Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          0XGb6icbzhB1RJDjcsh9bRjLgaq8wa+cNbLZ6+nRCw4=
Subject key identifier:   06:65:23:E4:20:52:B2:57:58:65:27:E3:5F:A0:85:B9:8F:55:B6:7F
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       0198D5BB7C0BB370E1FB924D16A4083281DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 07:01:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:30 +0000
Files and hashes:         1: L8YsrOLlwO66BsQEEtK6Lg8aUqo.roa (hash: ECXVVyoHo6mN0mEmdgrhg+O//yJsNOUcG+xLAybX5t4=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: g14RZpgELT0YRL3AJcyrpsIq5IQqeVj2thVkNam57PI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7c:0b:b3:70:e1:fb:92:4d:16:a4:08:32:81:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Aug 23 07:01:30 2025 GMT
            Not After : Aug 24 07:01:30 2025 GMT
        Subject: CN=066523e42052b257586527e35fa085b98f55b67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:ea:a6:3b:5e:a4:9c:9e:5f:cf:78:af:89:
                    a2:19:f0:b3:46:7a:27:34:d2:53:0d:72:4e:6a:d7:
                    f9:34:e5:b6:d9:42:5e:8f:6c:63:36:ad:1f:39:57:
                    89:e8:bd:06:f3:35:d4:ca:45:10:e3:82:a2:55:67:
                    51:ac:38:9c:f6:dd:8b:84:18:4f:ec:46:3f:cb:05:
                    e5:71:ea:6e:f8:05:2d:95:bd:63:7c:23:ea:07:50:
                    c5:fc:0b:12:03:39:f0:0f:5b:a8:a6:84:9f:ff:9a:
                    4d:aa:2e:ac:0e:06:bd:7b:7d:ec:7b:5c:36:3a:cc:
                    34:a9:0f:26:82:92:66:dd:41:bd:b4:16:cf:53:54:
                    3c:bf:3d:09:6b:62:8d:0f:70:4f:d8:27:49:86:c8:
                    da:fc:6e:27:66:f3:9e:33:57:f5:a5:42:ad:7f:cd:
                    87:9e:09:0c:18:68:ff:d4:3d:24:b7:25:26:52:99:
                    f8:2c:38:5a:fd:dd:c3:7a:01:40:b4:33:36:3b:1a:
                    3d:81:a4:21:69:c6:43:e3:44:8d:b4:81:ed:c2:3c:
                    13:11:7f:16:b2:49:11:ef:75:1c:13:a5:c9:8f:e9:
                    fb:3c:97:74:9a:11:21:78:fe:e7:1b:ea:1d:0f:6d:
                    90:2e:f8:a7:92:4f:6e:5f:9d:66:96:a8:f5:1a:07:
                    f0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:65:23:E4:20:52:B2:57:58:65:27:E3:5F:A0:85:B9:8F:55:B6:7F
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:0e:7a:10:14:65:a9:34:c4:ab:46:60:75:01:e4:6a:29:aa:
         56:a2:91:55:22:51:88:f6:3f:5f:2f:1b:12:72:d2:04:ce:99:
         80:31:17:05:d2:07:81:75:d2:7c:05:ac:1f:f2:69:fd:10:1f:
         db:f4:1a:7f:a1:fa:98:fc:15:fb:d6:49:5d:d9:96:d4:6b:40:
         5d:a1:83:50:05:3b:35:3b:43:4d:4a:ab:85:31:87:8f:dd:0c:
         08:24:2a:10:ed:4b:cd:cb:d6:58:32:4a:32:ed:68:6a:ee:d3:
         5e:7a:90:e9:7f:be:1d:cb:fc:67:ea:c8:29:7f:fc:24:3f:e8:
         ba:28:ce:58:33:b2:22:ff:07:6b:c2:29:2c:9f:ef:8c:43:39:
         92:2e:a3:bb:1c:ba:c0:15:35:0d:2c:a4:fe:43:cf:29:1f:84:
         4d:3f:1a:65:3a:3a:a8:2c:16:f8:19:0a:f1:d2:75:c6:ff:5f:
         1e:d7:47:44:ba:87:22:dc:50:6b:3a:e6:f7:86:47:39:8d:2d:
         9d:e1:3c:56:ca:b5:eb:07:00:61:ed:ed:4f:8c:69:99:37:14:
         29:ce:43:e4:0b:c6:60:a0:c0:ff:5e:2a:43:11:8e:4b:aa:40:
         a3:77:37:9d:92:53:6c:c3:43:35:f3:7d:85:af:36:f4:13:ea:
         6d:fc:a2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:47 2025 by rpki-client