Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File:                     vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier:          yX01LqhlnhgDONawpqBxJ7G9vhwfQZuzuNXB431iU+k=
Subject key identifier:   98:35:E6:09:CA:D7:34:21:0C:B2:4B:F1:BF:39:F8:C4:C7:99:03:73
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer:       /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial:       0198D73BD31C3E6245FEF413613A9567FBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number:          1218
Signing time:             Sat 23 Aug 2025 14:01:18 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:18 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:18 +0000
Files and hashes:         1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
                          2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: WQIE6IxI6XUl/jx2jXZ0abrU/2HQ7iU9+P0SnePILIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:d3:1c:3e:62:45:fe:f4:13:61:3a:95:67:fb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
        Validity
            Not Before: Aug 23 14:01:18 2025 GMT
            Not After : Aug 24 14:01:18 2025 GMT
        Subject: CN=9835e609cad734210cb24bf1bf39f8c4c7990373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:69:64:dc:fb:e5:1f:59:3a:66:b4:2e:47:
                    29:46:03:cf:31:1c:ab:09:51:3e:ed:f3:3e:0e:2a:
                    36:40:92:be:3e:79:e5:97:dc:fd:d3:76:94:26:40:
                    07:98:7d:a1:44:6f:ae:1c:eb:c5:dc:11:02:60:20:
                    68:fa:44:c7:cc:68:7c:f6:18:ad:a8:38:48:a3:21:
                    31:95:b7:dc:72:35:48:5f:5a:db:2d:9d:18:e8:e1:
                    5e:6c:7a:99:3c:47:fa:0e:ec:65:ba:82:a1:db:a0:
                    84:f1:c7:f2:77:11:68:27:d0:e5:46:7d:03:ce:0a:
                    88:04:86:41:cd:3f:b1:f4:b3:6c:89:0e:6d:f0:4f:
                    8a:6c:7c:26:9e:b5:1b:b4:63:a9:90:eb:99:ee:dd:
                    ce:1e:bf:3c:c5:b9:d5:fc:47:c1:2a:d1:ac:6b:79:
                    ad:53:21:87:c1:51:29:94:65:19:9c:13:50:81:43:
                    6a:fa:ce:64:c0:62:54:05:5c:8c:98:49:68:e0:6b:
                    66:6d:15:8e:ea:78:f4:e9:38:be:96:13:fb:98:49:
                    4d:99:40:39:0d:d2:3e:5e:9e:29:02:56:e2:a1:40:
                    fc:62:d9:88:0e:dd:7a:46:ed:69:14:78:52:23:a8:
                    0c:f5:93:3e:f7:53:9d:e2:80:02:c1:cf:7d:52:ef:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:35:E6:09:CA:D7:34:21:0C:B2:4B:F1:BF:39:F8:C4:C7:99:03:73
            X509v3 Authority Key Identifier:
                keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:08:f6:10:0f:f8:ba:1f:57:f6:04:17:49:30:b6:d5:d0:
         90:aa:e3:8a:fe:30:fb:0c:41:ec:ec:52:08:9f:fd:88:19:ae:
         65:b2:4e:f4:0f:b1:30:17:78:57:5c:5d:ac:08:2d:43:b0:7f:
         63:f4:5c:73:49:a6:9d:11:82:3a:d8:ae:ec:09:0c:47:7b:df:
         14:d8:83:28:fb:d0:11:97:22:33:4a:9b:6d:7a:af:a1:d6:26:
         f9:71:86:95:b9:2f:1a:69:d4:f3:1b:6a:e0:33:4d:86:99:5e:
         85:8f:a3:2b:41:e5:b6:dc:a5:e5:cb:ae:c1:7e:60:2d:fe:cd:
         27:8c:02:56:79:d5:13:35:60:05:cd:5e:fd:cd:22:c3:8c:7d:
         7f:8e:84:f3:ea:d4:ad:ef:4f:7d:80:f1:1f:bd:a3:d0:cf:88:
         ee:35:a2:0e:0a:87:a3:d0:01:9d:da:17:e2:ac:cf:48:6e:b2:
         ba:ee:90:a4:19:63:c5:a3:96:b8:71:92:17:76:3a:76:56:4f:
         f0:15:75:69:73:47:24:4b:8d:99:f2:51:67:81:1b:5f:74:7f:
         35:50:6a:4d:5f:52:ac:ec:53:0c:1f:ac:fe:f9:4d:f1:a1:b7:
         8c:46:d1:6c:9d:7b:de:3a:0b:04:ac:b5:ee:31:fa:c9:aa:ca:
         c9:ab:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:21 2025 by rpki-client