Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
File:                     vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json)
Hash identifier:          TF+7jTNje2zuhfeg3PTK1cLxGokr7rvR4Irp8zG/Mro=
Subject key identifier:   71:17:2C:B4:F4:B5:21:23:12:F7:1C:37:78:81:9A:EF:CB:E6:66:97
Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52
Certificate issuer:       /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
Certificate serial:       019848898E397966B083D560015785FBA27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 21:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:31 +0000
Files and hashes:         1: 9VwiwUj_IGIUqg4ye8UxAOO6D9Y.roa (hash: NnxEfPp852isbiSy7sr8rgaQ1hDoY4s+bvfFdDqg9W8=)
                          2: S5K9sZSxJuICsnYh9DHsHhGYg9w.roa (hash: aaqMsXzi9m0Tt1MG99Oy7OnBJX3zKsmFv/eQfpWMk2I=)
                          3: v2m_c-UZBbM4tqAg4W1Obv9Rnn0.roa (hash: d3kQ/0S0OM1P8L+mkERLRrrDIpjPhVXyTCSgVSXYQO0=)
                          4: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: jxPPqHNRXIXVb+nQV/iCbDsd5HFWYQzcc9LS9Gv9Feo=)
                          5: vdFR4y9F44FSjYAGCMTNGAkn55s.roa (hash: kapPC5BZzOsMFj/r/PWqmKyQ2wL4stabpvweUd2gaq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:8e:39:79:66:b0:83:d5:60:01:57:85:fb:a2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752
        Validity
            Not Before: Jul 26 21:00:31 2025 GMT
            Not After : Jul 27 21:00:31 2025 GMT
        Subject: CN=71172cb4f4b5212312f71c3778819aefcbe66697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:12:df:df:64:d9:c1:bd:ec:96:03:d9:e2:eb:
                    0b:23:5c:aa:fa:13:d4:f3:5e:59:95:c5:67:af:6b:
                    0e:15:76:95:bc:a1:de:39:72:b0:8d:7b:b0:4f:6b:
                    d1:4d:9d:b9:66:ef:f1:f0:46:21:62:ea:de:bf:86:
                    3b:3d:d6:48:0b:aa:21:18:17:78:b0:7c:82:fe:ce:
                    a3:fd:fb:8c:25:29:53:e3:f7:75:26:30:75:01:fa:
                    bb:42:9f:a7:53:4a:77:d7:b0:f4:c3:17:7b:e6:55:
                    6f:8f:eb:5d:1a:eb:96:5d:4b:8d:3d:5b:a9:68:38:
                    da:bc:05:69:34:71:23:da:60:b5:3b:5d:79:5a:aa:
                    7b:fa:4a:2d:0a:fb:56:e3:61:78:e2:39:d5:19:37:
                    c4:88:2c:58:4e:80:10:f4:2b:fe:64:69:95:61:56:
                    94:e2:b6:1a:18:19:e4:97:b6:bb:bd:8c:50:88:b2:
                    af:1a:ff:35:ae:6c:6b:e7:3c:30:93:22:02:e5:6e:
                    c3:41:70:4c:42:de:b4:8f:a3:99:f7:58:d4:25:4f:
                    2b:a3:9c:5b:5a:ab:3f:f3:c4:25:d8:c7:7d:8f:a1:
                    0b:ad:60:1c:f3:68:b2:ad:3c:b8:89:b0:85:bd:2c:
                    83:98:45:c5:07:d2:2c:a8:c0:4a:b8:b3:90:6b:5f:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:2C:B4:F4:B5:21:23:12:F7:1C:37:78:81:9A:EF:CB:E6:66:97
            X509v3 Authority Key Identifier:
                keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b9:30:5a:0e:ec:4c:74:5f:4f:f5:3f:49:31:c7:ec:5c:2d:
         61:35:17:d7:87:e7:14:25:6c:b7:39:dd:7a:09:9e:ee:34:f8:
         eb:1e:4f:b9:4b:01:a3:84:45:a4:c1:53:47:f4:93:49:ae:90:
         3f:dc:f5:52:d8:77:8a:80:b8:ef:f1:dd:17:60:2a:fb:82:6c:
         8f:e7:43:09:72:ac:21:c3:20:ef:72:ce:df:00:b1:e7:bf:87:
         6a:81:01:69:1d:ba:32:02:d7:cf:4c:fd:5d:ba:43:a3:82:f0:
         85:68:1e:3e:69:ee:c5:7c:c9:74:0e:a2:fa:41:be:33:ca:15:
         00:4e:44:19:da:32:03:0b:29:72:4a:07:5d:49:a6:2a:14:5d:
         7b:00:41:5d:26:35:3f:2e:de:3c:6d:19:20:dc:0c:e3:fc:9c:
         d9:c2:1c:89:e1:89:49:9f:2f:56:e8:d4:a5:34:00:da:64:22:
         55:5c:9a:85:d7:e0:84:4f:ae:4c:b6:60:a8:66:00:c7:d7:8c:
         32:ea:f9:24:3d:7d:a8:94:6f:05:8c:c2:28:dc:f8:5d:0a:21:
         4c:6f:44:5f:ab:75:84:2c:4b:d7:88:25:40:4d:e7:43:b5:4b:
         70:f1:1d:94:13:2e:79:68:3a:b0:f6:a2:3e:49:3f:05:07:95:
         b8:a7:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:56 2025 by rpki-client