Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
File:                     vGyMBtLTwoAfBUWPyDQT2wpd360.mft (raw, json)
Hash identifier:          DBt29im+Cd46b2bpz6GaYEtAJBRrjA6ALoNNfa9Zokk=
Subject key identifier:   98:13:F6:23:F0:9B:18:24:10:32:D7:E5:6D:97:7B:31:F0:A1:D0:0B
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Certificate issuer:       /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial:       01976D3D3E68C9DE6319ABB675FA9A20A023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
Manifest number:          1547
Signing time:             Sat 14 Jun 2025 07:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:19 +0000
Files and hashes:         1: U0KY9ZKPsJlqZ_fjj5KuOfG7liQ.roa (hash: 5isKje1lpF1TP+xkv3pk/79DT+7Q32SYKgQSnAuwk8E=)
                          2: fGA1M57yGBtOMUI08h8wD_v-d7E.roa (hash: CuPB00S3uLOygPninxMXcEhxd+sJxquT0fKOzzZvR50=)
                          3: vGyMBtLTwoAfBUWPyDQT2wpd360.crl (hash: zRLZuzVOess88MoZNQYFZ7r5qOql3r6dfofQHeUEM14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:3e:68:c9:de:63:19:ab:b6:75:fa:9a:20:a0:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
        Validity
            Not Before: Jun 14 07:00:19 2025 GMT
            Not After : Jun 15 07:00:19 2025 GMT
        Subject: CN=9813f623f09b18241032d7e56d977b31f0a1d00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:8d:f6:12:4e:66:7a:bc:47:61:34:91:3f:
                    a5:17:f5:2a:9f:12:ca:1c:a6:d5:1c:17:57:c8:ce:
                    9f:ec:77:40:f3:4b:bf:03:af:c3:c3:f4:99:b9:ae:
                    e5:38:fb:ce:94:bf:ba:51:c2:fd:19:4e:ea:b0:e0:
                    b4:b1:6d:ab:0c:b3:eb:2b:36:40:4b:a7:89:7c:62:
                    0d:c7:99:e6:f6:26:38:55:d3:51:78:66:ce:c7:4d:
                    3f:00:5a:96:27:f3:60:5f:2d:27:56:2b:26:91:8e:
                    5d:70:d7:d0:19:0a:21:e7:71:0d:1a:d0:1d:58:8b:
                    9c:d9:71:04:21:8a:bf:cf:66:bc:26:38:a5:61:ef:
                    bc:96:da:dd:ca:a5:0b:c3:4a:a7:42:ec:b7:02:ef:
                    43:e7:fa:cc:cf:c8:f3:ff:79:88:bb:03:3a:dd:a5:
                    3b:de:7e:07:ed:bd:a5:49:a7:76:76:ac:b7:78:ed:
                    c4:69:fb:72:7a:d9:a3:a9:19:e4:ca:c4:d7:cb:fb:
                    f9:38:5f:67:79:08:54:45:19:3e:83:87:4a:43:f6:
                    b5:fa:05:ba:eb:e3:2a:e2:80:54:e8:6e:bc:ce:2c:
                    fe:eb:56:da:ac:1e:3c:da:50:b1:f1:c8:6b:6c:dd:
                    bb:74:21:71:03:c0:0d:c2:a4:65:7d:c9:73:3e:46:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:13:F6:23:F0:9B:18:24:10:32:D7:E5:6D:97:7B:31:F0:A1:D0:0B
            X509v3 Authority Key Identifier:
                keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f5:b3:11:c6:93:48:ed:37:ce:02:ff:8e:f1:1e:7b:d2:a9:
         60:86:b8:e3:3c:97:98:d2:cc:4a:a7:14:18:96:41:b6:a9:b7:
         a3:1b:b4:17:e1:e3:ec:b1:b7:74:c8:e1:26:be:86:3b:99:7c:
         1f:82:d7:85:66:f8:19:fc:80:90:29:41:d4:a6:d0:75:71:ab:
         81:57:a5:d9:c3:55:c0:24:6b:9f:a9:34:62:3f:4a:40:18:f3:
         f3:41:c6:64:63:16:6c:27:38:61:b7:8f:32:28:95:ab:87:d1:
         ec:2a:30:25:ca:71:9a:c5:5f:dd:c4:d8:70:ec:2f:dc:c8:81:
         6e:95:cd:bd:d9:7f:7b:b4:fe:ea:01:bd:c3:be:d5:49:37:c3:
         35:d9:88:3a:01:17:b8:cf:cb:c3:01:47:d4:c5:9f:10:44:1b:
         5e:9f:fd:8d:53:c7:34:32:28:ec:cd:17:24:58:16:a3:27:d0:
         b3:56:14:f9:c8:5f:9e:92:f4:52:88:3c:38:14:8c:2b:83:6e:
         94:fd:63:be:39:3c:31:87:cf:88:06:2e:75:d1:d8:4d:48:92:
         fb:79:cc:5f:52:15:57:d9:19:38:b1:fe:01:5e:c7:a0:23:6d:
         0d:2f:ab:64:90:54:63:a2:7e:f3:9c:e7:ff:6e:0a:9c:71:be:
         5c:ce:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:57 2025 by rpki-client