Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File:                     VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier:          ShP8wNngiTCAsczYU0wSwRHnl25Mo8pwZckHLz8QM0c=
Subject key identifier:   1E:9F:7C:10:FC:11:28:35:7D:D2:E8:95:8E:F6:E0:54:6D:FF:EB:A8
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer:       /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial:       01984B8A84B526D44E12B45C7E0C15E70F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 11:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:25 +0000
Files and hashes:         1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
                          2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: aG5OGOoCI6pDyiQVv5d5qY7NB9kGJQJ0L56hBkMusqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:84:b5:26:d4:4e:12:b4:5c:7e:0c:15:e7:0f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
        Validity
            Not Before: Jul 27 11:00:25 2025 GMT
            Not After : Jul 28 11:00:25 2025 GMT
        Subject: CN=1e9f7c10fc1128357dd2e8958ef6e0546dffeba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:9c:61:52:c3:cd:0c:a6:de:76:aa:11:40:
                    2a:eb:85:9a:b3:b6:46:35:d7:02:37:8e:d0:fc:4c:
                    d5:d6:14:35:e2:53:b5:47:ea:d1:ad:f0:7f:c0:a8:
                    f4:21:ea:dc:10:03:99:19:05:54:3a:52:a5:a1:0d:
                    88:2c:5e:98:57:37:db:e0:1c:fe:1e:d8:79:6f:9b:
                    db:aa:cf:c3:d0:88:43:25:dc:98:59:f0:57:be:de:
                    8c:94:57:76:ef:3b:51:15:2f:8f:d6:34:fc:6d:c2:
                    04:8d:2c:e9:68:a3:02:05:89:47:b3:95:f0:78:3b:
                    66:c5:8c:a7:2d:6c:c4:af:6b:72:62:4c:07:c3:78:
                    53:35:64:8c:2b:32:bd:e9:2c:2f:56:c3:e8:38:e6:
                    67:4b:30:0d:74:5f:95:00:e8:54:f6:09:6d:1f:2c:
                    bf:92:4d:f3:c4:9b:f5:40:47:37:45:b7:1f:0f:5f:
                    2c:7c:92:41:0c:93:30:81:5a:25:93:93:2b:1a:85:
                    74:d6:22:4b:41:d9:21:45:7e:1d:b9:08:25:3e:7e:
                    9a:ce:cb:6e:c2:55:f9:e7:70:bf:93:3e:a3:c0:f2:
                    30:58:f4:dc:5d:c5:e9:3b:4a:77:ac:1d:a6:89:0e:
                    37:b4:61:06:93:4e:60:1a:14:44:77:ad:e3:f8:9b:
                    43:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9F:7C:10:FC:11:28:35:7D:D2:E8:95:8E:F6:E0:54:6D:FF:EB:A8
            X509v3 Authority Key Identifier:
                keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:88:0a:66:25:14:8e:67:87:c7:26:36:0f:4d:1a:3f:ce:50:
         d2:93:8e:23:e3:d9:6b:20:2c:6c:5a:d3:f8:83:ff:88:c9:1d:
         4a:43:d4:0e:be:8d:c1:30:7c:62:52:fd:6a:58:50:85:2e:b2:
         d0:cf:29:05:d9:ec:8e:c3:5f:a7:7f:06:38:26:36:a3:b9:f0:
         2e:03:d7:b6:56:bc:01:07:78:9a:1c:2e:da:bc:e6:5c:c8:89:
         c8:b7:10:f5:6b:e6:da:8c:8a:64:11:b0:ed:9d:a0:26:69:6d:
         02:ad:c2:47:fa:f2:71:23:1f:a7:04:f8:4d:50:35:29:27:74:
         cb:c0:5a:1f:24:c5:d6:0a:b2:bc:c8:b2:99:64:31:3d:b0:e3:
         8d:de:3a:05:4b:ca:c8:19:4b:4e:06:c5:8e:c2:f7:fd:fa:6a:
         d0:ff:a1:54:2d:e4:a9:61:57:69:63:4a:ac:50:48:92:09:d3:
         a3:49:0c:dd:81:5a:44:35:30:d2:19:08:3c:52:d6:d7:f5:1f:
         b7:7d:1f:d6:2d:5a:b9:d0:c7:98:ad:5c:03:58:d9:96:09:0f:
         58:9b:72:b3:f2:a3:bb:dd:39:97:31:95:f4:03:2a:8d:e5:79:
         5e:1c:ca:8b:3d:c1:19:ef:f8:42:b4:a1:f8:fd:c2:bb:8c:34:
         1c:d6:b0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:35:06 2025 by rpki-client