Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          HedQ5ht/pdjgrB30GSbqb/QgvmA6eOduUFUKFKa0YyQ=
Subject key identifier:   E3:51:AF:FA:CD:DE:59:55:ED:97:A0:83:E4:A0:9E:1C:FB:56:4E:40
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01991EE6BB7E0C7BD1C782B73D0BC4B0D47B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0591
Signing time:             Sat 06 Sep 2025 12:01:01 +0000
Manifest this update:     Sat 06 Sep 2025 12:01:01 +0000
Manifest next update:     Sun 07 Sep 2025 12:01:01 +0000
Files and hashes:         1: 0YsqmYoX8nSnq9tL_jZR7_IicOU.roa (hash: Ld1DlRt0TARzLlXLVHsaGFQTRwffTa4AKCb432jsq74=)
                          2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=)
                          3: 5aiNMpTbEsFotHPhSom_BLzlcx4.roa (hash: UmVtbJKGVJKhOV0/7a2vDBmEaTfGr1/DLMtgALmVgoc=)
                          4: A3WhCggzu4rYOo1yOfgZK9-xHYQ.roa (hash: 6lM2sKn0Kt/HS6iHxtxrLQeD9LqB5QoOTReZqqvo3Jc=)
                          5: PlUFC6HKWWFjpql9DijziKwkcxw.roa (hash: 4W/hkwQltLoMthbvB9BB52pdcgOpX1UVyOI2+0P/Mmg=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: P9CsHf6lZa+tHVZb33xrlYKmShHT5jlOgXBe8IIzxPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:e6:bb:7e:0c:7b:d1:c7:82:b7:3d:0b:c4:b0:d4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Sep  6 12:01:01 2025 GMT
            Not After : Sep  7 12:01:01 2025 GMT
        Subject: CN=e351affacdde5955ed97a083e4a09e1cfb564e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:f3:3e:65:48:3d:6b:4f:a1:d8:3e:59:13:
                    f2:a6:f5:74:b8:47:43:d4:48:03:13:00:a1:54:a8:
                    29:61:ff:10:27:f9:7c:e7:68:fc:2f:82:37:d2:32:
                    37:3d:69:1a:3b:29:e6:89:35:c1:05:9e:74:5d:89:
                    23:24:1a:3e:e6:9a:88:eb:4b:37:56:2b:93:0f:66:
                    60:d2:94:8d:83:6e:df:3a:cb:24:aa:91:7c:4a:6f:
                    5a:b3:b8:49:5f:c0:7c:a4:a5:82:43:21:67:b7:ab:
                    ea:f6:10:4a:31:dd:e3:30:01:cb:0e:a6:39:2f:3a:
                    eb:14:c7:0f:a1:bb:91:ec:2d:60:1d:1e:cc:f4:fe:
                    11:95:04:f7:be:9e:67:c6:3a:a9:53:b1:8f:10:80:
                    03:3c:b2:ed:fa:72:6c:c2:69:a5:63:f6:34:d3:38:
                    03:f9:9d:e2:d6:e7:c7:88:06:71:d7:c5:b6:b4:a1:
                    bd:77:30:d8:d0:01:42:e2:d7:ce:4d:7b:b6:bb:85:
                    a8:72:89:11:91:87:25:6d:f2:35:0b:ef:ca:ef:d9:
                    e7:1d:b3:cb:87:17:1b:b5:67:09:27:c3:6f:10:66:
                    a6:7b:2e:48:89:98:b9:e1:19:6e:de:3f:67:c8:bf:
                    ce:38:99:16:bc:6f:ff:85:70:51:a6:9d:a7:3f:1f:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:51:AF:FA:CD:DE:59:55:ED:97:A0:83:E4:A0:9E:1C:FB:56:4E:40
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8f:9e:dc:78:7e:47:e5:45:83:e0:b3:c4:b7:e1:2d:ff:8e:
         7a:af:8f:a3:42:25:a9:37:c8:30:8a:0b:ec:5f:f7:4d:4c:01:
         3e:ce:b3:44:b0:32:75:84:60:03:1e:1d:79:1e:1b:20:d3:c8:
         e4:c3:c4:01:5b:03:73:0f:cb:cb:cd:1e:1f:87:24:02:c2:ce:
         15:ce:ce:40:69:c8:f3:72:1a:ef:d1:f4:80:90:94:1e:3b:22:
         5a:9a:8a:1b:58:03:9a:e4:87:b5:32:44:c5:36:65:f5:9a:49:
         c8:c8:65:79:b0:56:11:d1:01:a4:5f:3a:a3:06:c2:7b:f7:32:
         48:fc:e4:a3:17:1d:79:3a:48:1b:bb:c4:51:ad:26:d1:ee:ea:
         99:32:d2:6f:7a:8a:6b:d5:42:04:41:da:2e:a6:d5:1a:9a:00:
         b7:b5:0d:e4:b8:b1:e8:cc:48:ff:1f:8f:13:26:0f:a4:ce:5f:
         c6:7c:96:f1:10:4e:14:41:cc:db:cf:ec:2a:80:17:8c:61:ba:
         ff:a4:73:0c:87:59:08:3e:8a:49:38:8b:98:0f:d0:a7:4f:52:
         0e:92:18:56:d5:71:41:d3:bd:ca:ad:62:db:50:d8:a3:bd:93:
         3b:5f:bf:46:50:ed:52:10:8c:98:c8:4a:c8:58:02:a5:10:ac:
         04:88:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 13:44:45 2025 by rpki-client