Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File:                     vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier:          7n32IgQMmPWfUwzPrvDOpJCTMYUvCwgD03Hze/rrEZs=
Subject key identifier:   09:54:0B:63:62:C1:89:89:A1:C3:D4:0F:15:38:C3:65:0A:70:AD:AE
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer:       /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial:       0198D65F758B1FF0CD87912C3C2472F9230B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number:          05CA
Signing time:             Sat 23 Aug 2025 10:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:36 +0000
Files and hashes:         1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
                          2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: aNKWQmxQjDOhy9Jk3aA7fPLH6ePEtSgqxn4GSbgOAo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:75:8b:1f:f0:cd:87:91:2c:3c:24:72:f9:23:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
        Validity
            Not Before: Aug 23 10:00:36 2025 GMT
            Not After : Aug 24 10:00:36 2025 GMT
        Subject: CN=09540b6362c18989a1c3d40f1538c3650a70adae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:9b:be:98:74:d3:90:07:31:97:64:27:6a:
                    c3:3f:be:22:87:a7:91:04:1e:9c:b4:b9:70:ca:ee:
                    d5:0a:81:b0:83:0b:16:76:44:fc:6e:7d:18:55:b8:
                    fc:af:8d:7c:ba:ad:c4:8e:ec:cc:d8:0a:a2:e9:3e:
                    c2:75:a1:f5:9b:fc:41:c8:93:c2:ab:67:d5:d6:27:
                    af:b0:39:ee:3a:7a:12:df:3c:85:54:8b:73:6b:5f:
                    49:f3:95:fa:ff:49:12:46:4c:9e:7d:e5:54:55:c4:
                    1f:72:56:f6:dc:cd:72:0b:75:ac:98:78:88:53:b3:
                    9f:4d:48:27:0d:4f:3d:7f:4b:6d:03:6b:00:c0:32:
                    03:fe:3a:c0:ae:e8:ce:88:c7:d2:60:f6:b1:f6:ce:
                    d4:ac:99:28:c0:50:ca:e8:49:af:53:ef:56:d2:4d:
                    8f:b5:d0:b3:80:98:04:59:08:ab:ef:76:94:62:4a:
                    57:cc:80:6d:2b:e3:79:c7:92:3c:55:2d:13:14:d1:
                    2b:fa:1c:bb:22:ff:3d:61:6c:7f:bf:1b:92:10:de:
                    0f:41:43:68:6f:98:75:65:d2:f7:e1:a1:62:c6:ad:
                    f9:c8:aa:53:6e:9e:87:0a:ca:04:61:ae:46:15:8d:
                    54:67:82:63:ef:c6:45:6c:b6:de:83:d2:fd:cd:66:
                    64:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:0B:63:62:C1:89:89:A1:C3:D4:0F:15:38:C3:65:0A:70:AD:AE
            X509v3 Authority Key Identifier:
                keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:03:3b:f8:a4:3c:78:c3:30:97:41:4b:c1:41:da:16:a8:
         8e:a6:09:d4:2e:6e:e9:87:df:a8:ae:35:04:8e:28:5f:f0:20:
         c0:af:4d:c6:35:68:a1:06:eb:5d:26:b9:4f:d0:55:30:9f:ec:
         a9:d7:97:8d:95:5f:7d:bc:35:6f:a7:f2:2f:50:fc:61:48:f6:
         34:80:c6:e8:77:be:1b:c5:ce:7f:9e:30:86:4d:2c:12:01:ad:
         f4:bd:cc:8f:c7:dd:b7:98:29:fd:d1:47:cb:3d:b7:71:3c:23:
         44:0b:18:de:0a:d1:38:45:37:90:ad:eb:92:86:d7:33:22:57:
         94:6e:d9:00:77:4d:b9:2c:ab:bf:d0:da:69:c7:ee:2b:89:61:
         1a:0b:62:2b:b7:d3:f3:ba:0f:1c:4a:a0:58:4d:e8:05:d5:58:
         ff:24:44:d9:bf:a5:9a:61:b7:b1:46:af:16:e3:b9:90:61:6c:
         22:ef:af:83:af:cb:30:e9:ea:b9:6e:01:5d:54:3e:e2:45:db:
         7a:b1:7d:43:57:e4:05:91:af:ea:da:16:66:14:d5:2e:51:2f:
         48:24:7b:3e:23:f9:59:75:07:d7:d9:3a:4a:7f:0a:48:2c:0c:
         bb:18:58:d1:6d:33:be:39:a5:75:45:8e:5d:d2:f7:c7:78:24:
         c5:64:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:49 2025 by rpki-client