Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          3NLsbkwm9SOlkLCCc6pJUtfLhQN+JWi+Ph06p8hh4no=
Subject key identifier:   0E:9F:5A:CD:C0:2D:FC:08:59:54:5E:15:E7:CD:65:2D:3C:3E:7D:E8
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       0198D65FC9B7AF1135DE7F7222C392F997F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 10:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:58 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: lILujHkO67UiDUhRPJFe2FzDpXy67xJxZxQTjryiIKg=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:c9:b7:af:11:35:de:7f:72:22:c3:92:f9:97:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Aug 23 10:00:58 2025 GMT
            Not After : Aug 24 10:00:58 2025 GMT
        Subject: CN=0e9f5acdc02dfc0859545e15e7cd652d3c3e7de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:7c:46:0f:59:ac:8c:d7:67:95:31:99:f2:
                    ff:5e:49:57:44:8d:43:57:94:48:e5:d7:85:54:18:
                    c7:03:b8:12:b5:b9:42:1f:99:b3:83:a4:1a:67:1b:
                    07:82:eb:c3:a6:de:1f:b6:81:e6:08:af:a1:ff:3d:
                    cb:01:9e:68:38:25:9e:43:ca:c6:ee:a2:6c:8d:88:
                    6e:33:e1:e7:51:a0:94:85:08:cc:ed:73:b7:ae:fe:
                    7a:b5:c9:e1:bf:9c:d0:bf:42:88:d9:49:f4:74:3d:
                    f3:d0:8c:b7:2e:c5:a4:26:a6:ab:b9:7c:2d:1a:13:
                    72:7d:ff:c8:bf:1e:95:40:e5:f0:c8:1d:fb:46:68:
                    57:79:85:61:f1:b4:c2:e3:4f:a7:82:fa:3f:0d:2d:
                    c5:5b:ae:90:83:20:9b:b3:53:17:80:d2:f6:f9:8d:
                    56:20:34:5d:19:8f:19:a3:79:81:1d:1c:0a:2e:83:
                    3b:a9:2a:cd:f2:ee:94:77:6a:95:a1:82:9e:18:b1:
                    af:e9:b7:58:41:ac:58:45:33:80:b2:32:37:99:64:
                    b6:5f:72:75:66:01:a0:7e:b8:ed:20:e8:9a:50:4a:
                    a5:29:79:b4:88:f9:ad:46:cf:fb:4e:bc:50:c4:16:
                    5b:f7:58:d1:4e:3b:be:d3:6d:b1:01:d1:97:0b:04:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:5A:CD:C0:2D:FC:08:59:54:5E:15:E7:CD:65:2D:3C:3E:7D:E8
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:55:df:26:bd:e0:86:91:cc:df:38:be:48:e5:ca:51:10:
         b8:52:02:2c:16:03:07:b5:89:39:f8:2d:b7:86:75:2c:a9:9d:
         0f:e8:2e:8e:33:4c:27:55:41:29:51:c1:6a:b3:7f:e3:1d:0b:
         08:0e:bf:35:3b:da:3d:b7:84:78:66:d7:55:be:6c:15:45:f1:
         f0:89:98:e4:1d:7e:7e:07:79:d0:44:a3:df:a0:3c:a8:cc:76:
         3d:be:a3:10:f0:a5:68:20:17:c5:b9:09:c3:04:b2:59:29:1f:
         76:df:87:c8:f2:ec:4b:48:7e:41:39:e5:f7:90:e9:9f:87:ae:
         75:4d:3e:ae:d8:50:7e:3d:ce:7a:f2:9e:4e:c1:fe:c6:bb:0f:
         d8:91:55:10:1b:5b:73:31:1c:bd:7f:0d:9b:86:d6:07:6c:26:
         99:c2:8c:ed:66:38:28:92:75:1d:ea:47:39:af:90:ae:6c:4c:
         1d:4a:35:4e:18:ef:1d:fb:82:01:fb:c3:01:f2:e6:de:6f:07:
         3e:3f:fd:03:dc:51:0f:9d:37:c2:18:bd:d2:1c:ee:c9:77:fb:
         d9:51:e0:61:c9:d9:0e:96:d3:3e:7c:f5:b3:2b:cf:ac:d4:53:
         50:56:fe:76:a0:9a:bd:36:d0:f7:76:49:12:98:7e:d8:24:b7:
         d9:df:f4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:10 2025 by rpki-client