Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File:                     VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier:          y5bYl5tRipnFVoAKNxVoS0cFO3uEcYGm8YrpUFckfow=
Subject key identifier:   65:EA:B6:0C:11:90:45:25:C9:7E:45:2B:0F:37:0C:65:B6:83:06:78
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer:       /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial:       019849656992BFD3F4D414FF29F625968395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 01:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:39 +0000
Files and hashes:         1: HbLrWYvpZ3oR_JlftkugbPFu1sg.roa (hash: hyVYRW9dEIvcdUsfvs+O6FvP8/Ig+3miBLv5dJqVY64=)
                          2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: 1/1I6zke0/81OIwpXu8hMZ02dOyXvktNRbExqHnYk4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:69:92:bf:d3:f4:d4:14:ff:29:f6:25:96:83:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
        Validity
            Not Before: Jul 27 01:00:39 2025 GMT
            Not After : Jul 28 01:00:39 2025 GMT
        Subject: CN=65eab60c11904525c97e452b0f370c65b6830678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f6:1c:52:58:13:90:0b:a6:61:2c:8a:5f:8e:
                    78:61:fc:55:0f:d5:ec:63:1f:6a:db:1a:d9:e4:13:
                    5b:4b:d6:64:be:8d:b3:61:25:3a:4b:96:e9:91:5d:
                    af:fe:63:0f:a6:c9:57:b0:6d:04:be:47:e9:52:ef:
                    30:a2:6d:84:93:5f:b7:e9:7d:ea:bc:31:4e:8f:9e:
                    cf:1e:07:4e:8f:23:ce:07:08:b7:46:96:9d:fa:aa:
                    d7:a8:06:6a:e6:1d:da:52:46:23:07:50:49:dc:20:
                    48:e7:ed:78:44:90:3d:c9:2b:f2:e1:5a:8f:b3:f9:
                    27:e4:4f:fa:69:15:8c:49:41:81:65:77:5d:8a:33:
                    d0:a2:16:d0:66:a9:fe:28:40:37:a6:f2:66:3d:ea:
                    48:b2:5a:72:de:e0:30:59:36:95:22:38:15:11:ce:
                    ee:c0:4c:c5:9f:37:fd:1b:cc:b0:be:da:ac:67:5b:
                    5f:55:64:8a:90:57:f3:b4:da:80:30:3f:ba:77:00:
                    08:b2:97:ee:1e:19:51:6f:08:75:60:42:6f:41:34:
                    33:78:43:8d:40:7d:08:49:0d:f8:b8:cf:b6:e9:58:
                    42:2d:6b:c2:aa:2e:9b:e0:42:0e:c0:fc:72:2a:09:
                    78:d0:34:82:bd:61:ee:15:1f:9c:55:6e:ac:be:ab:
                    bf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EA:B6:0C:11:90:45:25:C9:7E:45:2B:0F:37:0C:65:B6:83:06:78
            X509v3 Authority Key Identifier:
                keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:19:27:6e:e3:cb:fd:db:85:73:cd:c0:b3:93:53:7b:dd:9c:
         7a:a0:75:60:7c:d0:ad:5d:0a:c7:9c:f6:b0:c7:bf:51:0e:9a:
         22:4c:3a:81:90:6b:a9:12:ff:f4:8f:24:9d:6b:a0:a0:9f:e4:
         ec:a8:36:4c:a9:ae:5a:5b:6a:56:f1:e8:5a:6d:84:06:26:20:
         ae:25:16:6b:9c:3a:1c:e4:1b:e2:de:00:da:18:0f:ce:7e:9c:
         f3:40:80:37:90:ed:4f:81:f2:12:82:38:a5:6a:74:49:89:d3:
         b1:40:11:5d:37:69:68:85:ba:75:d0:aa:90:66:1b:28:14:cb:
         ff:32:8a:8b:6e:80:07:df:22:d7:32:37:83:61:ae:95:34:cd:
         73:5f:b3:ff:07:93:be:71:e0:35:09:94:9f:21:7c:fc:0b:2f:
         60:30:2b:61:0e:65:f4:b1:d9:ea:2e:fc:71:cc:83:14:dc:3b:
         11:87:5e:b4:fa:e9:8e:65:d2:8b:76:9f:30:ab:7e:3d:54:a5:
         b8:da:ae:04:6b:32:6e:c8:a7:70:b1:0d:89:ea:64:d6:ff:bf:
         b5:a6:ea:8f:d2:94:ca:c7:f2:30:a0:bb:b9:00:9d:ec:c8:cb:
         02:9e:b9:1b:b4:25:b9:95:33:f8:3e:71:c0:ea:0f:fb:89:b3:
         26:ac:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:05 2025 by rpki-client