Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          F4Eavkvo0TnuoxkHSk3hUy40Y6X5SFyTIZo0EBUpCuA=
Subject key identifier:   F8:FB:86:4B:A2:62:CD:70:F1:A9:F1:7E:1A:B3:EF:27:D8:3A:42:6B
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       0198D4E0CF634B32D6CDD66291054E4DDD79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          B4
Signing time:             Sat 23 Aug 2025 03:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:39 +0000
Files and hashes:         1: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: PLl7wNx8WUYe0Z2mfZ51ev/cURNRG2pZPk3k43ueTXU=)
                          2: w9nvjOWk8C3C6okM2fJbltiz6Ts.roa (hash: cpGlnXUiTmun4rJ5XWY0h3JOGdRAWAFOUtSEsrbjwUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:cf:63:4b:32:d6:cd:d6:62:91:05:4e:4d:dd:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Aug 23 03:02:39 2025 GMT
            Not After : Aug 24 03:02:39 2025 GMT
        Subject: CN=f8fb864ba262cd70f1a9f17e1ab3ef27d83a426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:33:3f:46:60:55:e6:73:03:17:04:81:9c:
                    a8:42:29:5f:ca:a5:46:54:67:e5:7e:1f:75:4b:b6:
                    1f:f4:85:72:5c:41:08:35:d3:9c:20:be:2f:34:1d:
                    48:6a:05:cb:99:4f:6b:16:09:5a:71:47:4b:69:00:
                    bd:da:b1:66:36:47:ff:aa:11:42:53:cf:79:88:1e:
                    55:c0:6a:f5:80:b5:0c:19:bb:0e:15:b0:bf:39:92:
                    69:60:52:be:5f:f1:67:f4:03:d1:fd:4f:81:e7:d5:
                    87:56:ed:7a:38:97:a7:d2:a7:64:8a:fa:48:15:a2:
                    48:52:f4:1c:56:58:e9:2a:ea:ce:43:33:4c:2b:1d:
                    ad:7e:c3:21:24:ec:a8:56:43:aa:ff:5c:06:e7:61:
                    71:5f:ca:cf:19:f5:cd:af:d6:92:d9:4c:9c:b8:40:
                    a8:82:9c:54:51:64:e6:c6:64:ff:74:d1:11:3e:28:
                    8e:7d:72:e1:78:7b:d3:22:f0:de:6e:7e:4c:b8:10:
                    c8:7b:70:7e:5d:12:81:1d:bc:69:33:4e:0a:f2:67:
                    e1:a9:3d:8f:61:f5:f7:e7:3a:ef:7e:ec:84:ca:f0:
                    08:31:8f:63:43:f8:7b:98:f3:8a:ad:f3:26:b8:ba:
                    7a:29:b3:52:58:f5:36:cf:79:9d:34:d6:66:92:98:
                    d5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:86:4B:A2:62:CD:70:F1:A9:F1:7E:1A:B3:EF:27:D8:3A:42:6B
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:51:1b:03:ac:8d:9e:6d:e7:39:95:5e:e2:0e:51:be:f4:
         4e:f3:d7:65:31:f9:87:1c:e6:81:d2:62:72:d4:a2:66:17:6b:
         14:10:ef:d7:17:4e:52:1b:e8:38:9d:6b:5e:ec:1d:7d:97:fc:
         91:cc:b3:73:72:87:c8:f6:47:53:2b:d3:fa:26:68:53:ba:c6:
         95:9c:bf:4f:ea:75:87:b3:a3:cf:4e:55:07:75:54:56:5c:73:
         b6:c8:29:76:14:61:8d:61:59:3d:2a:86:55:00:3b:a0:a6:96:
         d1:12:06:a4:2b:7c:ac:03:b8:4a:6e:d2:6c:71:d0:bd:eb:2c:
         16:a2:0f:68:1c:6c:32:a0:15:9d:80:3a:dc:3e:f1:91:10:d7:
         f9:c2:33:d2:e9:2d:56:69:f5:6e:b3:22:5a:1e:9d:2a:02:07:
         7f:06:be:9c:9a:49:ee:22:c8:1d:77:d7:92:5b:4a:b7:08:25:
         65:b0:6c:55:24:b6:2d:49:63:53:07:a9:1d:5f:70:4d:f0:47:
         d6:74:73:8f:9e:55:0e:98:5a:02:95:7e:83:e8:56:6d:c7:f4:
         03:8b:82:21:de:aa:49:60:08:23:35:ac:02:ad:ac:a8:e9:23:
         85:a4:8f:c0:f9:a6:02:76:52:21:72:45:fb:9a:eb:37:d6:68:
         94:e2:12:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:18 2025 by rpki-client