Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          O76/J0TDHYuKuWCnNRdjFP095eHwWypWJK+Ox1wsVkk=
Subject key identifier:   B3:09:30:37:BE:D5:6A:F8:B6:6B:0A:75:89:A4:DF:A7:F6:4E:ED:C3
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       0198D5BBB5EAAE49FF07BB742E25CE2C4481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          1467
Signing time:             Sat 23 Aug 2025 07:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:45 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: HxFXFRQgBN9e+/+k7D2uxuP6YpJ1x3pCA/2Ugi1KQFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b5:ea:ae:49:ff:07:bb:74:2e:25:ce:2c:44:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Aug 23 07:01:45 2025 GMT
            Not After : Aug 24 07:01:45 2025 GMT
        Subject: CN=b3093037bed56af8b66b0a7589a4dfa7f64eedc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:21:df:22:4c:72:c1:45:c4:df:4e:97:30:
                    f0:82:49:96:82:60:32:ed:7e:8f:11:b5:c6:37:8f:
                    b8:7a:93:a7:80:32:61:bc:cd:2b:4b:20:70:0a:a5:
                    51:74:bc:9e:dd:54:0a:57:da:43:30:fe:6f:f3:35:
                    42:f8:a4:6d:ee:cc:82:28:c6:44:37:bb:1b:f4:6a:
                    79:d1:f4:dd:30:88:48:1d:a1:48:0b:e2:01:2b:c1:
                    1b:d4:75:41:dd:70:61:28:ec:a8:52:25:67:c0:c2:
                    e7:30:83:56:f3:98:bb:32:ff:40:47:ea:bd:59:d8:
                    07:a4:d0:79:e8:6b:f1:33:d7:64:cf:78:7d:e1:ed:
                    dd:dc:3e:53:10:08:58:6f:19:83:a8:95:94:a6:c5:
                    62:4f:ab:fa:d4:47:91:d3:0d:1e:9c:7e:8b:8e:c3:
                    7b:8f:96:4f:cd:7a:b1:ee:ed:50:76:43:c6:12:92:
                    a7:f7:3c:6f:e8:22:de:2a:ab:c6:5e:fd:a3:9d:f0:
                    48:dc:98:d5:28:c1:da:4a:71:fd:71:9f:b3:d9:a6:
                    d8:ab:26:17:1e:3d:61:f1:9c:be:4e:c2:83:f9:3b:
                    14:c8:4b:2b:f6:e4:73:61:f9:f0:ed:fa:18:ad:cd:
                    58:66:78:36:ab:2f:a2:a5:20:af:60:eb:72:dd:1d:
                    fe:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:30:37:BE:D5:6A:F8:B6:6B:0A:75:89:A4:DF:A7:F6:4E:ED:C3
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:bd:94:0e:ca:46:dd:6f:12:1c:ab:f3:5c:1d:8c:ea:5d:
         ff:9d:d8:a4:d8:6a:26:23:c9:15:1c:15:66:8c:81:a8:53:51:
         67:52:b0:25:4a:8c:e7:f1:2f:83:38:7f:73:10:0a:59:42:96:
         7e:b4:44:84:7f:71:9a:33:21:49:3e:01:04:eb:4f:b7:cf:12:
         03:3f:95:af:f2:1f:50:67:6f:20:d5:6d:83:0a:6e:54:e0:ff:
         2e:5a:e4:f1:b2:2a:71:14:25:70:3b:97:1f:ac:68:02:1f:c8:
         f3:b8:02:39:2b:35:e4:c0:64:d9:c6:96:a8:ff:10:95:15:90:
         4a:1c:ad:b5:c3:6e:ad:c0:7b:37:13:01:73:68:68:1b:4c:2a:
         88:bf:bf:34:51:97:01:96:0e:76:23:0a:6a:82:2c:fb:fa:da:
         f0:4f:5d:f6:0b:64:9c:a7:65:c4:97:98:81:03:05:a6:8a:15:
         a8:4e:a2:c5:9d:04:67:95:88:f7:a5:12:8e:3b:2b:e2:88:a8:
         5c:c2:99:02:46:af:2d:9b:2d:aa:01:ab:25:c3:b7:39:16:5f:
         f1:0e:2f:d1:51:21:6c:d0:c0:3c:f4:de:b0:9c:f4:20:73:21:
         a6:66:67:bd:f4:05:de:40:8f:f6:f8:83:57:cb:ac:0f:2b:2b:
         81:ec:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:18 2025 by rpki-client