Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File:                     V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier:          E0RDnPG4wdFMUT56PwtnRF0ACAmxGBQDcSaH0AcIL4o=
Subject key identifier:   89:9C:E5:10:CA:3F:F8:CD:6B:62:F7:82:8E:A5:5E:7C:FC:4D:A9:BC
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer:       /CN=578041152df80f6e531342663dd003109905084f
Certificate serial:       019843D12B42B31B2045B064EF3D1108043A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number:          0820
Signing time:             Fri 25 Jul 2025 23:00:38 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:38 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:38 +0000
Files and hashes:         1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
                          2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: 1NDJYT7pMgP8qIOlTmmXo9FGFgJj6il4M7oGBkTsvMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d1:2b:42:b3:1b:20:45:b0:64:ef:3d:11:08:04:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578041152df80f6e531342663dd003109905084f
        Validity
            Not Before: Jul 25 23:00:38 2025 GMT
            Not After : Jul 26 23:00:38 2025 GMT
        Subject: CN=899ce510ca3ff8cd6b62f7828ea55e7cfc4da9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:d8:92:83:a6:2b:3e:0a:36:c6:0a:1a:e7:
                    b0:a3:e8:7d:e9:61:4c:a6:37:34:f1:6c:55:b9:f9:
                    ef:a6:60:1c:cb:96:35:0a:59:b9:5f:f3:d5:16:43:
                    12:7c:34:43:3c:7b:8f:ba:d1:ad:40:f8:18:3a:a9:
                    36:fc:81:32:7c:a0:8c:23:ed:f4:97:86:b2:0e:13:
                    bf:88:0e:6c:b3:65:84:bc:4d:43:70:d7:40:46:ef:
                    58:32:b0:5d:40:f6:48:a6:ef:a9:3c:60:5a:46:ec:
                    61:35:f4:f1:85:8d:e2:c5:f2:c8:f7:4a:40:76:e2:
                    d0:b9:1f:32:ea:9a:6d:6d:d4:da:7a:8b:f9:26:28:
                    94:4d:5f:af:32:bc:98:0a:22:72:e0:93:a1:ea:95:
                    a4:a9:c5:37:01:64:67:b0:9f:ff:ea:c2:37:63:a1:
                    b9:b3:ef:a7:47:a2:b8:9d:8b:8d:3f:75:e5:cc:de:
                    64:ed:65:08:6f:ba:c2:c8:27:0b:9f:5c:96:3a:9b:
                    54:26:5c:1c:74:f2:c0:eb:84:e3:11:d9:7c:96:fc:
                    60:b2:b2:41:ec:6f:9c:75:93:40:a6:64:1d:c5:06:
                    ca:4e:70:5c:8d:88:35:92:be:6d:58:9f:61:8c:60:
                    ae:81:26:5b:23:85:3b:99:22:3c:44:c3:8a:df:08:
                    7f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9C:E5:10:CA:3F:F8:CD:6B:62:F7:82:8E:A5:5E:7C:FC:4D:A9:BC
            X509v3 Authority Key Identifier:
                keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:fa:2e:dc:ff:be:13:4a:52:b8:a5:49:4d:d7:78:b3:a1:90:
         46:ea:25:e3:a9:f0:94:64:70:38:b6:71:95:ef:45:0c:d9:4d:
         9b:f3:12:68:6f:07:6a:9d:a3:ff:db:5c:3b:66:7c:a6:c6:e1:
         19:69:b6:4e:83:e0:d2:b0:20:42:f3:e4:95:bd:36:3f:90:b8:
         c6:26:ae:aa:7f:e6:0b:c9:c0:6c:28:ca:fd:99:f3:9e:5e:c0:
         ee:85:d9:29:49:ac:eb:a6:c8:9a:fa:9c:4d:05:f5:32:b8:c3:
         c6:c4:35:10:26:06:30:dc:df:74:fa:41:c5:9d:70:d6:23:9b:
         c1:e9:88:bf:68:cc:90:00:d9:22:25:83:91:48:1c:00:71:a1:
         0b:d0:5a:43:f4:4c:35:ed:f3:da:10:0a:30:e9:d1:36:67:d9:
         e5:9c:a3:cb:f9:bb:93:aa:69:9e:b1:eb:b3:14:24:4e:bb:2e:
         b2:69:bc:68:1a:4d:7b:71:fd:32:c1:45:b0:73:3d:2d:2e:d6:
         f5:d6:43:ff:d8:f8:a4:88:99:12:46:ab:80:61:6b:c2:b5:14:
         9a:17:d1:91:51:51:db:16:c5:15:bc:e3:06:11:86:0e:2f:0d:
         ac:a8:d9:13:50:03:91:dc:a3:4d:77:6a:e6:cd:5b:67:3d:84:
         f6:d2:fb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:09:07 2025 by rpki-client