Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File:                     va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier:          376MWfKeR7UjThqQDPIgBQYr9rQoR7GyLlaEF+l/F/8=
Subject key identifier:   CA:37:19:EC:92:32:DB:B6:61:50:0F:D5:B5:B1:65:8F:76:18:C8:02
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer:       /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial:       0198D6CD98C3633635E77533922DCCEBDCA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number:          0873
Signing time:             Sat 23 Aug 2025 12:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:54 +0000
Files and hashes:         1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
                          2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: nESlATmkidrvITYm+jK0AQlCeG1PhluXkh+eakK07zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:98:c3:63:36:35:e7:75:33:92:2d:cc:eb:dc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
        Validity
            Not Before: Aug 23 12:00:54 2025 GMT
            Not After : Aug 24 12:00:54 2025 GMT
        Subject: CN=ca3719ec9232dbb661500fd5b5b1658f7618c802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:0c:be:3a:de:a3:e0:41:04:3c:b6:a4:e4:
                    b0:ec:05:d9:8b:56:60:bd:32:a2:04:48:be:6a:93:
                    5e:11:98:01:ab:ea:fa:49:c6:d4:36:38:84:ef:ae:
                    09:7a:3f:26:1d:46:5a:ac:5a:86:c7:ef:42:7f:17:
                    13:67:aa:a0:47:15:f2:5a:06:3c:f2:e7:2d:4d:1b:
                    5f:28:5e:78:38:e2:7c:ae:61:be:ef:9d:15:93:24:
                    48:8c:24:e5:9f:dd:7e:83:28:7e:63:de:f1:13:49:
                    38:a0:6c:9f:fa:33:83:92:10:89:7a:64:57:b0:45:
                    d5:b3:dd:53:eb:6c:2c:0e:b9:f2:55:4e:35:cb:2b:
                    29:89:c7:e9:6c:cb:06:07:f9:c6:64:c1:bb:f2:8d:
                    8e:30:ea:f9:93:7c:d4:73:5c:6d:03:21:74:2f:ea:
                    86:6e:fa:20:18:3b:d7:6f:da:93:6b:75:ae:e2:5a:
                    41:29:60:37:d1:cb:8e:48:b1:c9:a3:a0:84:80:c4:
                    ca:d4:03:bd:47:78:92:b7:b7:4d:fa:62:bb:0c:49:
                    8e:84:3f:5a:84:f8:82:1c:08:93:75:82:de:89:44:
                    45:22:c2:ad:b1:5a:48:3d:35:11:f1:2f:b2:1e:a3:
                    89:88:cd:8f:b2:b7:11:28:f0:62:8e:1b:c3:4d:85:
                    b6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:19:EC:92:32:DB:B6:61:50:0F:D5:B5:B1:65:8F:76:18:C8:02
            X509v3 Authority Key Identifier:
                keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:fb:d0:8a:10:ea:db:2d:be:a3:75:e1:7a:1f:41:84:13:
         a4:0f:f5:00:90:1e:93:10:5f:9c:a9:5d:27:4d:ba:e6:4e:e7:
         1e:0c:33:3f:86:ef:f5:1b:73:4e:46:84:a7:e5:e9:a3:70:f0:
         e9:8b:61:36:5d:db:cd:7f:df:b4:eb:7b:72:7c:9e:b6:6f:fe:
         97:4a:0d:fc:f8:70:0b:89:c5:af:b8:42:ea:7f:20:ed:f9:4e:
         5d:89:45:f9:4b:01:35:3c:cc:54:d0:d4:79:67:3f:d3:f4:08:
         cf:63:5c:04:8e:fa:0b:b8:99:0d:73:20:7d:00:e5:52:95:16:
         00:34:0f:99:d4:1d:ca:58:b5:0c:2c:83:f0:ed:62:0d:0c:c6:
         70:6c:62:35:06:b4:bd:db:64:33:44:e8:49:47:22:d9:d5:de:
         4a:9f:d8:22:3b:3f:9f:69:ac:65:11:54:92:97:40:76:48:1a:
         18:61:74:b3:77:69:fb:a6:58:77:42:ba:c1:0b:58:10:1e:21:
         67:e9:89:2b:8b:88:7f:c6:ee:58:56:58:c8:3f:47:01:63:47:
         35:20:e0:01:60:73:e7:3b:04:61:22:6c:0a:9b:6d:6a:e7:cf:
         cb:78:17:c8:08:60:84:ec:12:94:55:ec:43:35:f5:62:91:13:
         8a:8f:c3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:03 2025 by rpki-client