Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          O+Gt8zzXckakiOgzLhJ8u9Qm5sz7r26bhiDdf66oNZg=
Subject key identifier:   D2:6D:F6:D2:45:3B:B6:DA:AD:29:ED:B7:3E:6E:A5:DE:07:3F:C8:28
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       01994C64FFBC25A46155BB062165569B0419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          0C60
Signing time:             Mon 15 Sep 2025 08:01:51 +0000
Manifest this update:     Mon 15 Sep 2025 08:01:51 +0000
Manifest next update:     Tue 16 Sep 2025 08:01:51 +0000
Files and hashes:         1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: SzXhGcc4DuCO8jpfj4Pr5H21fyu2LHKRuIe6AObvirg=)
                          2: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=)
                          3: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
                          4: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
                          5: nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa (hash: Kxexihews9YF1QZ3WH31HHS7CIi4TDdNrZ0Pl6O2Xyg=)
                          6: ypSfnYrHfIsWJ-yk6oJ0kYo9M94.roa (hash: rK8PGfH8qkdAddPcK6P5c+YtkrZFJwYwGJT7KA906VI=)
                          7: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4c:64:ff:bc:25:a4:61:55:bb:06:21:65:56:9b:04:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: Sep 15 08:01:51 2025 GMT
            Not After : Sep 16 08:01:51 2025 GMT
        Subject: CN=d26df6d2453bb6daad29edb73e6ea5de073fc828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:d0:02:00:b4:85:8b:66:ea:07:1a:22:54:
                    b6:4a:32:da:5a:ee:1e:ee:cb:cf:34:f0:f6:88:9a:
                    51:a3:37:e8:8d:83:ce:15:90:72:4b:85:f3:09:dd:
                    6d:2f:4d:f6:6c:e5:c0:19:00:a5:d9:dc:cc:98:13:
                    00:c1:00:22:a8:3e:46:04:9e:15:4a:c4:e3:67:2e:
                    0d:d4:b7:84:a0:e2:8b:b1:89:60:d5:99:10:da:10:
                    7c:c9:d9:1a:b7:22:0f:79:fa:3f:eb:f4:22:b3:b8:
                    8c:82:3e:14:2d:fc:6f:21:59:a1:a9:e9:3e:5b:aa:
                    5e:45:d5:ed:84:21:1a:b6:c2:f0:a3:45:f4:e5:6f:
                    29:92:96:6a:c5:27:11:85:bd:a1:c7:9c:d9:7c:ac:
                    6f:03:0d:c0:af:a9:99:aa:a2:30:e4:da:3e:0a:5d:
                    12:ee:81:3c:28:3f:96:a5:90:ca:00:be:f1:e1:b2:
                    38:9b:85:13:7f:52:5a:01:d9:28:be:05:a1:cc:93:
                    c3:a8:0c:13:b6:b6:98:94:6d:ff:6d:8b:89:56:42:
                    31:31:01:99:ee:79:6e:80:03:6c:c2:b9:d0:af:39:
                    30:71:a2:9c:c5:33:fa:bb:e5:00:fc:28:94:80:38:
                    df:c9:0e:c2:c6:3f:eb:5f:86:ca:b6:c5:50:62:06:
                    a1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6D:F6:D2:45:3B:B6:DA:AD:29:ED:B7:3E:6E:A5:DE:07:3F:C8:28
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e1:04:9b:f7:ba:92:ab:0b:fa:44:5e:4b:d6:69:65:09:48:
         d6:83:df:b9:9c:89:77:9b:1f:bc:30:9b:dd:57:bb:ee:a1:57:
         b5:7e:cc:5b:56:5e:c7:3d:fc:28:e6:a3:25:88:19:1d:f2:cb:
         a7:7f:01:95:1f:48:9f:d1:0c:92:3f:8f:78:06:c8:71:c2:89:
         2b:32:05:52:bf:50:8a:4a:7d:0f:33:62:0f:92:91:af:31:da:
         d2:fb:60:72:82:1f:68:85:09:f0:ca:be:eb:79:b6:7a:e9:41:
         d3:b9:44:60:22:ab:f2:50:40:44:34:ac:2e:4c:aa:db:69:e1:
         5e:cb:0b:1b:ee:37:99:fb:f7:ce:f5:d5:da:60:75:bc:8f:74:
         e3:78:1d:7d:07:54:cc:95:9b:35:29:60:f1:d9:13:21:05:7a:
         64:7a:bb:f4:20:ad:0b:90:48:51:af:df:24:a0:92:83:7d:db:
         a9:c0:44:84:3c:ee:b0:e6:e6:51:cd:ac:6d:12:de:39:8a:ff:
         85:b1:fa:d7:b0:0a:af:98:c3:61:0d:4f:00:ec:e1:42:f9:dc:
         5d:74:b9:57:2b:59:88:7c:ea:b8:11:19:f8:98:86:bd:6f:5f:
         a5:ed:bf:d7:32:10:65:f2:b6:30:3b:24:ef:49:d2:4e:ee:db:
         b7:e4:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 13:33:01 2025 by rpki-client