Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          3dQd/yNlzcqKnSaQ/03hss2KireVIJGm2y2tMVzvvCY=
Subject key identifier:   E4:64:64:DF:95:AA:81:A6:33:0C:AD:13:C8:14:4E:DE:FD:A9:DE:07
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       01992FDA319443435F2DA8FEE8CB2F72725F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          1679
Signing time:             Tue 09 Sep 2025 19:00:52 +0000
Manifest this update:     Tue 09 Sep 2025 19:00:52 +0000
Manifest next update:     Wed 10 Sep 2025 19:00:52 +0000
Files and hashes:         1: 3YFzPEGiHndZmZ_eV1KbJ4S1riY.roa (hash: FCQDUK+ghfu3EK3q9DQ8TjIhvTkAHxB9mFLDZLBtP9Y=)
                          2: EVaA3-ZHoYM7bQogMMCCiWaw1m8.roa (hash: 9xvzOhDXLyNzuEt6+Op6hCq6aivVhFaE/WM/TJiIqaQ=)
                          3: doNLz_Gg1EkAtDNeyKv_LFw0Ko4.roa (hash: c5Br4+KluzNH8KBaWzOXwE8I5n348N/E3/7Xw+/XMWg=)
                          4: jp2EKc78qzNJwAA6CKUCtN1_xPs.roa (hash: N30Shs4kxpb93kdcL0yQH4lpcXuNQixmuCGD2o86d10=)
                          5: mQ8EWcQUR62mYiKooxZwctCHayg.roa (hash: SLS2UcLvk1MQ2//HQMy6W/8v0351+i+VZptNP4xMFuI=)
                          6: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: 1vF3ANHLwm1eG/Oz2Fbe55VkQGH7x+Z00LGloT3o//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:da:31:94:43:43:5f:2d:a8:fe:e8:cb:2f:72:72:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Sep  9 19:00:52 2025 GMT
            Not After : Sep 10 19:00:52 2025 GMT
        Subject: CN=e46464df95aa81a6330cad13c8144edefda9de07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:72:97:cd:27:ec:07:7b:bf:77:23:46:d9:
                    eb:51:b5:ec:47:d4:08:e5:c0:f4:21:12:b7:be:b0:
                    a1:ea:e1:af:bc:d8:54:41:d5:7a:41:3f:bf:33:d1:
                    d3:75:2a:7e:6d:df:b2:f5:6e:77:7e:91:99:98:77:
                    f7:f3:53:6d:4a:49:ba:86:b4:65:88:77:25:24:6e:
                    2b:c6:16:a0:b3:e4:3e:7e:62:ce:46:17:72:c3:f0:
                    0b:f5:0e:f4:b6:e0:78:85:c1:fb:24:37:c4:0d:a6:
                    00:ec:b5:55:ff:4b:aa:20:65:3e:99:a2:9a:a7:34:
                    95:15:84:b0:49:e4:06:45:40:26:64:4e:07:f8:2b:
                    cf:12:f9:d4:14:c5:87:e5:ff:c0:ae:e3:28:85:f1:
                    94:f4:ac:c2:4a:d7:bc:b8:70:a2:9b:ba:de:41:b6:
                    8b:d9:dd:d3:37:13:06:7e:a9:ac:cd:5f:12:e0:25:
                    1f:e7:6f:80:98:23:62:c6:7d:57:94:32:aa:2c:33:
                    b5:ce:2a:43:4d:9c:59:94:60:f0:fc:52:b7:20:a3:
                    14:5b:23:74:61:e2:ec:04:8f:3e:26:06:7b:90:5a:
                    cb:e2:6b:2e:83:07:d4:2b:0f:37:12:21:e1:0c:b8:
                    44:59:f3:85:8f:92:55:4d:ca:7b:74:1e:d4:ba:c5:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:64:DF:95:AA:81:A6:33:0C:AD:13:C8:14:4E:DE:FD:A9:DE:07
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:e2:2f:29:09:46:c8:c2:54:5b:90:e6:c8:8f:f3:85:94:
         0c:6d:3b:a1:53:9f:8f:6b:22:74:a5:fd:92:60:57:2a:c2:7e:
         44:39:af:d5:66:5e:b1:60:d8:7c:21:6c:b0:c1:07:9d:77:21:
         16:a4:ff:92:73:1c:84:a9:b6:36:97:d1:7e:18:5b:d8:48:ee:
         c4:8b:9e:43:49:bb:6c:e0:b7:18:6d:8a:7b:5f:e9:f3:ac:50:
         df:04:09:4b:09:91:c7:af:52:04:bd:5c:8f:39:7d:55:1f:5a:
         8f:03:07:6d:d8:d1:5a:4e:f1:a5:6e:6e:a6:bf:48:05:89:b3:
         77:23:da:9f:aa:30:5b:88:7d:c7:48:a6:cb:f2:07:d6:0e:64:
         0c:60:2e:76:64:ab:a9:00:0e:d3:67:72:6f:13:8a:f4:fe:a7:
         35:18:21:da:d4:7a:d6:81:6f:c8:9e:fd:5c:b7:b2:5b:98:13:
         82:63:1c:28:59:c6:a4:61:d9:52:8f:de:56:3f:3e:fd:70:87:
         55:0d:db:5f:1b:92:8a:ab:cd:22:80:72:be:f8:57:5e:51:5b:
         8f:a5:21:90:80:ff:6c:dc:0a:54:9e:96:07:22:e7:d8:61:ec:
         76:83:10:69:b3:df:40:32:78:14:e3:33:a8:83:e1:5a:25:07:
         35:95:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:45:45 2025 by rpki-client