Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
File:                     vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft (raw, json)
Hash identifier:          yXQDK0SGNUQr0UpFvyKgYWPPz69+/sqDPtCrLbn/gNY=
Subject key identifier:   C6:8E:41:54:4E:95:54:81:D3:B6:14:66:DC:8D:0F:07:6E:1F:66:50
Authority key identifier: BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1
Certificate issuer:       /CN=bc3a4697447d190308644a58bceaa124c074b7e1
Certificate serial:       019922FA9E080EE2DCB9C2385CC03A105C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 07:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:13 +0000
Files and hashes:         1: qTBKuXrMd7XLtQiqUfmYTbV0cXw.roa (hash: AGYgB26zdYDExNCMKB1Sk+TLZC3itvMITHqWkeGpeU4=)
                          2: vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl (hash: GXnY1X1AnNk0m43TLiyhzErhwXQ95dMY17JJzEWT/c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:9e:08:0e:e2:dc:b9:c2:38:5c:c0:3a:10:5c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3a4697447d190308644a58bceaa124c074b7e1
        Validity
            Not Before: Sep  7 07:01:13 2025 GMT
            Not After : Sep  8 07:01:13 2025 GMT
        Subject: CN=c68e41544e955481d3b61466dc8d0f076e1f6650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:97:f0:83:b0:e3:12:3c:dc:16:8e:4a:42:
                    13:b7:d4:6f:96:e4:c7:e8:21:a8:e6:ba:e5:f1:90:
                    b5:6f:aa:4a:57:9b:6b:9c:b4:20:0b:32:97:3d:3e:
                    13:9b:f3:b3:7d:32:e0:e9:38:03:06:07:c5:de:c7:
                    79:62:75:bc:e4:db:bb:e3:e8:87:e1:cd:5b:44:7c:
                    b2:cf:52:84:d5:57:b0:48:19:b5:ee:8e:48:71:92:
                    b5:9e:11:12:10:78:93:ac:49:24:c9:27:e1:78:b4:
                    26:70:75:e7:24:70:d5:fb:96:d3:5d:3b:a5:1e:7c:
                    99:29:cd:ab:5d:56:b6:a5:74:8f:21:eb:73:ea:b7:
                    e8:3a:fa:52:43:29:ce:b1:5d:8e:56:82:bb:68:2d:
                    4b:af:48:06:75:61:97:db:61:06:fa:4a:ae:5b:a4:
                    c6:33:3d:96:92:dc:8f:19:32:c9:0e:12:fb:60:fd:
                    46:2c:98:27:c6:0c:c6:65:f4:41:c3:3c:a5:01:9f:
                    a6:a8:c4:c1:48:35:d0:1e:dd:7d:48:ae:b4:fd:7f:
                    c2:ed:8a:e4:19:f9:9b:64:91:ef:ef:24:30:75:1c:
                    a7:ce:32:c3:b0:bb:27:30:90:6c:71:3b:32:c0:3f:
                    77:33:2f:81:7f:a9:68:94:d3:e0:e8:fd:4f:f7:04:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:41:54:4E:95:54:81:D3:B6:14:66:DC:8D:0F:07:6E:1F:66:50
            X509v3 Authority Key Identifier:
                keyid:BC:3A:46:97:44:7D:19:03:08:64:4A:58:BC:EA:A1:24:C0:74:B7:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDpGl0R9GQMIZEpYvOqhJMB0t-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/5aa619-dcca-49d5-901f-a5ab7b64155f/1/vDpGl0R9GQMIZEpYvOqhJMB0t-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:27:72:5b:98:0e:4b:58:59:f1:19:84:06:db:b9:46:77:ba:
         4a:e6:75:82:93:dc:9b:14:01:aa:18:42:68:42:27:11:b1:50:
         a4:08:53:fa:e5:c4:34:a4:37:70:3f:8c:92:f4:f7:05:58:96:
         de:c6:f4:43:64:12:97:6f:c8:14:9b:db:5a:ad:1b:d6:27:7f:
         a7:5a:71:22:2d:c5:02:4c:c7:85:c5:31:46:8a:bd:6c:c4:c4:
         5d:6d:7c:cb:9a:d4:1a:85:72:1b:fa:0f:19:e8:40:fd:f7:8a:
         f0:83:8b:9b:9e:81:10:c6:3c:92:84:57:d6:7e:28:17:f2:b2:
         31:b5:0c:80:b5:8a:fb:ae:50:6e:2d:2c:ee:8b:31:a6:f1:93:
         06:07:8d:71:42:92:b3:95:76:ff:95:6a:58:14:b8:0a:45:03:
         77:e5:9e:ec:e3:fa:95:0b:14:74:8a:51:0b:9f:20:6b:df:5c:
         ed:e3:0a:50:92:dc:10:e0:dd:56:b6:74:85:04:3d:03:a6:b3:
         05:90:91:9a:34:7e:ea:a3:59:30:bb:33:01:c6:59:22:8c:77:
         75:3f:5e:09:d9:c3:44:da:46:93:13:71:89:38:0c:1e:1b:cf:
         fe:4b:92:35:38:1a:e2:2d:1c:6b:78:c1:70:d2:73:da:b2:aa:
         e4:f5:09:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:03 2025 by rpki-client