Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          VgA5dzZRgiTiSZHAN1EG7PeWaasie2c2G9miWPDIYPo=
Subject key identifier:   4F:B6:E6:12:EF:34:75:C4:E6:C6:FD:92:F8:75:A7:91:DB:08:8D:61
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019845F627FA171036F758E434BDDD940221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0A96
Signing time:             Sat 26 Jul 2025 09:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:16 +0000
Files and hashes:         1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=)
                          2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: f/mmz5HV2/DXV6K1AtYbfmf8BekgG+ZE4w7ighJ7eD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:27:fa:17:10:36:f7:58:e4:34:bd:dd:94:02:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Jul 26 09:00:16 2025 GMT
            Not After : Jul 27 09:00:16 2025 GMT
        Subject: CN=4fb6e612ef3475c4e6c6fd92f875a791db088d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:de:97:a7:3e:80:3b:24:36:94:ff:c5:43:d0:
                    7c:b4:7c:db:65:80:cd:23:d9:35:21:2d:23:c0:be:
                    bb:99:b9:ee:e4:19:fa:4a:4d:e1:2c:f6:6d:70:8a:
                    bc:7c:ae:5a:93:bc:aa:d7:f0:93:1f:93:b3:35:68:
                    62:19:0b:fe:33:ee:f1:3b:b5:05:94:92:06:bc:58:
                    ff:08:ba:56:88:7a:48:ab:10:8e:bc:e8:b2:db:3f:
                    22:1a:65:73:25:59:49:7b:7c:ac:c9:b4:0a:fa:81:
                    ef:23:74:86:62:1d:80:23:9b:b4:27:6a:8c:f9:20:
                    df:c6:95:65:55:5b:46:8f:22:a5:5b:a7:54:10:9d:
                    c9:86:b3:78:56:81:19:be:c7:31:02:db:09:96:21:
                    af:32:ad:b5:e0:3a:f7:00:2b:fa:72:15:33:fd:55:
                    e6:be:6e:84:34:10:44:dc:34:fc:c1:4f:54:6c:9a:
                    d6:7d:45:32:60:87:43:ce:70:cf:3b:69:aa:30:3a:
                    e8:45:3e:60:83:48:2a:0d:60:40:e7:fb:f7:30:ee:
                    d0:85:57:79:aa:80:62:a3:ef:98:8a:4a:17:23:71:
                    7a:e7:1f:46:75:e3:ee:6e:a2:38:c4:8e:12:8d:7d:
                    df:44:39:95:2a:db:fe:f8:3c:e4:36:e0:a8:fb:f2:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:E6:12:EF:34:75:C4:E6:C6:FD:92:F8:75:A7:91:DB:08:8D:61
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:cb:f3:94:ee:e0:bc:d5:c7:e1:36:b6:c3:1a:3d:6e:2f:d4:
         88:ed:f5:48:b0:68:fb:6b:13:6e:3d:68:c5:f0:16:e2:7a:96:
         3a:17:a6:f9:9b:a1:2b:2f:c6:8b:20:c7:23:dc:13:9d:22:12:
         4a:66:e4:65:1a:c6:47:e4:74:6d:cf:61:d3:fd:ba:33:85:49:
         fa:cb:33:c1:63:da:f0:68:6b:29:49:c5:61:a8:a4:84:52:09:
         ff:fa:e7:b8:bb:6a:ca:a1:8f:31:62:de:1f:a2:e8:a0:bb:d0:
         33:6f:c1:d7:c0:0d:9e:43:97:fc:a1:ff:78:c0:13:d2:d2:88:
         1e:7a:79:f6:73:05:05:06:0d:38:11:78:31:cc:6b:e8:bc:99:
         8b:14:b0:f2:36:17:08:4f:9a:56:40:24:3a:37:0d:5c:97:36:
         d0:9b:80:29:78:3d:54:79:8e:35:e5:0c:cc:2e:86:cb:37:9b:
         ac:bd:7e:39:c0:1c:c9:fe:ce:d7:13:9a:ab:ec:02:db:c1:bc:
         76:24:a4:f6:26:f7:4e:7c:63:8a:3a:9b:18:5d:c0:a2:23:88:
         6a:89:2e:c4:ae:21:4a:9d:be:a2:86:f4:fc:3a:15:12:1a:63:
         b4:28:4d:65:7b:66:e6:06:12:57:37:17:d7:bf:a0:0b:e8:a0:
         5c:c4:2b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:38 2025 by rpki-client