Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File:                     Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier:          74lkZIYHQDNF6eU5TuQ/VA4y77bpR09kt/+/gRiXs10=
Subject key identifier:   32:7E:BA:6F:C5:E4:0F:51:E9:3C:3A:48:E5:42:25:B8:10:D4:F8:7A
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer:       /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial:       0199228D1F10998AF9D350AC9C3CB8786AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number:          1674
Signing time:             Sun 07 Sep 2025 05:01:37 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:37 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:37 +0000
Files and hashes:         1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
                          2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: ZHtmteTQixyV9axgZbQ6s3S4fhGAEk8hgZEwbPXs3BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8d:1f:10:99:8a:f9:d3:50:ac:9c:3c:b8:78:6a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
        Validity
            Not Before: Sep  7 05:01:37 2025 GMT
            Not After : Sep  8 05:01:37 2025 GMT
        Subject: CN=327eba6fc5e40f51e93c3a48e54225b810d4f87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:23:5f:6d:d3:04:89:fd:27:f3:43:88:28:
                    df:d5:83:f6:d4:7c:fc:60:8c:8e:17:2f:db:fa:d1:
                    22:2a:9c:4b:f7:c1:d1:ee:c7:ad:d1:98:16:66:d8:
                    3e:f2:8a:1e:53:83:9a:f9:f9:5d:ce:d4:fa:2f:0b:
                    d4:17:5c:bb:00:08:4a:da:fd:0b:8d:e3:42:34:65:
                    15:93:40:ff:1f:e2:4d:71:17:95:e3:18:64:2f:bf:
                    2b:1f:36:82:bb:02:9c:0b:db:18:cf:84:be:27:0d:
                    90:81:90:98:92:0b:24:13:1b:ec:1a:c1:92:11:5a:
                    7a:75:47:7b:e7:45:65:4b:1d:94:28:4d:8b:90:69:
                    91:f7:e7:df:e6:15:fb:2f:5f:da:10:b3:e1:dd:92:
                    0d:62:de:84:b6:43:5b:e2:37:8e:43:29:21:48:bd:
                    a2:09:3b:10:3b:75:9f:e7:51:f2:eb:93:df:35:d8:
                    3b:40:68:07:1e:42:0b:51:b8:aa:25:5c:6d:54:cc:
                    21:bc:fc:fa:94:46:6a:94:4b:57:98:72:09:b5:ae:
                    04:25:75:e7:a3:5e:37:72:06:20:cd:f3:ab:87:9e:
                    ed:a7:07:26:1d:75:fc:03:7f:95:f7:2c:03:a3:be:
                    db:7f:04:cf:30:88:62:5d:ff:f7:28:73:09:64:7f:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:7E:BA:6F:C5:E4:0F:51:E9:3C:3A:48:E5:42:25:B8:10:D4:F8:7A
            X509v3 Authority Key Identifier:
                keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:8b:df:7b:81:93:eb:48:96:0b:ec:e6:f5:73:d4:29:a9:
         cf:5c:e0:e3:a1:9b:89:77:b0:50:3e:69:17:68:76:e2:a7:11:
         ca:51:78:e2:c4:2c:e5:25:9d:60:b7:e2:05:46:2e:b7:8a:b2:
         44:3e:e6:ad:cf:b5:e8:5d:a2:4d:b2:b3:a6:df:f4:e4:66:2b:
         9b:b2:57:9b:1d:46:9f:cc:49:25:ca:b9:fe:83:5d:e6:ba:04:
         79:e4:a4:d4:ee:e1:2e:dc:e4:27:28:4d:1d:36:da:25:85:a3:
         3d:9a:39:db:26:d7:41:f6:85:1f:67:04:7d:43:a7:a4:e1:e2:
         96:52:69:90:7e:3b:76:ef:3d:7f:8d:8d:75:a2:10:a7:78:9f:
         0c:e3:10:57:2f:9a:b8:16:c7:66:0d:ea:fa:68:66:dc:11:f7:
         e5:2b:05:1f:ac:ff:23:57:00:65:f1:76:4a:a2:84:06:0e:43:
         3f:34:31:b0:68:00:4a:f9:e5:60:38:4c:75:6e:ab:bb:a7:a1:
         99:07:87:d0:6e:30:3d:58:89:09:91:d2:87:42:ca:4b:a5:d3:
         e4:a0:93:cd:c3:e6:51:90:92:9e:f3:cd:e9:0e:53:5a:9c:8d:
         4f:7f:05:f4:ee:c0:ff:b6:4e:4a:5e:13:0f:94:97:ee:74:1b:
         06:1a:86:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijR8QmYr501CsnDy4eGqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm
YmEyYjAwHhcNMjUwOTA3MDUwMTM3WhcNMjUwOTA4MDUwMTM3WjAzMTEwLwYDVQQD
EygzMjdlYmE2ZmM1ZTQwZjUxZTkzYzNhNDhlNTQyMjViODEwZDRmODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVwjX23TBIn9J/NDiCjf1YP21Hz8
YIyOFy/b+tEiKpxL98HR7set0ZgWZtg+8ooeU4Oa+fldztT6LwvUF1y7AAhK2v0L
jeNCNGUVk0D/H+JNcReV4xhkL78rHzaCuwKcC9sYz4S+Jw2QgZCYkgskExvsGsGS
EVp6dUd750VlSx2UKE2LkGmR9+ff5hX7L1/aELPh3ZINYt6EtkNb4jeOQykhSL2i
CTsQO3Wf51Hy65PfNdg7QGgHHkILUbiqJVxtVMwhvPz6lEZqlEtXmHIJta4EJXXn
o143cgYgzfOrh57tpwcmHXX8A3+V9ywDo77bfwTPMIhiXf/3KHMJZH93NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ+um/F5A9R6Tw6SOVCJbgQ1Ph6MB8GA1UdIwQY
MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt
YWM0NTQ5OTc3OTAxLzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx
LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnWL33uB
k+tIlgvs5vVz1Cmpz1zg46GbiXewUD5pF2h24qcRylF44sQs5SWdYLfiBUYut4qy
RD7mrc+16F2iTbKzpt/05GYrm7JXmx1Gn8xJJcq5/oNd5roEeeSk1O7hLtzkJyhN
HTbaJYWjPZo52ybXQfaFH2cEfUOnpOHillJpkH47du89f42NdaIQp3ifDOMQVy+a
uBbHZg3q+mhm3BH35SsFH6z/I1cAZfF2SqKEBg5DPzQxsGgASvnlYDhMdW6ru6eh
mQeH0G4wPViJCZHSh0LKS6XT5KCTzcPmUZCSnvPN6Q5TWpyNT38F9O7A/7ZOSl4T
D5SX7nQbBhqGCQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:56 2025 by rpki-client