Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          O22qiVYmguvnhbb6FJ5r24/yb9tPyQ4ubi4TZUDKyLE=
Subject key identifier:   67:EA:56:97:12:C2:76:74:83:C0:4D:13:A1:77:5C:95:C0:EA:B3:90
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       0198443F07DEDAB5D82E8F7E5B26EDB8B14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          1600
Signing time:             Sat 26 Jul 2025 01:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:38 +0000
Files and hashes:         1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: 2pA3z0BizTCRqd7/11mr+ISHwtdXIT0ak9WcsziUQEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3f:07:de:da:b5:d8:2e:8f:7e:5b:26:ed:b8:b1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Jul 26 01:00:38 2025 GMT
            Not After : Jul 27 01:00:38 2025 GMT
        Subject: CN=67ea569712c2767483c04d13a1775c95c0eab390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:42:7a:c2:4f:54:82:91:10:41:f2:32:4b:06:
                    57:15:2a:7a:67:41:a2:05:35:02:2a:0b:b2:02:b6:
                    69:d8:f6:b9:c4:fb:a7:c0:59:4e:47:9d:ad:d1:57:
                    a0:a6:e2:1b:5a:92:78:96:e2:3c:56:2f:22:46:ab:
                    46:1a:e0:55:81:66:15:20:b1:1b:e3:99:c7:ba:fd:
                    8e:a2:3e:c6:8e:e7:0f:b5:49:24:e3:01:79:f6:24:
                    eb:e0:fe:92:88:3e:87:44:b2:ec:e8:06:cc:87:79:
                    af:a6:0d:62:ca:64:93:ee:73:e6:8a:ef:17:59:ca:
                    2a:25:51:c3:f2:a9:3a:fb:a0:5e:48:7d:65:19:a9:
                    b1:80:c5:db:e6:6a:f6:ba:42:83:8b:55:2b:52:69:
                    b9:02:6e:f1:cc:bc:f5:c3:3e:fb:00:ab:33:c2:72:
                    d9:a1:05:0d:af:5b:8a:3f:3f:7f:40:bf:ee:d7:42:
                    e5:36:1b:72:5c:1d:79:29:80:2d:36:2c:93:34:c4:
                    95:11:7d:da:99:99:48:37:5e:e2:fb:62:97:3e:6b:
                    e1:09:1b:4e:3b:49:06:ba:3c:13:94:0e:86:54:1f:
                    ea:0c:cd:cf:4d:f3:76:82:b9:56:3d:ff:c9:73:c2:
                    24:51:c0:e3:b1:bf:66:51:38:49:f0:9f:6c:e2:3f:
                    90:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:56:97:12:C2:76:74:83:C0:4D:13:A1:77:5C:95:C0:EA:B3:90
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:54:7b:26:87:e9:f0:25:83:82:f5:39:47:43:8a:29:97:bf:
         5f:3f:69:cd:bc:b0:39:a2:d4:01:04:ef:79:83:1c:50:86:58:
         2b:e3:cc:60:30:24:ed:2c:ca:4e:34:9b:ef:3e:ff:ef:fe:3f:
         b1:28:24:0f:e4:5a:b6:60:9d:ab:16:35:c2:4a:9b:78:b2:de:
         d4:1e:5b:3d:81:b0:eb:b0:96:c1:4a:2c:ee:24:87:b6:71:00:
         ec:63:39:87:dd:86:6b:eb:6a:50:7e:fa:19:59:14:9c:6d:67:
         73:a8:50:36:c7:16:54:ea:7c:39:e4:ed:b0:5f:5a:d3:de:c7:
         ed:05:1e:50:8e:74:00:1f:8d:f6:d2:cb:2c:ea:84:2b:73:e7:
         a9:21:ac:11:13:3e:65:9b:b9:ad:26:96:e2:b3:c1:bc:d1:4e:
         eb:8c:c2:10:47:d7:47:1b:c4:45:70:f8:72:f4:f0:d9:e3:d3:
         39:17:4f:7b:52:54:8f:32:85:ec:2e:77:22:dd:d2:96:5a:b3:
         37:6d:6a:12:b4:5e:fe:c4:34:af:13:a6:c7:ee:f9:e2:c0:2c:
         66:f6:7b:d8:24:40:40:bd:b1:35:66:55:f2:08:53:ed:b9:78:
         32:bd:fe:71:ad:e3:ba:8c:a1:17:e1:fe:b5:08:1b:51:06:89:
         b2:bd:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:50:21 2025 by rpki-client