Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          5LBwPL91MW+3j9pX+pcScQ8w5glvT+ulep/OPQA4hgI=
Subject key identifier:   FE:B0:63:C7:FA:00:4B:03:E1:0F:20:18:C4:86:1A:04:BD:01:BA:CC
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       0197778A40782F60C165F40DE166CD79B509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          0F8E
Signing time:             Mon 16 Jun 2025 07:00:38 +0000
Manifest this update:     Mon 16 Jun 2025 07:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 07:00:38 +0000
Files and hashes:         1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: X0W+6Y4xGxcCLW0D/RxE7mx7qw/98gU4YOrZKK8tu/g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:77:8a:40:78:2f:60:c1:65:f4:0d:e1:66:cd:79:b5:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Jun 16 07:00:38 2025 GMT
            Not After : Jun 17 07:00:38 2025 GMT
        Subject: CN=feb063c7fa004b03e10f2018c4861a04bd01bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f3:ca:61:2b:5b:47:73:57:a3:7a:c7:bd:88:
                    b4:51:44:7a:d0:c8:9d:00:5e:a6:23:9b:f4:cf:16:
                    ca:2c:aa:60:21:73:e9:b2:ef:f4:74:1a:62:24:99:
                    3d:2a:77:22:a7:28:c4:18:2c:fe:a8:dd:10:d3:a4:
                    53:78:e0:3b:1b:e1:2a:5b:bf:3d:fe:eb:d5:9c:0e:
                    f0:c7:00:d5:32:4d:f1:d7:ef:e3:20:36:b0:e0:03:
                    fb:c7:b5:2e:8b:2c:0a:aa:9c:93:82:c4:2b:74:fa:
                    96:c7:f1:a3:0e:1e:c3:a3:bf:69:13:bf:a2:0f:72:
                    ca:eb:60:81:04:12:f1:84:42:d9:d9:3c:1e:ba:1e:
                    53:12:2e:ed:6d:ed:98:f7:51:e8:2a:e7:03:8e:ad:
                    7c:26:d8:8b:35:6b:29:04:c1:47:83:bd:70:f7:66:
                    f7:94:0e:52:e3:e8:16:4f:d5:c1:de:ae:41:de:87:
                    e9:c2:88:ae:81:ef:fd:06:84:75:59:94:9c:2d:2a:
                    95:d2:e7:47:e1:5e:5f:19:0c:00:49:3b:df:44:54:
                    a3:d3:57:fe:b6:ab:96:6b:04:56:a7:04:f3:dd:c3:
                    19:65:35:b8:f4:7d:5c:47:71:a8:58:a6:b5:39:e8:
                    a7:68:64:47:03:cb:f7:7b:21:94:10:d3:18:93:d6:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:63:C7:FA:00:4B:03:E1:0F:20:18:C4:86:1A:04:BD:01:BA:CC
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:31:2b:e7:f7:a7:60:5c:5a:9f:e3:de:b2:4f:8b:a9:57:15:
         63:1d:4d:40:fc:25:ae:bf:78:67:58:a6:b9:ca:0a:2e:b4:75:
         7d:04:f2:a0:84:4d:60:12:fa:71:23:17:89:16:dd:32:a8:01:
         a2:4f:16:88:0a:0c:9f:07:76:c3:56:3a:37:a2:29:9e:75:71:
         11:64:a1:24:a4:b1:5e:cb:dd:95:97:86:27:f3:09:8d:a7:b9:
         8c:4a:48:ee:27:39:c8:86:37:af:03:df:9a:38:ad:2f:43:a8:
         80:4a:4e:e5:72:12:6c:9c:8d:43:d5:07:97:cf:7a:14:25:9e:
         a7:f8:71:0f:73:e8:d9:97:74:ef:55:61:da:4d:51:49:26:97:
         4c:cb:96:0a:64:f2:2e:f5:d0:8e:fc:c8:32:90:6f:30:af:a6:
         a9:56:6c:2b:e2:f6:b6:68:ba:52:a3:a9:19:28:61:5f:3d:b0:
         53:d1:0f:14:e6:71:20:87:c2:0d:ee:be:2e:e7:bc:a2:98:ea:
         96:84:f1:f4:31:9d:d9:8c:7d:20:be:d5:e5:81:2b:f1:7b:ea:
         40:9c:0b:8e:15:cb:48:11:4e:eb:7f:23:d2:87:8c:a1:34:2f:
         dd:ae:b0:8a:94:41:f1:f9:08:20:19:c0:67:ea:5e:df:92:65:
         cf:cd:24:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:15:20 2025 by rpki-client