Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
File:                     vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft (raw, json)
Hash identifier:          DXcgrCFTEvpH39MIlGOPzLcSEAUMhYX6fAFn+eUw/PY=
Subject key identifier:   7A:DD:88:DA:BF:1D:B6:3A:F8:00:48:1E:8C:A5:E7:61:5F:87:33:55
Authority key identifier: BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB
Certificate issuer:       /CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
Certificate serial:       01976FD11E62C4764B0FF98ABF7623F5BF82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
Manifest number:          0513
Signing time:             Sat 14 Jun 2025 19:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 19:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 19:01:05 +0000
Files and hashes:         1: W0ISdcMD3BWsHVPGG7LkFApumXs.roa (hash: ycAJc8E2fcKafG7/xeE7xIvkeS6Y7snCVRq4mmzolw0=)
                          2: vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl (hash: Z/ISjlNkE8wGafp6SJu49Chc1E5XgMPqXL6gPUvDukc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d1:1e:62:c4:76:4b:0f:f9:8a:bf:76:23:f5:bf:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6497047f20d6f708d7db42557b698fbfb3d8fb
        Validity
            Not Before: Jun 14 19:01:05 2025 GMT
            Not After : Jun 15 19:01:05 2025 GMT
        Subject: CN=7add88dabf1db63af800481e8ca5e7615f873355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:17:56:c5:3c:a4:21:30:43:d6:cf:c7:99:bc:
                    0e:b8:8b:75:41:12:a6:a3:ca:db:f3:07:4e:90:59:
                    bf:5b:a8:65:cb:2e:ec:f0:07:74:c8:25:b3:94:00:
                    bb:a4:f4:ea:e3:ec:e0:72:c2:15:cc:ab:60:b3:a0:
                    31:53:26:e4:25:46:a9:78:97:98:b2:d5:0c:1d:89:
                    04:54:a5:81:cc:bd:cb:7a:d8:01:f1:57:b4:97:d1:
                    1a:51:79:36:a2:76:a4:ff:ee:90:53:a3:91:02:96:
                    e7:9d:8a:15:a1:e0:88:c3:4a:e9:cb:c6:37:10:76:
                    83:ee:47:7e:35:b4:27:5c:30:e5:6d:b6:28:f6:e1:
                    57:14:3b:48:aa:9f:ed:ab:45:e7:70:2b:9f:b4:1b:
                    c3:b2:3d:92:80:7f:77:16:03:69:ee:c5:e4:f6:fb:
                    7e:23:f1:45:d8:db:ea:57:df:8d:25:6a:3e:0b:e1:
                    e3:8e:37:78:ec:84:5b:89:f6:2d:f3:b3:55:21:08:
                    b3:19:7a:6f:aa:6c:f1:40:d6:8a:a0:d6:a7:2c:24:
                    6d:af:df:3c:61:99:65:46:97:b5:94:cf:19:c1:42:
                    3b:1f:5f:62:d3:23:81:f3:aa:d4:c7:98:ed:6e:af:
                    e4:ab:9f:d6:90:18:0e:49:81:6b:c7:fa:5c:e3:bd:
                    18:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DD:88:DA:BF:1D:B6:3A:F8:00:48:1E:8C:A5:E7:61:5F:87:33:55
            X509v3 Authority Key Identifier:
                keyid:BD:64:97:04:7F:20:D6:F7:08:D7:DB:42:55:7B:69:8F:BF:B3:D8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWSXBH8g1vcI19tCVXtpj7-z2Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/5833f3-2421-41b0-be2e-82a107c4a7e2/1/vWSXBH8g1vcI19tCVXtpj7-z2Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:19:47:88:36:0f:3b:72:68:4d:80:44:2a:1f:98:75:10:40:
         6b:28:c6:67:85:80:ff:8c:2e:8e:69:2b:24:49:bc:9b:63:c6:
         c4:17:8b:5f:07:b3:d2:c8:96:e3:e8:34:73:14:87:d8:9f:fb:
         36:b7:82:3c:21:90:92:d9:25:8a:21:7b:52:42:97:b8:a1:f6:
         87:21:49:27:42:92:f9:1e:5b:42:e0:dd:02:1a:b4:5a:64:61:
         e5:04:4f:27:1b:5f:a8:ec:59:38:80:13:c2:3c:49:db:fe:de:
         a3:ba:fc:78:f2:52:9d:4b:4a:a5:8e:4f:fe:ba:ff:71:e9:7f:
         3f:aa:82:7a:f2:af:f8:2d:73:23:6b:8a:9a:aa:91:1d:0a:fb:
         61:7b:c0:6b:0b:e6:d7:0e:71:fe:4f:70:83:00:40:b4:e0:d0:
         1f:6f:3e:40:25:3f:95:21:1e:65:e6:8e:91:f9:47:35:4b:9a:
         65:e7:3b:7f:a4:01:b6:e5:16:b4:f6:36:a7:89:52:1b:8a:fd:
         3b:d3:14:1f:3a:37:54:eb:ff:fb:16:8d:d5:71:13:c0:22:c7:
         dc:c9:48:e0:27:b9:3d:d4:47:61:57:1b:ea:c2:61:c4:2a:38:
         22:9a:dd:91:a0:37:c7:b4:11:c7:9f:21:8b:a6:7d:bd:db:d0:
         aa:30:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:06:28 2025 by rpki-client