Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File:                     VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier:          1FFyLi+nOIb/iX5VLjZwAPGVIlqngoHjbba/iO08RDU=
Subject key identifier:   FE:D3:C1:42:89:75:BD:3F:98:4A:DA:C1:D3:85:D0:DF:BE:23:AC:ED
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer:       /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial:       01985456D7968EBEB3BF6B7A9D01A71F6BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number:          1607
Signing time:             Tue 29 Jul 2025 04:00:34 +0000
Manifest this update:     Tue 29 Jul 2025 04:00:34 +0000
Manifest next update:     Wed 30 Jul 2025 04:00:34 +0000
Files and hashes:         1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: 4WQRgeI8kcY1ft3i2YAJafLYAP9gl+t9MIqciXD/6y0=)
                          2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:56:d7:96:8e:be:b3:bf:6b:7a:9d:01:a7:1f:6b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
        Validity
            Not Before: Jul 29 04:00:34 2025 GMT
            Not After : Jul 30 04:00:34 2025 GMT
        Subject: CN=fed3c1428975bd3f984adac1d385d0dfbe23aced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:cc:1f:0d:69:19:ac:00:90:63:5a:56:70:
                    03:01:88:9c:ba:15:4c:9b:51:c9:56:18:f4:62:d2:
                    ba:ea:3b:2f:a4:ef:a3:87:07:df:1f:85:0d:c0:67:
                    4a:4b:77:b3:f3:9c:a5:20:15:42:bf:1d:37:db:b9:
                    69:c9:87:e4:95:22:f6:e8:48:c3:84:70:ec:b9:c4:
                    10:4c:9c:59:d6:74:73:0b:a5:6c:27:bb:57:f5:3c:
                    ab:93:e3:2d:25:c8:da:3c:29:7e:ee:f4:43:47:b9:
                    a1:d2:45:0f:44:a6:2f:2e:5f:ca:44:f0:09:25:8b:
                    17:88:74:44:d0:6b:8d:b3:68:41:9e:0e:28:14:66:
                    50:d3:ca:1a:02:e3:05:37:2f:15:ac:15:eb:09:63:
                    56:ab:a5:aa:ae:9c:89:62:d6:2b:dd:64:7f:85:40:
                    97:5c:44:ab:b5:72:cf:57:25:89:46:ed:29:d3:02:
                    5e:78:f6:47:00:06:f3:73:eb:ec:3d:54:5d:e0:fc:
                    4c:85:99:72:52:18:d2:21:97:4e:5c:af:bf:7b:91:
                    6a:5e:33:82:20:db:62:f3:73:65:7b:68:6d:65:25:
                    16:36:6d:36:51:0e:1a:c9:21:4d:c3:bd:d8:d9:29:
                    c6:49:11:60:16:5a:3f:0f:d3:a7:41:46:a7:e4:7c:
                    b4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D3:C1:42:89:75:BD:3F:98:4A:DA:C1:D3:85:D0:DF:BE:23:AC:ED
            X509v3 Authority Key Identifier:
                keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:b5:d5:4c:e6:6c:e2:e7:c9:17:94:87:e2:8f:79:dd:81:
         85:4d:b0:99:48:97:1f:f5:ef:b3:7f:01:0b:f8:ca:72:a7:8d:
         dc:a9:fb:02:87:65:92:24:2a:c4:74:1c:98:9a:d5:c2:f1:29:
         2e:0b:be:df:c8:33:31:d4:06:9f:8b:1c:61:68:69:fd:75:98:
         12:86:61:16:fe:69:06:b5:6e:69:fe:51:5f:52:8a:ee:5a:48:
         eb:6c:6e:b3:2c:a8:7e:c8:28:6b:cb:72:87:20:dc:54:1d:fe:
         e5:4d:7e:5d:51:e6:a9:d7:9e:77:59:38:73:ee:79:af:3c:75:
         cd:bb:93:7a:b4:e7:74:54:75:a5:53:e1:b5:93:f6:ab:c3:b5:
         af:65:47:c5:e8:bb:47:97:3c:57:4d:49:22:4a:cf:b7:f8:86:
         09:a5:b8:70:8e:f1:f1:0e:f8:f3:0c:2c:30:96:20:ee:a5:d4:
         7a:db:7f:4e:60:ba:79:81:34:88:c7:ff:53:8f:15:03:ec:02:
         3a:f7:b3:af:71:da:8b:fe:1c:1c:b1:df:3e:8c:84:07:91:69:
         9f:d0:6b:fe:48:0f:52:18:25:21:10:d0:8a:93:9e:ba:13:5e:
         3c:e8:e5:0e:59:48:31:58:12:c2:9e:a0:d0:bf:f5:e7:9e:14:
         c6:36:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:37 2025 by rpki-client