Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          UkuxJAAy9xAHY2CCBqjVkeHSZxa28FlVvOIf/DtNM4I=
Subject key identifier:   38:67:9B:91:33:07:A1:55:E6:A9:89:EE:3B:43:35:91:E1:E8:4F:4F
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       019852681762801A6EB88B5A9CF4AE56780E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          0BDE
Signing time:             Mon 28 Jul 2025 19:00:10 +0000
Manifest this update:     Mon 28 Jul 2025 19:00:10 +0000
Manifest next update:     Tue 29 Jul 2025 19:00:10 +0000
Files and hashes:         1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: vhX+ANr9u+ndsMZxO3mqWyfmcqU0gF0vzHcY6js8MV0=)
                          2: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=)
                          3: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
                          4: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
                          5: nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa (hash: Kxexihews9YF1QZ3WH31HHS7CIi4TDdNrZ0Pl6O2Xyg=)
                          6: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:68:17:62:80:1a:6e:b8:8b:5a:9c:f4:ae:56:78:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: Jul 28 19:00:10 2025 GMT
            Not After : Jul 29 19:00:10 2025 GMT
        Subject: CN=38679b913307a155e6a989ee3b433591e1e84f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:9c:15:34:d2:3d:ca:10:5f:5d:63:da:31:
                    37:49:f6:ce:f2:b6:b9:53:04:59:c8:2c:43:76:2e:
                    c1:8e:35:5c:84:f0:26:20:fd:59:8d:de:c9:27:36:
                    9c:79:01:93:b7:e8:8d:ea:7c:d9:35:43:eb:5a:de:
                    31:84:fe:37:d3:71:d7:9e:59:6a:0b:e2:ad:3a:b9:
                    95:85:c4:62:39:12:60:18:0f:b7:80:9c:31:cc:e6:
                    90:68:5d:ec:c8:2b:e1:c8:aa:40:5a:5c:71:48:ba:
                    5e:eb:67:46:3a:f7:30:20:16:d6:bc:f3:2f:19:8d:
                    12:ad:0e:b1:fb:91:97:ed:07:2c:a9:3a:12:c5:f7:
                    f4:1b:0a:c2:cf:9a:14:87:af:f7:4b:f4:56:25:df:
                    1f:70:0b:4b:b3:d3:f2:10:76:0a:bf:c9:9f:15:5c:
                    a8:22:1e:88:13:fb:bd:4f:ea:30:9b:e6:6d:22:4a:
                    db:16:76:26:ce:cc:ba:3a:b9:53:dd:07:fe:03:2e:
                    2f:3d:4d:d9:bf:6b:aa:d4:c4:a2:a7:51:63:55:32:
                    35:07:78:07:0d:40:3f:75:43:2f:dd:ed:f4:a9:8a:
                    3b:d6:37:f0:c7:be:2a:16:ea:ce:d2:d9:c8:d4:86:
                    7f:e7:36:d8:b2:16:df:bb:86:c0:7d:54:06:31:e0:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:9B:91:33:07:A1:55:E6:A9:89:EE:3B:43:35:91:E1:E8:4F:4F
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8d:e8:fd:6d:c5:f7:7a:29:17:33:e0:58:bd:dc:3b:70:2b:
         12:6d:62:62:88:4e:42:ee:11:77:b7:c8:02:5b:a2:58:b1:91:
         f4:77:0f:8b:52:ff:a4:87:94:32:f3:ef:26:0d:4f:ae:e2:52:
         13:ab:1f:9c:75:2d:4d:d9:bf:00:10:21:26:b2:00:1a:09:84:
         25:4f:cc:90:ed:43:79:fa:22:cf:28:66:4e:97:88:aa:b2:ea:
         19:51:c2:76:7d:04:64:79:d3:d4:07:c5:ff:f4:82:dc:0f:97:
         53:2d:68:e7:24:ae:13:71:f4:69:27:c2:fe:92:1d:6f:a3:0d:
         be:77:26:2d:28:07:c0:e9:38:8e:68:6f:e3:fa:6b:da:8e:a7:
         7c:c2:a8:d8:0e:74:96:64:c7:c0:f3:44:41:de:8e:11:96:6d:
         dd:71:22:c7:44:54:aa:59:32:34:56:d4:af:2e:12:df:a3:ee:
         16:df:fa:eb:e2:2a:65:6e:19:e6:c6:1e:02:01:38:a2:8f:ec:
         17:79:ae:67:3b:64:3e:a7:72:5a:9e:df:2e:e5:0d:20:88:ef:
         08:70:a3:39:1d:0d:04:5e:ff:bb:37:cb:00:65:09:52:44:a2:
         9e:fd:da:c2:54:ed:b5:a7:cd:1d:c5:20:ef:41:59:e7:ba:01:
         cd:6b:49:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:55:44 2025 by rpki-client