Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File:                     vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier:          UOiP5oJGtYPZKnyK0x4uwUxKPlxlkkrGrRaFnAPg1VM=
Subject key identifier:   FE:13:0B:F2:E2:14:55:74:5B:47:2A:A4:6F:D7:96:E7:1B:FB:7B:A0
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer:       /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial:       0198499BFFEEB79784683B74A84759BFFEAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number:          0B65
Signing time:             Sun 27 Jul 2025 02:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:16 +0000
Files and hashes:         1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
                          2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
                          3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
                          4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: SleEdQypRfrYhX5ew0SSuwNP58Bz2lnwWv3uGkCS2Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9b:ff:ee:b7:97:84:68:3b:74:a8:47:59:bf:fe:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
        Validity
            Not Before: Jul 27 02:00:16 2025 GMT
            Not After : Jul 28 02:00:16 2025 GMT
        Subject: CN=fe130bf2e21455745b472aa46fd796e71bfb7ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:14:db:fa:83:91:c8:a0:97:2f:37:bd:da:08:
                    ac:27:07:e7:c3:4b:e9:a0:9f:57:8c:ac:3e:37:eb:
                    f5:1d:41:ef:57:4a:09:4a:c2:70:4b:da:c6:09:c8:
                    3e:e7:e8:5e:59:a4:3a:9a:9f:bf:b1:df:4d:de:8e:
                    d9:61:01:d4:68:88:d9:c4:bf:d2:f5:ae:a4:cb:5c:
                    44:3f:f6:d9:1f:a2:49:33:b4:d5:62:6e:b9:3a:26:
                    06:3c:54:f7:f7:8a:10:8f:06:79:b0:5b:f6:37:de:
                    a4:40:70:8c:43:c4:16:db:d0:d5:bc:b8:6d:4e:cb:
                    40:58:0d:94:b2:fb:84:cb:cc:e9:65:df:64:ee:69:
                    c8:0d:00:e6:84:15:38:f6:b3:de:f1:56:97:94:84:
                    0d:a5:77:8f:43:b3:a0:f0:a5:88:2a:1a:6b:31:b9:
                    15:4f:e8:0f:ed:63:34:fe:6e:6a:ab:bf:b6:3b:3a:
                    1e:b7:15:8f:61:2b:5e:90:86:8e:f9:86:23:b4:59:
                    8a:be:42:4d:32:13:ea:fb:86:ba:59:7f:5c:01:de:
                    b4:d8:bd:ed:6e:64:b7:58:33:68:ce:6a:bb:dc:a7:
                    7a:b4:14:71:53:e3:9a:3c:72:f8:74:59:d6:f9:fe:
                    2f:df:0c:85:d5:dc:de:54:06:7b:97:32:c9:ce:78:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:0B:F2:E2:14:55:74:5B:47:2A:A4:6F:D7:96:E7:1B:FB:7B:A0
            X509v3 Authority Key Identifier:
                keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:69:14:4f:dc:1f:9d:7c:93:53:7d:6a:1f:e4:ad:95:ff:95:
         d9:82:2e:c0:66:54:e3:c6:86:e4:5b:a9:82:10:39:fc:b7:09:
         ff:67:d3:3b:db:28:94:d4:57:b4:d2:44:d8:c2:7b:3d:d7:c1:
         1b:f9:23:d9:81:14:d8:43:dd:c2:11:d6:1f:c3:a4:a7:b1:db:
         1a:95:18:af:3a:37:75:50:9e:ec:04:eb:ec:d9:91:6e:9a:20:
         00:63:3e:03:cd:e7:2d:4a:ce:3f:ae:79:f7:ef:11:5a:b3:02:
         79:0e:cc:99:eb:06:3e:59:f2:5d:16:8e:31:8c:10:0d:2c:b0:
         f2:ea:0d:59:84:d4:97:42:dc:f9:aa:4c:3c:99:34:80:e8:49:
         6d:7c:da:21:6e:df:82:d5:2a:6d:43:0e:af:b3:8b:b7:5a:9b:
         69:ed:75:d5:7b:8a:6f:5e:ee:18:7f:a3:2a:be:6a:ea:7b:00:
         6c:b4:83:73:ea:6a:14:81:32:ce:26:42:63:3e:56:f3:3d:61:
         55:b8:f3:ad:1b:fd:b8:cd:92:a7:50:28:a0:0a:33:b0:eb:3f:
         f1:de:d8:ee:ea:0a:4f:ca:fd:b6:7e:3b:2e:cf:13:8b:d5:fb:
         07:7d:11:c9:db:8b:25:82:8b:3e:4b:8e:9e:dd:1a:61:4c:e9:
         e5:4a:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:22 2025 by rpki-client