Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          baeZpHtzPgNj9MFZOF5jlehyD6b2ea7bf4ULBitz2KI=
Subject key identifier:   34:2D:25:9B:79:77:C6:5C:8A:3D:36:76:13:3D:DB:36:E9:73:C8:8E
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       01984E8C0AC351F2D9F766BF84293E8BD55E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          02C2
Signing time:             Mon 28 Jul 2025 01:00:57 +0000
Manifest this update:     Mon 28 Jul 2025 01:00:57 +0000
Manifest next update:     Tue 29 Jul 2025 01:00:57 +0000
Files and hashes:         1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: DGaAGCwdxyepVk2GrVTSpT5sSFy+2tXL/iK/2Ue/pQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:8c:0a:c3:51:f2:d9:f7:66:bf:84:29:3e:8b:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Jul 28 01:00:57 2025 GMT
            Not After : Jul 29 01:00:57 2025 GMT
        Subject: CN=342d259b7977c65c8a3d3676133ddb36e973c88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:55:97:98:ba:4d:12:8d:b9:a1:43:14:f8:
                    a5:05:0f:f6:60:85:04:07:28:e2:6d:69:de:77:82:
                    1a:ee:9c:38:81:20:20:49:77:2f:03:3d:37:33:52:
                    79:42:38:bd:74:ba:22:cf:95:cc:b7:66:c9:c5:f9:
                    a4:c4:0c:e4:1a:eb:49:f6:9f:30:56:fd:f9:e0:57:
                    9f:be:b8:61:72:b5:72:5b:e7:65:a0:a8:d9:ee:76:
                    03:94:db:80:0b:cc:ed:b7:af:63:f9:a4:86:2d:a8:
                    8a:c2:a3:e7:10:a0:c0:77:74:3d:7b:79:f3:ba:75:
                    0b:8c:41:99:0c:f1:27:94:8a:e5:d1:ca:54:b2:88:
                    4a:f6:c9:13:ab:a0:83:d1:56:79:b6:26:eb:4f:90:
                    3b:e7:3b:4c:0e:c4:6a:f5:6a:89:48:df:a4:39:c9:
                    0f:ed:2f:18:b7:69:00:b9:0e:9c:19:ca:9d:62:d9:
                    36:21:87:a1:1c:05:63:9f:42:9a:f3:f0:9d:fa:48:
                    0a:66:93:2e:ca:4d:06:c7:5c:92:ad:0c:0c:12:7e:
                    35:37:d7:30:82:9d:63:46:d2:4b:fd:af:4f:04:8f:
                    1c:38:0e:75:84:3f:27:23:95:c3:1c:88:fb:b7:89:
                    0c:62:b8:39:fb:13:57:e4:71:10:6e:20:10:24:fc:
                    33:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:2D:25:9B:79:77:C6:5C:8A:3D:36:76:13:3D:DB:36:E9:73:C8:8E
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6d:b2:6f:6d:89:ee:48:b1:b6:33:20:c4:99:56:cc:35:f4:
         2e:0a:76:66:4a:c1:e0:ca:bf:c3:3a:7d:70:14:30:0c:9a:2f:
         49:91:0c:c7:c7:8c:a5:fe:85:89:f3:58:c6:09:fe:56:62:83:
         fb:55:6d:5b:51:42:45:4c:20:cd:ce:5b:cb:96:04:2d:d6:b3:
         02:99:c5:df:09:87:18:8f:75:20:aa:f1:ae:11:41:ab:98:11:
         76:49:7d:4c:a8:85:c8:a6:a4:19:fb:a1:d9:e0:1e:33:91:36:
         5b:6e:3b:9e:1b:b3:63:8c:97:0c:0a:29:78:23:b2:2e:fd:70:
         ae:e4:fc:f4:dc:bc:72:9a:3c:6b:99:13:aa:7e:31:9c:f4:9a:
         40:d8:8a:9d:bf:f0:cd:2f:8f:56:c5:bd:a1:59:fb:a4:71:42:
         cb:03:34:72:90:f9:a0:62:fb:26:02:fa:2a:40:fa:b1:d2:56:
         a6:80:6d:a1:d6:7a:fa:e4:be:29:53:76:51:03:d2:59:7a:90:
         ed:2a:aa:ca:a9:0e:f2:2c:37:e2:6c:c7:2a:9c:8a:dd:ec:b9:
         20:91:96:41:a8:fa:59:4e:48:52:3d:db:ef:51:f6:d7:44:16:
         d8:f8:51:6e:39:74:98:45:6f:b8:40:78:94:38:5a:58:28:2d:
         b6:02:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:49:41 2025 by rpki-client