Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File:                     vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier:          8w0f7NLxrs+ipe7C+PeIZtGqUlHLyv6Qlhw8BjhssqU=
Subject key identifier:   72:6D:3F:AF:FC:9F:BB:D7:A3:97:3E:D2:97:57:A1:81:A3:2E:0D:68
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer:       /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial:       0199228C55F99B4FC743FBBAC13576D76722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 05:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:46 +0000
Files and hashes:         1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: BUaP1/Si45gWiTwhim+2xx0eCakQiyTNcAeNhTc3EIY=)
                          2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:55:f9:9b:4f:c7:43:fb:ba:c1:35:76:d7:67:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
        Validity
            Not Before: Sep  7 05:00:46 2025 GMT
            Not After : Sep  8 05:00:46 2025 GMT
        Subject: CN=726d3faffc9fbbd7a3973ed29757a181a32e0d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:77:9f:f1:a8:c9:56:b2:83:6c:4f:ca:13:
                    7a:aa:37:66:4c:49:b0:23:86:a9:fc:5c:40:a7:d5:
                    13:c3:c9:e3:72:df:eb:bd:f1:62:1d:fa:50:19:00:
                    d8:2d:12:0d:a0:a1:25:aa:23:1a:64:45:dc:49:5a:
                    65:2e:42:35:8a:53:fd:5e:24:6b:75:7c:93:0d:4b:
                    02:13:d5:3f:7b:a6:65:f1:45:44:69:48:78:e1:6c:
                    2c:2f:51:2e:06:87:03:e1:38:19:89:1b:60:4e:38:
                    55:22:7d:87:02:50:00:58:96:fe:17:1b:db:a1:77:
                    26:78:d2:1b:07:60:37:f4:8a:dc:72:e0:87:94:c3:
                    a2:9d:a7:a3:8a:bd:78:ce:09:37:ec:b8:e0:07:77:
                    ba:c5:1d:e0:75:8e:9d:dd:0b:6b:07:ac:43:d0:06:
                    6d:26:34:09:53:9f:fc:2e:44:30:74:8d:5b:0a:c1:
                    89:f7:a2:de:ec:3b:bb:ba:4a:71:eb:ca:0e:e0:20:
                    30:35:92:f0:d7:d4:08:d5:03:4b:7e:65:97:7a:28:
                    c7:38:68:28:e5:f5:af:cc:a6:1a:a6:57:5e:c6:4c:
                    b1:c3:69:cc:94:ff:48:59:9b:c4:bb:10:63:02:b9:
                    ab:48:66:c5:77:d9:57:78:d6:b2:26:44:12:9e:45:
                    2b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6D:3F:AF:FC:9F:BB:D7:A3:97:3E:D2:97:57:A1:81:A3:2E:0D:68
            X509v3 Authority Key Identifier:
                keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ac:eb:87:e7:34:7a:b2:14:50:be:15:a8:45:c4:43:2b:5f:
         b0:46:fc:a9:23:69:5d:73:76:91:11:6b:ec:6b:b5:74:b7:a0:
         00:f2:87:8e:b2:e0:b7:19:86:88:b8:73:62:8d:75:0b:45:38:
         cb:31:b8:e7:f1:c1:56:31:c6:6c:d4:f0:2a:4f:19:4d:87:36:
         d8:16:7b:63:b7:40:e5:73:83:32:cf:a5:2d:a9:e6:0b:d8:92:
         77:e7:dc:c8:79:eb:cd:53:aa:fd:c3:d3:28:18:75:34:bc:42:
         93:b3:f0:8d:e2:11:6d:9c:d8:f9:09:34:cf:b8:7c:c9:cc:c5:
         20:a9:47:13:0a:ad:97:47:14:bf:d8:d0:6a:90:3f:d7:5e:57:
         74:e3:85:a6:7b:7d:26:33:ad:ad:02:00:fa:aa:9d:cb:40:33:
         99:30:f5:4f:a4:5c:9b:1e:8e:67:c3:b5:b2:fc:94:ba:79:54:
         6c:38:96:bd:b3:da:f4:03:7f:bc:e3:ff:ee:ec:aa:16:e5:73:
         09:b7:35:dd:62:bf:59:3b:58:e4:38:fd:c5:24:93:6e:1c:67:
         3d:6e:3a:00:02:5c:42:63:88:9f:19:49:f1:3d:1a:89:b1:78:
         81:86:d6:f7:7a:e1:aa:79:07:55:2b:dc:9f:3d:c4:f2:b5:a2:
         2f:8b:83:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:51 2025 by rpki-client