Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          2uOIlViKGrBU+o4rrGaOcPkEhJbavn2u1CBL/lpJWkU=
Subject key identifier:   05:C7:5C:52:7D:93:D9:73:3D:08:FF:AC:7D:50:BA:C0:EB:E0:BD:34
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       01984588ABAC0C3C6F59CEDAB7AE293C4C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0EFE
Signing time:             Sat 26 Jul 2025 07:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 07:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 07:00:41 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: vxOky2e/e+LzuWVgU8UHR6pUQFPlWpJJlojvSyiMOLc=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:88:ab:ac:0c:3c:6f:59:ce:da:b7:ae:29:3c:4c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Jul 26 07:00:41 2025 GMT
            Not After : Jul 27 07:00:41 2025 GMT
        Subject: CN=05c75c527d93d9733d08ffac7d50bac0ebe0bd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:5e:8e:8f:21:b1:16:28:aa:cb:85:45:9d:
                    a1:dd:9f:7c:10:97:46:ca:c1:4d:0e:c9:e8:2a:9d:
                    cf:93:87:af:67:71:6f:0a:38:c2:f6:3e:67:46:76:
                    c9:4f:e2:68:30:cb:33:d6:80:56:7d:c7:81:ed:33:
                    95:0d:30:7e:73:b7:4e:c1:13:b6:ab:a5:bb:90:bb:
                    12:6b:4c:33:e5:40:39:9c:0b:7b:13:16:74:13:3b:
                    1b:ac:ba:ad:4d:81:06:d2:33:3b:82:01:0a:89:f8:
                    c4:9d:21:9a:1f:ed:1b:cc:25:22:9e:ff:1b:06:5e:
                    f9:79:ae:15:cb:9f:7b:9e:ff:2e:8b:15:5e:3a:a2:
                    68:57:6c:96:56:da:e1:09:85:ca:65:30:09:cc:34:
                    5b:ea:61:b8:f9:15:49:f8:93:c6:c5:26:79:2a:50:
                    9c:88:a6:b3:d9:25:dc:26:fc:51:f1:7d:00:95:93:
                    bb:97:2d:c1:01:f8:0f:a6:ab:d8:90:29:54:0c:d4:
                    b8:c9:7a:39:63:d7:84:11:3e:6f:da:21:55:45:77:
                    fe:4e:67:e5:b4:19:d4:62:b6:a7:46:52:e0:2b:c8:
                    3c:8b:54:81:92:6f:8f:27:ee:8c:e3:f6:04:d3:5f:
                    d7:d6:35:65:06:d9:24:6a:6b:c6:d3:86:9e:bc:ef:
                    fa:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:5C:52:7D:93:D9:73:3D:08:FF:AC:7D:50:BA:C0:EB:E0:BD:34
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:07:5b:0b:f0:1d:2f:96:45:4d:81:d7:7b:34:66:95:0c:f4:
         fd:f5:35:d7:ca:c3:8a:94:98:78:e1:78:53:86:3d:e5:ad:43:
         4f:c6:16:66:23:d2:e7:7d:01:99:d3:18:33:81:f7:2b:a1:88:
         18:df:ef:20:f6:77:77:83:c5:65:69:5f:eb:1c:66:5d:81:56:
         85:10:ad:31:06:d3:a5:85:87:e2:32:df:35:3d:cf:02:a0:25:
         dd:94:dd:d9:db:e7:09:66:eb:25:8a:fb:24:ce:34:54:83:dc:
         b4:85:e3:ed:48:3c:14:3b:f7:f5:bf:7b:8c:3e:b7:18:5e:f5:
         b3:e4:b0:68:87:60:23:ff:57:0b:b1:d5:10:b9:9d:20:2e:07:
         88:27:52:70:9e:88:83:af:ee:de:5a:2e:49:d8:f5:2a:20:c4:
         72:b9:a0:56:e0:c2:40:68:b5:f0:74:3c:a3:70:89:07:da:5c:
         9e:1f:a1:fa:8f:3b:1b:69:47:11:31:62:1f:ee:83:ee:36:c7:
         fe:80:d6:be:5c:1f:f8:14:b3:9a:64:8c:77:dc:9b:0b:a3:ab:
         34:0c:9d:57:b2:f1:6e:6f:72:72:69:ae:82:6c:8a:bf:0c:cf:
         46:3d:34:40:0d:35:32:ea:6e:37:7b:54:36:bc:1e:92:ac:96:
         bd:8e:c3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:15:57 2025 by rpki-client