Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          351yq7+Yow+c8Z3CAn3P6UP0/egk/sOCrKz8TtUjpOU=
Subject key identifier:   34:A6:36:E6:7E:D2:13:6F:7A:86:6B:EF:93:42:7C:1D:D1:B0:9C:24
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       0199112AA12C9679517AF5B08454CAB220C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          0283
Signing time:             Wed 03 Sep 2025 20:00:30 +0000
Manifest this update:     Wed 03 Sep 2025 20:00:30 +0000
Manifest next update:     Thu 04 Sep 2025 20:00:30 +0000
Files and hashes:         1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: j0ff4+tkdC3ihujbObnnWY6X6NgOJl3tcbDSvsglArA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Sep 2025 18:42:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:11:2a:a1:2c:96:79:51:7a:f5:b0:84:54:ca:b2:20:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Sep  3 20:00:30 2025 GMT
            Not After : Sep  4 20:00:30 2025 GMT
        Subject: CN=34a636e67ed2136f7a866bef93427c1dd1b09c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:6f:91:e2:d8:5c:72:3f:08:3f:19:e8:31:
                    19:a4:8e:56:c2:e5:9c:20:d1:c7:b7:07:e9:a7:72:
                    42:42:65:e3:6f:93:78:db:aa:e6:da:07:8c:0c:69:
                    fc:e2:41:a9:7e:39:e8:07:19:da:57:f0:71:b1:b5:
                    3c:0e:ee:76:2d:d3:7b:79:7d:1a:ab:b7:84:34:4f:
                    32:88:72:b9:78:09:8c:94:7c:f3:f5:9e:1f:36:7a:
                    fe:b5:00:a3:d7:21:86:ff:bf:a2:e6:95:40:62:80:
                    7c:04:ff:90:25:b8:da:56:c2:b9:19:2f:5b:3d:d0:
                    d7:43:74:75:5e:19:49:61:e0:78:52:76:ed:c4:28:
                    5f:47:12:6b:eb:9d:f1:86:79:dc:42:9d:06:7a:f5:
                    db:b9:77:7e:2b:a6:e1:52:e3:2a:11:7f:6f:5e:16:
                    37:f3:e4:e2:13:c4:6a:e0:ca:f0:35:07:e5:6e:80:
                    d2:b9:23:76:78:55:fe:a1:3e:0d:59:da:d5:5e:df:
                    4e:b9:f8:10:61:15:aa:48:53:68:6e:af:09:9d:31:
                    40:a6:29:31:e7:79:1c:93:d0:f9:1e:44:ab:25:45:
                    9c:99:58:41:b4:d7:ca:a4:71:18:47:64:16:3c:02:
                    5b:c3:30:0a:ed:8a:68:e6:92:c7:1d:c1:a9:b8:2a:
                    87:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A6:36:E6:7E:D2:13:6F:7A:86:6B:EF:93:42:7C:1D:D1:B0:9C:24
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:c3:b1:8b:a2:87:f7:76:b7:eb:0a:7f:c6:1f:92:2d:a4:19:
         c6:46:e5:18:b6:6a:01:ff:97:3d:7d:01:78:ca:bd:00:1b:32:
         c9:ed:20:67:22:b5:a4:0e:e4:0c:68:ea:d1:3c:63:e0:8b:a6:
         1f:e6:2d:ab:bf:83:1b:10:49:39:ee:0b:4c:39:7d:27:56:b4:
         66:ce:3c:6c:9f:c0:eb:e5:16:ad:b0:ac:4b:36:aa:ff:55:0a:
         92:46:dc:16:9b:0b:7e:85:a8:97:8c:c2:5c:7b:22:1b:71:b7:
         47:e2:51:b0:b6:e7:dc:c6:1a:0c:95:df:48:7e:b0:44:49:04:
         fa:fd:77:8e:ee:d6:2e:e4:30:33:49:24:b8:52:12:13:c2:1c:
         79:99:c8:81:3d:f4:ed:53:b9:96:76:dd:bb:3e:39:b1:43:f1:
         ef:ab:32:3d:e4:c3:71:eb:c4:0c:9e:1e:fe:95:69:71:d1:fc:
         01:a8:3d:3f:68:34:04:30:45:0f:8b:e6:0e:67:14:f4:e7:46:
         4d:3f:13:4b:01:6d:c5:27:d3:48:d8:d0:60:34:27:e6:f3:7f:
         0f:84:3c:58:e3:cd:81:9b:0e:c8:0f:20:aa:27:92:cf:bb:83:
         49:35:09:10:97:3b:2b:8e:60:e7:3e:8c:8a:07:c1:b8:ec:14:
         81:5d:75:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 02:12:47 2025 by rpki-client