Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          wPwfx8HBUTk22BFBGy14iRyIpsnOy1y9SYQzVQ3yEl0=
Subject key identifier:   A7:0E:E7:00:CD:0A:1E:E1:AF:91:55:6B:E3:A7:50:19:52:3F:07:EE
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019937CB1A97D589E5B65F519DA788D186DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          12CB
Signing time:             Thu 11 Sep 2025 08:01:21 +0000
Manifest this update:     Thu 11 Sep 2025 08:01:21 +0000
Manifest next update:     Fri 12 Sep 2025 08:01:21 +0000
Files and hashes:         1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: T3ubIaJjQ93SxGXKjlSejGzyObrgCEY6kURPadKVC6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 08:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:cb:1a:97:d5:89:e5:b6:5f:51:9d:a7:88:d1:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Sep 11 08:01:21 2025 GMT
            Not After : Sep 12 08:01:21 2025 GMT
        Subject: CN=a70ee700cd0a1ee1af91556be3a75019523f07ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:94:d1:17:25:8a:c2:b3:33:36:5c:74:a7:
                    81:77:ff:dd:fc:8e:05:cf:81:8c:47:ca:f4:c3:bf:
                    4a:cf:61:fc:d3:bc:6d:51:e4:c0:f4:a5:cc:02:0c:
                    f0:2f:c7:8e:4c:0d:9a:5c:e6:88:88:fa:d7:f8:68:
                    8a:f9:dd:70:d9:f3:93:f1:88:49:33:c0:f4:4c:a7:
                    39:ad:78:05:25:37:36:97:45:79:9e:14:6e:32:a9:
                    0b:18:84:1b:64:3f:ee:a3:fc:67:50:bf:49:39:81:
                    03:58:ae:0a:43:92:81:7b:14:2b:00:4c:c9:d6:16:
                    12:b1:a2:12:51:c9:66:a7:b0:73:08:19:c6:8a:38:
                    fa:fa:ba:55:d7:f9:bd:f4:91:90:7a:18:84:9d:23:
                    d2:e2:39:f9:10:0d:4c:61:7d:4e:35:eb:40:84:b0:
                    a1:91:32:95:fe:c5:76:84:64:14:7f:41:dc:12:8c:
                    d8:7a:f9:24:de:3c:ae:b0:77:0c:f8:14:3c:a5:69:
                    68:23:fe:41:10:58:a3:70:15:d6:c9:21:a0:d4:5b:
                    ef:cd:14:a1:21:9a:e8:75:d0:57:4c:9a:dd:36:bd:
                    0f:82:c0:c9:92:9a:b5:6e:08:b8:a0:fa:f1:b0:64:
                    32:80:76:59:07:a2:99:af:f8:1a:dd:5d:42:50:c9:
                    1c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0E:E7:00:CD:0A:1E:E1:AF:91:55:6B:E3:A7:50:19:52:3F:07:EE
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:85:f6:e2:af:dd:cf:87:60:08:9e:c2:7a:d7:5e:94:fe:cd:
         63:8d:33:61:0c:f9:f6:74:26:27:07:07:56:6f:57:b5:b9:99:
         d8:0d:2e:96:31:86:10:0c:86:75:8e:fe:49:7d:20:97:80:e6:
         93:e0:98:e7:1d:65:2e:19:49:f2:cb:dc:b0:45:09:f2:63:90:
         39:d8:d9:31:6a:a2:93:d4:e7:79:85:3c:3d:ab:c1:21:0a:21:
         01:9f:85:23:56:df:05:b0:5f:72:dd:7e:6d:05:a5:e1:4a:d3:
         b3:26:ac:c0:c6:d1:d1:e6:96:eb:07:2d:e7:b9:89:ab:89:53:
         34:ff:f4:16:b3:e1:24:5e:af:a4:c3:ba:de:83:59:93:6c:89:
         2e:ce:14:5a:2d:67:5d:b8:d0:a0:00:63:e6:ce:73:39:dd:1e:
         7a:bb:f8:e0:0e:81:4c:09:64:c3:02:34:63:99:27:32:26:98:
         b8:e6:46:59:4f:89:0d:bc:68:e9:e2:90:76:e4:90:3c:33:a5:
         11:68:25:4a:ff:0f:46:0a:f0:85:4d:07:1a:21:29:19:01:7b:
         ca:7b:42:87:a0:9e:e4:12:b2:45:62:8f:07:49:da:42:c4:e8:
         4c:2e:ba:a4:98:0f:72:3f:1f:35:0b:6d:22:e7:3c:ab:4c:92:
         ba:d6:68:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:23:24 2025 by rpki-client