Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File:                     vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier:          HI+/WksDFOp97voNqAhnzDcftYKSstA+rI8cOADpzgE=
Subject key identifier:   5C:30:EE:4C:44:44:92:D6:80:18:70:29:5A:2B:16:DE:F3:A7:CF:B7
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer:       /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial:       01992443DD4AB393FD78B22C2ABCB3DF25DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number:          05F5
Signing time:             Sun 07 Sep 2025 13:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 13:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 13:00:51 +0000
Files and hashes:         1: W0ISdcMD3BWsHVPGG7LkFApumXs.roa (hash: ycAJc8E2fcKafG7/xeE7xIvkeS6Y7snCVRq4mmzolw0=)
                          2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: kn0LM37rP3tEcLt8ZC2WiEigI1n50YhVjA2JwzvDb9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:43:dd:4a:b3:93:fd:78:b2:2c:2a:bc:b3:df:25:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
        Validity
            Not Before: Sep  7 13:00:51 2025 GMT
            Not After : Sep  8 13:00:51 2025 GMT
        Subject: CN=5c30ee4c444492d6801870295a2b16def3a7cfb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:52:53:47:38:59:ea:7b:ff:6c:f9:5c:a0:
                    24:bd:b8:12:26:eb:e3:9c:79:08:31:05:98:56:5b:
                    d3:3f:e8:85:86:70:47:11:92:3b:25:68:b3:0c:60:
                    fc:09:9d:8f:91:40:35:0b:df:9f:e4:71:b1:82:dc:
                    99:78:a7:58:33:91:7c:b5:53:14:7a:a7:d8:98:d8:
                    16:ca:f3:5a:94:3e:31:1d:d8:b5:d9:80:87:1d:9a:
                    da:70:cd:89:64:ed:a0:d7:73:1c:3e:50:20:eb:ac:
                    dd:45:8f:9f:5b:3e:c0:6d:c0:87:1b:d1:4c:19:f7:
                    5b:d4:93:8b:08:5f:ea:56:f1:cf:57:7a:6f:bb:15:
                    f4:f1:2e:57:c9:2a:49:cc:78:73:da:b5:5c:a6:8d:
                    cb:3c:cd:09:11:d5:b0:48:11:2b:e6:2f:91:0a:94:
                    ab:ca:d6:57:fd:a2:ea:39:0d:aa:93:67:58:6a:77:
                    f0:d3:f1:03:03:b1:6a:44:3b:63:5d:b4:e3:e7:b1:
                    e4:cc:7b:71:52:14:40:49:0f:f3:65:e7:fe:ce:d1:
                    c0:50:26:38:e9:e3:49:96:61:87:02:62:50:4e:bb:
                    2b:20:38:eb:05:33:f4:47:f4:3c:3f:53:82:0b:2d:
                    62:04:fd:30:89:b8:6e:0f:97:64:c0:85:67:0c:3d:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:EE:4C:44:44:92:D6:80:18:70:29:5A:2B:16:DE:F3:A7:CF:B7
            X509v3 Authority Key Identifier:
                keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:43:23:2c:7b:4c:1e:61:26:1d:69:1e:4d:27:85:c5:d8:ad:
         0c:94:68:3d:29:da:52:13:7d:88:8e:c7:30:07:8a:d4:f6:e6:
         7f:6a:65:67:b4:dc:52:31:bf:6a:a0:fa:2d:fb:d8:46:7a:5d:
         be:10:83:ed:00:d0:01:b8:24:b3:cd:c1:ea:20:3c:38:62:70:
         1f:b3:11:44:a1:af:9d:97:e3:ec:62:be:ac:a6:5b:e0:fb:7e:
         78:07:59:e1:6b:03:6d:2d:fb:34:11:a3:46:89:fe:18:44:f0:
         f1:8e:b3:ed:f0:d7:d3:7e:33:60:be:a7:e3:00:18:a0:be:03:
         1b:27:c7:2d:14:09:82:5d:88:bf:dc:6e:1b:61:fa:6f:52:dc:
         37:b7:7a:34:07:aa:e9:2b:69:5f:de:d5:37:eb:d1:9b:01:f7:
         29:cf:69:f4:5a:ae:3b:19:5b:c7:33:65:84:1d:57:45:71:4a:
         c9:3e:58:55:09:bb:92:a7:88:92:48:00:15:d1:ef:77:dd:92:
         7b:93:e8:12:c4:2d:0d:24:02:e4:de:98:4a:e4:01:c8:fe:4c:
         10:17:6b:31:3b:64:dd:53:ac:c3:52:62:55:78:dc:86:00:12:
         e6:e0:d9:1d:05:15:e2:03:7f:d5:1b:0a:ae:fa:49:66:55:02:
         01:14:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:43 2025 by rpki-client