Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          NR5K2D0EhaaM+WWzAYD54zO6Io0cx+eq6Qq3Jzdoh1Q=
Subject key identifier:   FD:4F:45:16:58:7F:DD:99:47:FD:73:A9:C9:00:A3:4B:64:6A:9B:89
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       01992D473B54E2D2B4CD0D920E6BDF5C5E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          1679
Signing time:             Tue 09 Sep 2025 07:01:06 +0000
Manifest this update:     Tue 09 Sep 2025 07:01:06 +0000
Manifest next update:     Wed 10 Sep 2025 07:01:06 +0000
Files and hashes:         1: 8Ka9rxc0YKocFkWcaDXR1ONcgME.roa (hash: usLLszkWwMw6Nc8UOkM6uTFB1CmI/iSWcsPGfnYTo08=)
                          2: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: t8Kw8rJ7UkCV5HKMUXyz4SWaMFm2ctDTF1jfN4A55gE=)
                          3: Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa (hash: rqvXt2CssSw6L3PQ9/nqjpjhgnLM7ZB7CTFTgI4c5Qs=)
                          4: ajS1l9bTEjVqB1ygFPAWcG-Q9kQ.roa (hash: uL6fZ/UsSnnW3wqVpmK15xjLej5W2U7a16D6Y1oklZo=)
                          5: vukdtTF8gJW6aLYtFAgpB-1xyO0.roa (hash: m3ugJ7KMai4fpszgDOIdVX816p3QuqcOk8kPIMOxT+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:47:3b:54:e2:d2:b4:cd:0d:92:0e:6b:df:5c:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Sep  9 07:01:06 2025 GMT
            Not After : Sep 10 07:01:06 2025 GMT
        Subject: CN=fd4f4516587fdd9947fd73a9c900a34b646a9b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:97:a2:9f:ed:6e:e0:5b:97:4c:50:09:ef:7f:
                    f4:8a:e7:d9:38:b8:f0:c1:ca:22:2a:9d:7c:42:66:
                    89:52:eb:67:63:01:9c:77:9c:6b:6f:a7:ca:a2:e0:
                    17:cf:46:39:8f:f7:bf:7b:14:fe:0c:f6:7b:2a:cf:
                    6b:1e:0d:18:ca:f9:4b:bd:35:af:14:e4:a3:c4:6d:
                    ff:3d:56:02:7f:51:c1:b9:d0:d7:51:eb:ed:fd:da:
                    7e:f7:42:bd:fb:85:95:06:51:19:24:45:5c:9c:6b:
                    5a:8b:c8:bb:af:b6:45:7b:5e:dd:e9:e9:3c:10:c8:
                    9c:27:bf:4e:58:da:16:b6:f8:17:2b:53:df:1f:e9:
                    58:29:a8:e0:52:73:2c:a9:5f:10:1d:3e:b3:14:31:
                    f7:3f:3d:37:23:a5:0c:6f:bf:ed:13:88:e3:a0:07:
                    cb:d7:19:4a:a7:02:8e:5a:3e:41:4c:47:bd:b3:22:
                    c4:38:0f:fb:09:9b:79:3f:b5:04:19:6c:d3:1d:27:
                    31:ae:b7:97:af:99:da:a1:3c:57:bd:17:4a:28:97:
                    c7:88:40:7b:d3:85:93:13:af:79:a9:08:f2:b7:5e:
                    90:b4:94:57:da:bd:1e:e2:e2:f8:e3:79:8a:d6:5e:
                    54:82:76:da:78:4b:04:91:25:ae:93:e0:d8:4c:d6:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:45:16:58:7F:DD:99:47:FD:73:A9:C9:00:A3:4B:64:6A:9B:89
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d7:14:ad:28:41:eb:a7:b2:b6:0d:b2:78:11:01:db:8e:5f:
         c8:32:46:0e:53:9d:f7:a3:0b:2a:c6:b8:ae:c5:aa:fc:6f:f2:
         49:53:dc:ce:66:62:27:24:b8:bf:c3:83:7f:91:33:5c:e5:75:
         03:d7:a6:90:d9:0b:c7:a5:ed:32:90:46:3d:75:67:50:c3:21:
         15:95:cf:be:71:e2:d2:87:ee:06:b6:1e:4b:39:3e:dd:59:89:
         2e:c0:1a:dc:3a:ad:71:c0:94:26:69:3b:5b:5c:eb:e9:96:f6:
         e7:b7:b9:22:d5:5a:93:05:89:99:bc:91:d8:cb:66:22:de:b1:
         90:13:7f:94:24:45:cd:5f:7a:53:09:39:f9:8d:95:11:15:4f:
         03:42:7f:7a:fb:76:d1:d8:49:97:b0:24:70:d9:12:2a:80:db:
         8f:bd:50:d0:e0:10:4e:d5:76:14:87:9d:b9:18:b2:59:3a:f5:
         d4:24:7c:52:d3:38:75:cc:bb:5d:ed:ac:5c:27:11:43:92:c4:
         0b:37:5b:ee:54:3f:d1:fe:be:fc:2a:bd:fc:0d:7e:ae:93:87:
         ef:e0:eb:76:23:40:98:3f:1f:9c:5f:df:4f:f8:49:16:cc:26:
         89:c0:93:61:20:7c:99:0e:1c:58:fe:9c:83:46:b9:5f:14:7c:
         35:c9:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:48 2025 by rpki-client