Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
File:                     VwFSjCouLEaRPAsoyjVw84gPGlY.mft (raw, json)
Hash identifier:          qdsfCYLmI1T7ATEwNmQpEtWT6v0BAJdVyn0bUy5KDxc=
Subject key identifier:   8C:5E:5E:19:22:C6:C5:33:FE:2E:1A:B6:59:DE:7C:4D:87:51:71:07
Authority key identifier: 57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56
Certificate issuer:       /CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
Certificate serial:       019848C0966D50AF1558384E3D3BC6F6AC93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
Manifest number:          0A0E
Signing time:             Sat 26 Jul 2025 22:00:37 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:37 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:37 +0000
Files and hashes:         1: 466YAs6d9cdjAoG1VqV9G_HtvQg.roa (hash: wVtqE+qIa2JsmDebXlhf45xn2AahdoB1no9v6MIhuuw=)
                          2: VwFSjCouLEaRPAsoyjVw84gPGlY.crl (hash: bqD/wquwuuraFpJzLItvOUpZ4498YgOvtzEy/L3IKl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:96:6d:50:af:15:58:38:4e:3d:3b:c6:f6:ac:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701528c2a2e2c46913c0b28ca3570f3880f1a56
        Validity
            Not Before: Jul 26 22:00:37 2025 GMT
            Not After : Jul 27 22:00:37 2025 GMT
        Subject: CN=8c5e5e1922c6c533fe2e1ab659de7c4d87517107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:1f:b2:a4:4a:f4:7f:d8:95:b0:c5:cc:96:
                    47:7a:64:ef:a1:c4:29:bf:33:4f:92:d4:79:b4:77:
                    57:96:40:c6:ee:f4:f8:96:bb:d8:e0:e8:ba:17:5d:
                    85:26:cf:b9:59:f0:d7:70:7b:ff:f1:fb:4b:ed:38:
                    03:fe:93:dc:f3:5f:8a:59:5e:e3:8e:97:10:d5:7c:
                    b1:5c:54:c4:af:4f:4b:db:c5:4d:0c:8d:df:d3:1a:
                    3c:a0:26:30:98:4b:83:38:37:b9:c5:97:a4:00:0b:
                    69:8e:6b:ba:ac:78:a9:e2:38:95:32:c4:f8:8b:85:
                    45:04:56:a5:c6:c5:05:15:58:c8:06:c5:29:37:13:
                    ed:d7:a9:f5:9b:a9:b8:58:b9:fb:67:91:40:91:07:
                    a1:9b:a2:ce:31:56:69:67:60:a9:e0:99:22:18:4f:
                    f3:6b:15:c1:9c:a7:a4:d1:3f:0a:f8:86:6a:95:a4:
                    aa:9b:d8:70:36:0e:89:77:b2:61:c6:79:e7:b1:48:
                    2a:8b:76:0b:85:fe:2f:64:5a:87:fa:37:46:3f:5e:
                    29:62:2b:15:c6:b4:3e:3e:de:d5:2f:fe:4c:ff:dc:
                    df:99:fe:23:46:ac:63:7f:99:f4:77:b1:a3:0b:24:
                    21:b8:a5:cc:b0:75:2f:df:ce:c6:a9:d6:44:99:18:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:5E:19:22:C6:C5:33:FE:2E:1A:B6:59:DE:7C:4D:87:51:71:07
            X509v3 Authority Key Identifier:
                keyid:57:01:52:8C:2A:2E:2C:46:91:3C:0B:28:CA:35:70:F3:88:0F:1A:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwFSjCouLEaRPAsoyjVw84gPGlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a41c6d-f142-4c25-8997-63fae389a4db/1/VwFSjCouLEaRPAsoyjVw84gPGlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:24:76:39:dc:3b:c6:5e:f7:61:5d:3e:bd:a2:e6:80:f3:
         da:23:e9:c6:42:53:52:81:b2:fc:e3:c0:d1:c1:4d:2b:9f:a6:
         e0:20:2c:cf:10:ac:1d:ad:cc:66:d2:a0:10:43:7c:08:21:15:
         68:3e:ad:92:f3:fc:58:74:4c:76:c5:fb:a6:e6:cf:32:a7:4d:
         4d:65:77:8e:68:c9:a7:77:19:88:22:8e:c2:52:a7:cc:6a:35:
         e3:38:13:a7:70:5f:3f:04:86:18:dd:e3:0d:f9:2c:a3:45:0c:
         72:9a:32:f6:da:d6:38:39:a1:43:0c:10:13:39:81:2d:44:57:
         4d:60:78:a7:3e:fa:51:65:77:b2:df:b3:08:46:1a:98:1c:f7:
         bf:26:64:22:31:e6:5f:86:00:dc:3c:11:91:6c:32:61:0c:45:
         8e:b4:67:dd:92:c0:b6:87:1c:59:81:94:4e:39:be:2b:8c:34:
         b3:f6:9c:77:a3:37:7d:36:3e:90:7e:c9:bc:02:4f:07:ff:8c:
         ae:64:ee:a2:06:9c:05:53:7c:42:1e:0b:b6:15:f3:86:d5:ef:
         ef:68:f0:92:bf:62:d7:93:cc:e9:8f:e1:25:06:3e:13:d3:f3:
         10:06:42:fc:b1:93:6f:1a:cc:9c:ac:ce:2b:73:4c:63:d8:17:
         28:a6:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:43:02 2025 by rpki-client