Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File:                     VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier:          rlCsIXycjvOCW0A+vIbe8HMN7UjhgDTInDPYMP9W2a8=
Subject key identifier:   4A:31:52:81:AE:94:4A:BE:88:9D:2A:E1:C8:75:09:6D:35:B5:0D:C7
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer:       /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial:       0198D5BBFDB9DBD39864371BA548B5D989BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number:          06EE
Signing time:             Sat 23 Aug 2025 07:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:03 +0000
Files and hashes:         1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: 2pzQOQbEym92pISJHAPSrNdMHBCKDELd4bwRAocPy+c=)
                          2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
                          3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
                          4: ttIMVm2Qx6d-SaNfus5CP2PiSww.roa (hash: GIzKFX6ewkeY9UKKD+c3WgJblzIfMp9efYS5dFXHsaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:fd:b9:db:d3:98:64:37:1b:a5:48:b5:d9:89:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
        Validity
            Not Before: Aug 23 07:02:03 2025 GMT
            Not After : Aug 24 07:02:03 2025 GMT
        Subject: CN=4a315281ae944abe889d2ae1c875096d35b50dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b1:ef:f7:38:c3:12:b8:1c:41:6a:76:ba:ce:
                    a4:43:04:9f:d2:ac:b1:d4:b2:0b:cb:5f:b8:74:58:
                    7c:a5:c9:21:fc:a5:7e:9e:cc:40:18:4e:af:ab:79:
                    36:5a:2c:94:b1:11:09:51:8a:db:98:e0:2b:e5:c0:
                    e5:83:83:a8:03:6f:c4:dd:1d:3c:86:fc:fa:d3:ee:
                    14:34:2b:01:9c:9d:7e:46:54:28:4c:ed:b7:6b:3b:
                    05:5f:35:1d:90:36:29:ee:cc:5a:cc:b3:b5:d8:98:
                    1f:2b:46:ab:8b:2d:f5:be:85:89:68:38:d8:92:7f:
                    31:ba:84:dc:71:02:d3:ad:d7:db:a5:7d:d8:ab:e9:
                    9b:11:37:18:c3:91:4d:fb:f1:ad:7c:be:07:b3:cc:
                    ef:06:03:0c:6f:66:3d:ae:96:5a:a0:25:b6:19:b6:
                    8a:8e:af:5a:09:cf:fd:b9:08:81:f7:a5:1e:bc:64:
                    8a:dd:96:ef:53:18:ee:8d:e6:af:4b:65:3a:b9:c1:
                    49:c8:3b:a7:6b:2e:f6:4a:bf:70:21:df:67:c8:63:
                    df:a9:58:24:a5:79:99:11:15:97:b5:66:e6:79:83:
                    41:b2:59:a7:5c:0c:aa:78:dc:37:69:18:bf:3b:b2:
                    1c:c3:20:1c:71:d9:5f:59:80:2d:eb:6d:dd:34:0a:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:31:52:81:AE:94:4A:BE:88:9D:2A:E1:C8:75:09:6D:35:B5:0D:C7
            X509v3 Authority Key Identifier:
                keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:ed:ff:e9:16:4e:38:03:01:de:e7:98:6c:f4:67:60:1a:
         66:b9:92:96:4f:57:27:03:03:89:b4:ca:0b:a5:c9:7c:e9:61:
         e7:af:d6:da:69:3c:48:d7:79:0a:e1:d8:53:e9:e2:f1:93:44:
         1f:1f:11:2e:db:fd:d0:0d:e9:ea:b4:1a:70:73:8f:00:47:99:
         bf:8d:4f:1f:a4:4a:e2:f1:8f:74:f2:67:67:4a:d2:b4:6a:3c:
         7b:17:2f:05:0a:d2:59:3d:f4:e6:22:c6:24:2b:25:74:77:61:
         ec:29:95:1e:fc:d9:44:9f:19:3b:d2:c3:74:a1:69:6d:59:cb:
         83:44:82:69:17:16:fd:18:ad:3e:cf:38:6c:93:bc:e6:6c:34:
         7b:c5:98:00:3e:01:a6:1f:0d:cc:2d:96:fd:59:e4:dc:dd:d8:
         09:f0:ca:b0:82:c1:f6:a4:9c:80:7a:aa:be:2f:a8:a1:cf:71:
         73:67:61:01:3a:85:6b:e9:7f:a2:ec:b7:65:fb:48:d5:4e:b5:
         9e:c4:24:57:fc:34:0f:a4:30:bf:92:6e:de:bb:76:5b:40:ec:
         4a:8d:3f:02:11:ae:84:31:68:a4:7b:ec:6e:ec:62:27:b7:4e:
         a3:3c:b9:0b:2e:a4:c8:b4:04:b4:9d:e7:63:0d:bd:eb:e4:e5:
         d5:6c:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:12 2025 by rpki-client