Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          DFZ8pNC8vmr2n/QRVPu1dSAwOQonzTh7chamNZtFlNU=
Subject key identifier:   43:69:9E:CB:55:8F:E8:BC:65:C6:50:B2:B3:0D:7C:96:DC:06:A7:97
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       01983193EA5AA7485906A1327AF968B5BF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          1630
Signing time:             Tue 22 Jul 2025 10:00:33 +0000
Manifest this update:     Tue 22 Jul 2025 10:00:33 +0000
Manifest next update:     Wed 23 Jul 2025 10:00:33 +0000
Files and hashes:         1: 6ibI6qCcc8WLdcP6CMTGiz_BdI0.roa (hash: LCx+/HsI5W/kRvmOW9i/GOPId5FYnywG1rm77J+nvfU=)
                          2: DnIZzoqhty_tg2bYNrh_vDtOBCw.roa (hash: UOVHlVipqtCkCU4NWu9RPIeuEbJNMZ2hNXSGsc+R+F8=)
                          3: ZTvZSbWIWloIdqV37DbtQi07aIY.roa (hash: lQEka4orv2/BKmCxU3FSbBYnm+siKkoc02AVPM16hvk=)
                          4: lDrZTd-Qb0rmvsSDqpVuWQPpdvU.roa (hash: l2541i2M1/tlvbUDelaRjH8ZrgWNAkwAm74fRpod33w=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: jVn3g9FO9k7c+XkRKUJFwdO84FvF0ZTz8U70hb1l9qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:31:93:ea:5a:a7:48:59:06:a1:32:7a:f9:68:b5:bf:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Jul 22 10:00:33 2025 GMT
            Not After : Jul 23 10:00:33 2025 GMT
        Subject: CN=43699ecb558fe8bc65c650b2b30d7c96dc06a797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3d:25:c8:6a:c5:38:c3:f1:bd:71:68:8f:5e:
                    fd:bf:6e:ec:87:6e:d8:2a:58:4c:60:7f:d0:7a:00:
                    9e:e3:5b:69:86:9a:02:9d:44:a7:39:06:19:a6:4e:
                    d8:4c:b3:e9:2f:e3:11:d5:fa:80:e4:9d:27:83:10:
                    9f:68:9f:98:6b:72:e1:4b:6d:7b:45:16:f2:63:56:
                    71:93:41:94:9f:f7:46:ed:80:f3:de:0e:32:87:9d:
                    c3:ea:cb:2a:f9:bc:36:61:a1:a3:e5:fa:18:ad:7a:
                    cd:72:a9:fb:b8:4c:9b:ff:01:e0:d3:51:90:73:55:
                    73:21:bb:18:6b:60:25:da:46:08:85:de:c1:1c:68:
                    16:ca:87:b7:52:b2:eb:31:ef:50:3c:c4:67:84:06:
                    c0:4b:16:61:40:4b:95:ac:45:cd:31:05:53:a0:a0:
                    07:1a:e7:e7:45:c9:76:00:a8:a1:df:37:c3:0e:b3:
                    aa:16:b2:6c:c0:a7:20:7a:27:f3:35:b1:9d:37:93:
                    81:38:b0:1f:d1:ed:f5:fe:bb:fb:21:84:62:2e:68:
                    64:c6:b2:8b:6b:d0:eb:f5:04:32:a4:e4:24:6a:90:
                    39:90:59:c9:51:d0:2f:51:bd:e6:60:b9:2c:41:04:
                    33:f4:99:77:76:14:3d:2c:2e:4a:c2:60:d4:5a:e9:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:9E:CB:55:8F:E8:BC:65:C6:50:B2:B3:0D:7C:96:DC:06:A7:97
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:42:41:58:24:d4:f7:50:8b:ae:ad:19:99:11:10:55:ff:1f:
         64:b6:e8:2c:c4:e8:71:8c:fe:98:ba:89:f7:4d:21:f9:fb:d2:
         17:f7:ec:9f:10:fc:bc:ce:bf:6d:07:ac:49:8f:56:35:e1:3c:
         ce:58:36:5e:ca:76:a3:64:81:68:c9:3b:18:f5:6c:1f:5f:9d:
         8f:68:a1:c9:82:f0:26:1c:44:29:20:84:e9:28:b4:ff:cd:f0:
         72:f3:86:74:71:1d:11:12:77:36:56:4e:4b:47:af:17:8a:f4:
         13:63:46:e0:42:db:ee:cf:c1:d3:14:45:4d:ba:e3:7e:e1:95:
         6a:12:3b:6a:60:ca:6d:e8:99:c7:64:af:93:f0:6d:d5:9a:6f:
         55:e4:01:af:66:32:04:b6:15:12:bf:bd:3a:ab:61:2a:2c:30:
         d0:c2:ab:47:43:e7:c9:d9:1e:d8:8b:3c:f1:dc:3a:87:76:23:
         44:f6:1e:27:75:77:26:d2:bd:41:86:61:e7:19:4a:fd:11:e6:
         42:62:57:91:bb:3c:8b:3e:e3:70:d6:fb:ee:2b:fa:aa:68:5b:
         8f:b7:f6:7f:9f:15:c7:bc:7c:39:66:3a:75:de:80:3b:da:13:
         9b:9c:04:00:b4:b2:a6:ae:42:59:1e:b0:48:1d:09:b1:57:50:
         60:38:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:52:25 2025 by rpki-client