Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
File:                     V4jMDw7cVfJvTBtahve-RVHU4xU.mft (raw, json)
Hash identifier:          V1yiG1Bb2VcExWkVVqzzsRtUUq/UZHSrm6em6nmCQ+s=
Subject key identifier:   7E:10:1C:58:C5:23:68:04:7F:27:2E:86:C4:E4:E8:08:62:DB:1C:72
Authority key identifier: 57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15
Certificate issuer:       /CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
Certificate serial:       0199221EAAE463F194531EF9F0D293C51DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
Manifest number:          B8
Signing time:             Sun 07 Sep 2025 03:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:59 +0000
Files and hashes:         1: V4jMDw7cVfJvTBtahve-RVHU4xU.crl (hash: jdN9VPYYuRCGH/a+SjDwR5wmAv+lYQ9SIajV90ZDGe8=)
                          2: hkwJsKiTfC8rW3KRi6Vmul-Orv8.roa (hash: c0qpWB0aVtdIXpzZykn1cgENgV2hof3vV2QdsHMYwCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:aa:e4:63:f1:94:53:1e:f9:f0:d2:93:c5:1d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5788cc0f0edc55f26f4c1b5a86f7be4551d4e315
        Validity
            Not Before: Sep  7 03:00:59 2025 GMT
            Not After : Sep  8 03:00:59 2025 GMT
        Subject: CN=7e101c58c52368047f272e86c4e4e80862db1c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:16:17:63:0d:a5:84:49:ef:68:6f:3f:f4:6c:
                    c7:9b:c4:ca:eb:d7:5a:5d:47:05:5c:0d:65:55:7e:
                    3a:ab:87:e8:17:c9:95:73:16:c9:d0:e7:c3:48:2e:
                    49:a4:e6:12:be:0a:1c:0a:5f:78:26:81:57:67:88:
                    99:91:eb:c7:9c:20:c4:d5:12:db:a0:46:6d:af:68:
                    70:a5:79:a4:62:fd:7c:64:cc:ae:eb:ed:e5:e4:8e:
                    a0:a8:34:bb:42:a4:18:9c:6c:34:df:8e:10:27:6c:
                    75:64:88:f7:bd:df:5e:20:56:68:58:0e:53:ed:fc:
                    34:1e:e3:06:c5:82:15:76:12:8d:9e:85:5d:b2:bf:
                    19:bc:05:4a:10:94:0c:34:7f:85:d6:ae:b1:18:b6:
                    76:c1:9a:0d:18:6c:3a:21:cf:e6:a5:2e:22:7d:2c:
                    f9:9d:ed:60:8c:52:db:a3:87:43:93:59:3f:d3:57:
                    bf:0f:bb:d3:22:b8:56:ad:db:6b:9c:f1:24:d9:c7:
                    b1:fd:71:d1:ab:d6:b0:86:64:d4:01:5b:11:e4:a6:
                    7d:3f:3d:0e:1b:3e:59:ab:b7:49:13:25:9a:21:ab:
                    1d:cb:6f:25:ef:54:c0:70:86:b3:e7:fd:be:15:78:
                    78:72:b2:8b:49:ac:b6:f1:53:d2:12:01:42:75:b4:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:1C:58:C5:23:68:04:7F:27:2E:86:C4:E4:E8:08:62:DB:1C:72
            X509v3 Authority Key Identifier:
                keyid:57:88:CC:0F:0E:DC:55:F2:6F:4C:1B:5A:86:F7:BE:45:51:D4:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4jMDw7cVfJvTBtahve-RVHU4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/cf4d58-6a5e-4e16-915f-a9e6dec7ce7c/1/V4jMDw7cVfJvTBtahve-RVHU4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:19:35:20:ac:9f:b8:80:19:21:0a:cd:9e:23:1a:94:7d:6f:
         b0:6a:64:a4:aa:1f:1b:1a:53:ce:8a:33:b1:de:88:22:9e:37:
         91:9a:be:46:f5:0d:19:8a:2a:1c:d3:90:d1:89:a0:87:33:58:
         f3:45:bc:9d:97:33:30:fc:86:82:e4:35:a0:22:07:3f:ae:ab:
         f6:8d:5d:c1:4e:69:76:44:82:28:55:a1:4d:a7:c0:b1:5c:b7:
         d6:f4:7e:c0:eb:b1:66:3f:8d:e9:4d:30:6f:0b:ff:c2:3c:8f:
         66:60:6e:3f:b6:94:9d:b7:14:78:e2:d1:13:45:4c:83:b9:af:
         2e:cf:58:2f:e7:5b:e5:b2:2f:0b:1f:59:5b:3c:99:45:80:9a:
         8a:31:35:6e:68:2d:ff:23:06:34:6a:6c:70:41:9c:da:67:18:
         d8:28:1e:49:b5:04:bc:d4:01:5b:de:57:f5:8a:e8:28:d8:1b:
         d1:62:80:2c:ef:ce:1f:d8:5f:78:69:72:8e:fb:63:d4:f4:c8:
         1d:ca:90:13:a6:f2:ea:74:bb:07:e9:54:f9:6d:fe:9f:2c:d4:
         e8:41:19:bd:40:61:a5:a0:8c:fc:e9:df:b7:90:a9:26:92:02:
         a5:69:41:44:29:5b:96:d9:f9:06:ce:38:75:de:19:34:da:ea:
         02:d6:0d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:05 2025 by rpki-client