Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          33hX+2Z1Jmn2l+bRYWGimkai97QyLZl4ORKVfzArUpU=
Subject key identifier:   78:02:BD:A9:71:19:E4:3D:94:5F:84:37:4F:D5:FF:24:29:B8:AB:87
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       019849D2D85D8505B70DA4E2942CD25A92EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 03:00:11 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:11 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:11 +0000
Files and hashes:         1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=)
                          2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: KbTArUAF0GtFos+nwYnAq3rBq203/7kakgjVEi7EhZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:d8:5d:85:05:b7:0d:a4:e2:94:2c:d2:5a:92:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Jul 27 03:00:11 2025 GMT
            Not After : Jul 28 03:00:11 2025 GMT
        Subject: CN=7802bda97119e43d945f84374fd5ff2429b8ab87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:c7:03:82:a2:f9:24:3e:b1:2a:1e:3b:79:
                    e3:ae:3c:92:9a:c9:e7:86:53:11:2e:8d:5b:53:13:
                    f9:77:de:75:0b:0d:ce:23:71:5d:a9:ce:f3:fd:17:
                    a3:76:2e:bb:87:cd:3d:bb:0a:97:7f:c7:a1:a1:3a:
                    ef:8f:8a:27:7a:96:fb:6e:05:78:6f:e5:98:1e:cd:
                    c0:8c:57:eb:26:ef:a7:d3:f6:50:3a:77:a7:a9:18:
                    32:ae:74:3c:2d:9d:a1:cb:7c:a5:bb:87:42:e0:e5:
                    1c:49:1f:89:8e:d8:35:f3:7e:53:d5:e9:6c:05:f4:
                    25:7f:d9:0e:1d:51:18:b8:2f:07:40:83:41:29:f8:
                    d2:41:59:4a:65:48:7a:b8:b1:4e:87:46:fb:d6:25:
                    fa:82:a4:81:65:ed:b9:a4:f9:5d:f0:5b:b8:cf:00:
                    1d:a3:04:50:c7:5a:bd:b4:b5:74:5a:10:a3:af:7b:
                    1f:cb:72:e2:e5:b6:e1:85:6d:62:6e:e4:bf:12:7e:
                    5b:05:0e:63:50:2a:b1:5c:1f:02:6b:01:3d:ae:61:
                    7d:44:f4:4c:0d:37:e3:55:34:e2:8d:a8:52:29:31:
                    4b:df:c7:f4:86:2b:97:72:ce:01:9e:f0:14:12:ba:
                    8a:2f:38:ab:f4:fa:51:cd:c6:b7:0a:2b:3c:38:65:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:02:BD:A9:71:19:E4:3D:94:5F:84:37:4F:D5:FF:24:29:B8:AB:87
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:54:10:12:94:c6:cf:a9:8f:51:88:3e:ba:f5:a4:ba:ea:
         fd:93:83:28:2e:c6:fc:86:41:03:1b:c0:6f:bd:ab:80:c2:48:
         0a:39:7f:17:5d:5f:82:bd:5f:6b:5d:55:c3:30:33:6c:7c:08:
         0b:9c:f2:49:26:26:5c:c5:46:b3:45:e8:e6:51:57:a2:96:44:
         6a:88:a6:e1:98:c5:4e:84:85:5b:98:a5:f8:7a:6f:5b:77:b5:
         cc:e1:b7:24:9d:22:91:d4:1a:79:ea:39:71:f5:b1:bc:e3:4e:
         f4:bb:59:90:55:a6:97:00:bb:7c:56:bd:8d:ed:da:4f:c6:43:
         d2:e1:9b:ad:b5:71:60:fe:ff:a5:c1:c7:32:ed:05:ec:32:c2:
         35:6a:ef:c6:d5:cc:be:ad:27:c7:84:b5:5b:6c:1e:27:6b:65:
         a1:84:85:74:7f:75:50:f6:ab:41:1e:4a:8e:b7:e1:82:83:9d:
         ab:cc:1b:fc:4d:4c:89:e0:29:23:97:dd:85:c6:78:79:8e:a7:
         a5:1a:80:0f:36:f0:a2:b6:4e:ac:72:42:da:3a:7d:2c:1b:0b:
         bd:f7:94:a4:d2:82:2b:9a:83:2e:4d:b5:02:43:c5:af:6d:0c:
         24:12:f8:f0:dd:3d:1c:df:34:82:7e:df:2e:a0:08:c5:7e:65:
         2a:00:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:27 2025 by rpki-client