Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File:                     VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier:          i7SThndT778C2oTGAiSYvd7EkWm9WMlGf+z737wPNFk=
Subject key identifier:   6A:91:EE:75:CD:9C:9C:1C:F0:EA:0E:57:F6:2F:46:7B:C9:C4:09:A4
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       01978B7F76303539917E1CF6D99C426F2F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number:          0A1D
Signing time:             Fri 20 Jun 2025 04:01:15 +0000
Manifest this update:     Fri 20 Jun 2025 04:01:15 +0000
Manifest next update:     Sat 21 Jun 2025 04:01:15 +0000
Files and hashes:         1: 09p6kbowRqEqmGsIE-X77ssBdvE.roa (hash: aNbCunzaHj8fcPNQtO0tqEMAuZSFNh6caJLvvgjcZUM=)
                          2: BP3U6kFnmdq-Ooz7okVHVreJwX4.roa (hash: 8ZRH6f2/mVLLc0PYuU8YNWUcegB85lCqTXWXtLUxfLM=)
                          3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: R2KDOmabe7tJ3G3m5xaiAuuVqA8vjZD7paPYdxLyW0E=)
                          4: pH__rL1RVjxMSUxHKGG7zRUGK1o.roa (hash: jLPbh/4LV4yxXAw9vyooJrfcnHymRshQqR67+HD469o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 04:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8b:7f:76:30:35:39:91:7e:1c:f6:d9:9c:42:6f:2f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Jun 20 04:01:15 2025 GMT
            Not After : Jun 21 04:01:15 2025 GMT
        Subject: CN=6a91ee75cd9c9c1cf0ea0e57f62f467bc9c409a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:93:a1:d3:05:cd:81:b8:a2:9a:95:13:cb:
                    e9:ad:90:b2:0e:63:4c:08:db:a8:85:dd:0f:a1:a8:
                    9a:c0:b1:1d:5d:5c:a5:37:46:6d:d8:60:89:4c:8e:
                    38:db:42:86:d1:e1:f3:b2:7c:74:b6:35:81:29:b9:
                    5b:7e:52:f6:ac:15:a8:bc:90:6d:fd:e9:83:69:42:
                    93:90:da:cd:5a:7d:5a:55:b9:ba:32:a9:70:de:77:
                    59:5c:cb:46:68:5b:69:4f:de:6a:9b:0b:18:ee:1b:
                    9c:3a:94:80:9d:13:ab:98:c8:bb:e0:7f:0b:a9:28:
                    cd:af:f5:12:ea:c9:c4:f3:1a:7b:4e:36:e0:df:38:
                    fd:3b:07:56:0b:23:76:a5:29:0c:cf:a7:e9:91:bd:
                    64:04:bf:50:65:51:5c:08:86:bf:7d:26:b9:7e:58:
                    a7:3b:34:11:80:1c:01:8c:eb:83:41:63:7c:9e:f3:
                    70:a1:eb:68:ea:e3:4d:52:c4:a4:44:11:f8:6b:20:
                    cd:12:d4:bd:5a:69:06:b9:13:05:04:00:d6:47:f4:
                    e8:fe:d6:58:dd:bd:4b:ed:94:63:ea:bf:d3:f0:51:
                    ce:3b:9e:ac:72:81:c9:47:ff:ea:bd:08:3e:9e:a9:
                    d0:7f:f0:3b:3a:99:29:d2:c9:50:b6:3d:30:2c:59:
                    dc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:EE:75:CD:9C:9C:1C:F0:EA:0E:57:F6:2F:46:7B:C9:C4:09:A4
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:d1:0e:7e:f5:ce:82:78:25:1a:af:ce:ed:1c:2e:1e:ce:
         dc:38:89:cf:33:51:5f:d3:a4:3a:df:5a:d3:33:12:99:77:cc:
         88:a2:58:80:21:e4:3f:a3:54:b9:9f:37:3f:40:37:5a:a2:0c:
         94:d9:b7:3c:c3:6c:a8:ad:af:d2:ff:f0:b9:5c:b6:ee:d0:60:
         e7:d2:97:d7:97:1c:1a:c7:07:96:29:73:bd:2d:fa:41:58:08:
         78:ed:2e:74:f0:20:16:90:66:ee:63:14:87:c4:5c:1e:82:5f:
         c2:26:50:46:cd:28:53:8e:78:13:7b:fc:5b:04:9c:92:5c:57:
         0c:8e:a5:00:cc:fc:d3:13:78:3a:67:c2:b2:fe:06:a0:85:75:
         24:06:01:87:79:58:36:00:f4:93:70:fd:5f:22:18:8c:86:c5:
         e2:71:b2:85:35:ec:59:1d:ab:3d:32:df:94:ea:40:db:00:44:
         92:33:d7:1d:2b:d2:7c:05:89:92:f6:84:d6:5a:3b:ef:85:d2:
         e7:06:a1:3c:87:aa:cd:92:6f:5b:7c:97:88:6a:68:58:f3:2b:
         ad:a2:32:62:2c:1d:09:4b:72:be:d2:a0:00:1b:d3:10:b2:58:
         b6:12:02:c1:de:b6:51:ad:e4:87:60:34:cb:f5:d0:dd:6e:1b:
         4a:ba:b8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:35:06 2025 by rpki-client