Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          P+02F3FcNm8V9Vgwhpv7bbN5Q0IpuTWhaIW2E+b5p3o=
Subject key identifier:   59:AE:2A:72:4A:29:4A:84:33:4E:99:13:CD:0D:D2:1A:73:AB:59:53
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       01984777D262CF0B8D2ED844F55C0ACDDBEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          161B
Signing time:             Sat 26 Jul 2025 16:01:31 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:31 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:31 +0000
Files and hashes:         1: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (hash: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=)
                          2: NvhPFVk9oyGz8ptuRFIjsEfx-34.roa (hash: rMiBv5wATJ5SuuGpYjDvqo3voyvSBHCSUHAwCjhyOqc=)
                          3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: zdKE2hBc3jmtNAZw0y9Z4sVPFuGu1Hn/0VshJI/IN8Y=)
                          4: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (hash: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=)
                          5: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:d2:62:cf:0b:8d:2e:d8:44:f5:5c:0a:cd:db:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Jul 26 16:01:31 2025 GMT
            Not After : Jul 27 16:01:31 2025 GMT
        Subject: CN=59ae2a724a294a84334e9913cd0dd21a73ab5953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:a7:7e:71:14:95:dd:fd:0f:19:db:5b:a3:
                    c0:2e:3c:b5:59:c9:79:87:25:e1:f8:44:a2:03:58:
                    d7:a3:d7:15:8d:8c:2c:04:4d:ea:77:45:2e:00:89:
                    87:82:c3:b1:48:57:78:a4:b9:ba:ff:df:86:69:2f:
                    90:9a:bd:2c:17:1c:47:1d:e5:55:57:81:20:4a:bf:
                    98:b3:3b:d5:64:ce:0f:8c:9b:62:72:29:90:22:d6:
                    41:1b:8a:0e:1c:30:d9:fd:5d:a1:3d:50:18:64:f0:
                    66:05:35:3f:4f:3f:9f:2e:69:8e:0f:bc:4e:ce:68:
                    75:d3:8c:cf:0a:58:cd:74:5d:05:e4:30:b1:fc:c3:
                    b0:fc:6e:78:b5:73:f3:c1:ca:68:91:ab:16:59:30:
                    0d:8a:88:24:e1:c5:05:de:a1:92:a1:0c:73:57:18:
                    dd:26:0c:6c:bd:fb:a2:a7:49:28:dd:b8:2e:97:18:
                    98:a4:c0:47:8e:17:4c:08:fc:b7:1e:be:bd:06:40:
                    6e:50:d4:84:2b:6b:19:f4:46:cf:e2:2a:8b:eb:26:
                    6a:13:a6:fb:21:04:8c:63:12:6b:65:f1:f2:fc:f7:
                    ff:01:98:de:ca:ed:9b:78:27:52:c3:46:88:ed:e1:
                    f0:19:00:a9:cc:12:78:ac:8a:d1:09:6b:4c:1a:62:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:2A:72:4A:29:4A:84:33:4E:99:13:CD:0D:D2:1A:73:AB:59:53
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:95:ae:98:0d:12:e4:6e:82:f8:f5:cb:19:57:84:14:20:3a:
         c0:6b:2b:2b:97:f6:37:fe:d2:4e:e5:2a:e5:43:9b:8c:fd:81:
         54:91:93:95:2e:8a:71:fa:d7:eb:85:4d:1e:d7:91:88:7e:5f:
         f4:9c:4e:26:d8:9a:47:8c:fc:55:72:83:b2:9e:09:0d:8b:2e:
         6d:7c:ca:3c:37:0d:dc:fc:d9:f7:ed:a5:e8:31:e4:2d:60:10:
         01:98:e5:85:83:e8:72:aa:b9:9b:d1:10:1c:ac:b1:70:3d:3c:
         91:c3:c5:01:0e:7c:65:ec:7a:d8:e3:99:a8:42:84:36:a8:cd:
         b7:08:9a:4e:e0:50:b7:47:a1:1e:9f:42:69:38:32:b1:e5:bc:
         4a:39:e5:45:c2:0c:5c:cf:06:f6:9c:fa:84:05:b9:33:71:55:
         6b:2a:2f:92:31:c5:02:5f:5f:8e:72:fa:7e:64:76:17:f7:f7:
         74:58:9e:d1:9a:25:db:40:c7:c1:00:a9:58:72:ab:00:3e:6e:
         fc:44:03:21:73:f2:f6:0b:fa:d1:f8:98:cd:ee:f9:45:89:48:
         08:d3:cb:ef:53:e2:37:61:c8:ac:ee:bb:83:d2:79:67:87:f7:
         a4:cc:49:55:95:d2:bb:be:fd:f1:cb:dd:41:f4:cc:db:a1:d1:
         8d:5b:6e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:23:24 2025 by rpki-client