A1:DC:43:D4:55:E0:C1:26:13:DA:F5:C8:61:78:23:83:20:57:C8
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       0198D65FD18C7B8903C13CBA27B24637D7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          0A4B
Signing time:             Sat 23 Aug 2025 10:01:00 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:00 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:00 +0000
Files and hashes:         1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
                          2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
                          3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: 3bW3ydnxGF1YcH26PsEsTEbjRrCiQAOin8zLEOBuC5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:d1:8c:7b:89:03:c1:3c:ba:27:b2:46:37:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Aug 23 10:01:00 2025 GMT
            Not After : Aug 24 10:01:00 2025 GMT
        Subject: CN=45a1dc43d455e0c12613daf5c8617823832057c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:65:56:f9:e1:f3:a0:88:35:77:76:94:5d:44:
                    27:f5:c1:10:dd:ef:89:56:03:29:b6:01:60:ba:f6:
                    5c:37:5e:f4:fe:cc:8e:5d:79:5f:d8:3a:0d:b6:04:
                    72:1e:43:90:6c:bd:4a:d6:7a:da:05:53:a0:b1:96:
                    13:39:23:61:c3:ad:5b:22:fc:7d:94:8c:1a:b2:21:
                    d3:e0:2b:88:58:c3:0f:dd:d6:35:c4:34:3f:5b:0b:
                    bc:c8:42:72:84:85:7d:0c:1f:df:b0:11:ff:f4:7f:
                    6b:54:0f:1f:c8:51:0e:97:3a:3d:8c:b7:c2:91:c5:
                    3d:c4:de:57:2b:da:e6:8e:e8:35:f8:93:e9:cc:35:
                    52:21:ea:6b:85:85:2e:3e:4e:53:46:e7:08:38:7f:
                    87:e0:77:23:bf:89:54:ba:9c:7a:da:23:78:a2:7c:
                    2e:bd:49:09:2a:1f:ca:4c:77:ba:ba:1c:55:dc:3b:
                    af:f6:9b:bf:16:76:bc:3b:21:76:26:a5:dd:98:8f:
                    ac:1d:0f:27:8b:f0:e5:36:7a:ee:a6:4f:3a:44:3f:
                    cc:fb:e0:03:8e:76:47:b0:b3:da:71:11:7b:09:39:
                    c9:d5:f1:c4:16:5a:51:41:d2:f2:53:b5:f2:f7:27:
                    7c:f6:2b:53:f4:c1:ce:a6:4a:cb:4a:74:98:a7:47:
                    52:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A1:DC:43:D4:55:E0:C1:26:13:DA:F5:C8:61:78:23:83:20:57:C8
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f9:d7:b8:40:17:56:a0:79:7d:7c:b8:f6:8f:fa:c4:64:8a:
         46:e8:ec:41:2f:74:3a:0b:28:c2:91:bf:1e:45:d1:40:74:ea:
         fc:e8:30:34:38:49:c3:63:de:03:65:2f:23:56:52:a0:35:c9:
         2c:ac:cd:8c:6e:a6:9c:9c:42:19:72:62:aa:dd:70:7e:8a:8a:
         2d:e2:56:aa:a0:88:00:45:2a:f1:b0:78:90:6c:c0:45:58:9d:
         14:25:22:cd:95:32:79:ac:29:17:83:a6:cc:e5:87:f3:15:b0:
         7d:fb:37:c4:b5:84:e7:dd:20:34:2a:b2:f7:13:66:d9:a7:1a:
         7b:cd:f9:55:d9:f9:91:26:97:d5:d2:cc:57:f6:c8:85:52:fb:
         e9:29:4a:4d:24:24:82:38:6c:2b:c1:6c:61:f0:03:ea:69:e5:
         eb:33:27:f2:58:5d:b2:89:71:0a:72:5b:6d:98:53:b4:a3:11:
         23:66:9b:64:28:a1:c0:02:2d:81:40:e4:f1:68:bb:4f:d6:53:
         18:37:a3:a1:84:86:4d:ba:a4:ff:69:8e:99:6c:4c:ea:85:63:
         ab:27:e6:fa:9b:fe:8f:90:a3:fd:70:71:50:1e:15:4f:fe:79:
         4d:e3:67:d7:c7:4d:93:5d:73:2a:ed:bb:31:42:f9:bb:3b:8a:
         37:7d:ce:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:01 2025 by rpki-client