Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          WLxYUSHBUYzkozdopKBdXN4xjJdyM4LdVatfv3QdFi8=
Subject key identifier:   6D:71:38:32:4E:28:3E:CB:03:E2:23:B4:00:3C:9B:73:B8:23:62:1B
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       019936137811E96B6C3AC9D7D2357A0D4381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          1679
Signing time:             Thu 11 Sep 2025 00:01:09 +0000
Manifest this update:     Thu 11 Sep 2025 00:01:09 +0000
Manifest next update:     Fri 12 Sep 2025 00:01:09 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: ghk5rbV4G17UxTvKu6tBmebTx/3Yljp53WQBWuBIiQo=)
                          2: vIhHYLmEHVa7FRdnU3kcgimxEf8.roa (hash: NCzIq7GooEeEiWcAxPp0VOLgVz/cvdDQC34wVi7kJRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:13:78:11:e9:6b:6c:3a:c9:d7:d2:35:7a:0d:43:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Sep 11 00:01:09 2025 GMT
            Not After : Sep 12 00:01:09 2025 GMT
        Subject: CN=6d7138324e283ecb03e223b4003c9b73b823621b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:50:0c:35:34:c8:22:41:52:cb:9e:00:a4:f4:
                    25:ab:06:93:8f:54:82:f3:c1:e5:63:b1:6f:80:4c:
                    59:b6:9e:8b:80:35:fc:55:a0:4c:45:3f:d8:6f:9d:
                    08:c6:e9:8f:c6:00:2c:3a:54:f2:08:07:3f:cf:59:
                    4e:15:32:13:98:f3:5a:57:22:40:55:10:9d:ef:3c:
                    fd:7f:e6:0b:2c:90:98:2c:6d:cd:e1:a8:04:1e:98:
                    c5:6c:9c:e7:41:5a:6a:ce:98:67:7b:4a:e7:ec:d7:
                    27:a7:b1:ee:e5:7a:ca:7f:99:c1:2d:72:d1:ea:26:
                    b1:ba:52:d3:8f:be:2c:b9:de:52:5b:c4:ca:a0:fe:
                    d8:b0:06:1d:40:d8:0a:43:eb:c8:1c:79:70:40:7d:
                    51:7a:c1:e6:64:da:42:c4:6b:db:36:36:fc:36:5c:
                    8d:db:8f:b1:d9:df:02:ec:e9:a9:00:f8:7a:c5:09:
                    cb:be:e6:73:4b:13:48:90:85:f2:99:cf:2a:44:88:
                    50:da:39:9a:bd:5d:3e:a5:7b:5d:1b:84:3d:d6:39:
                    f0:fe:1d:2f:ff:85:7b:a1:f4:4f:d9:42:12:87:d8:
                    75:48:1d:84:2a:8c:49:c7:d9:11:e6:ad:b0:18:a6:
                    6f:55:9e:c5:35:95:98:fa:c0:91:cc:49:a0:a0:9e:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:71:38:32:4E:28:3E:CB:03:E2:23:B4:00:3C:9B:73:B8:23:62:1B
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:42:cb:52:dd:92:17:ce:80:14:16:ec:e3:fe:72:b2:d9:3c:
         d2:e6:09:14:0c:ba:1e:ba:ca:b4:a6:00:77:0f:7f:88:c6:35:
         de:4c:fd:4a:d4:55:db:9e:80:c5:80:fb:10:c4:13:b4:43:72:
         aa:d3:30:08:44:ec:5a:a8:26:b9:9f:06:d1:5f:51:c4:2f:21:
         c8:ce:e1:00:d9:18:b9:4b:81:be:cd:0b:c7:3f:b0:33:13:97:
         28:44:53:7b:e1:1a:8f:71:89:19:58:d3:22:93:ce:50:d7:13:
         e3:2e:e7:6f:9d:54:d4:f3:9e:bd:46:5d:95:8c:28:58:30:27:
         76:be:fd:d7:34:05:c2:5d:d6:52:cc:c6:1e:56:f3:44:7f:34:
         2d:ee:10:9d:10:d3:06:89:8b:3e:f6:bd:df:43:54:b3:d9:d7:
         79:da:ab:66:cd:f6:b7:e9:94:09:2e:12:6f:b5:b3:ca:9c:5d:
         8d:3f:08:36:be:c1:94:a3:0e:37:90:67:3b:de:ce:5f:bd:f9:
         1e:a5:f6:eb:40:87:fa:76:c1:1b:d7:3e:94:86:5e:83:10:61:
         7c:67:33:ee:81:46:2a:22:56:a4:96:9e:d1:e3:f0:38:8a:85:
         3a:2c:60:92:f5:ef:fc:76:43:15:d1:61:66:af:e4:40:52:77:
         8f:ae:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:47:07 2025 by rpki-client