Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
File:                     VZe006Zk2swkk01I3RiOoY6PJ8E.mft (raw, json)
Hash identifier:          cfjaCFWOYW8uXagp+pgOfiMMAk2NIejLACJjJfUGpIE=
Subject key identifier:   53:D0:A3:BA:26:81:2F:39:D8:09:48:76:4C:90:53:96:03:D6:94:DB
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       01976D3E69DF1E8BD72CF04AC06C641EC75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
Manifest number:          0C76
Signing time:             Sat 14 Jun 2025 07:01:36 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:36 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:36 +0000
Files and hashes:         1: 8kfnwOtBgq_5_lkL_XTWGS_DW2A.roa (hash: R1ovdHUKN/hPy17oklKDPDEJOp9Mxs/OWbcQb2xo5Ek=)
                          2: VZe006Zk2swkk01I3RiOoY6PJ8E.crl (hash: Tg2WvttiUgaBI4FgDN7j7XmfN7AIMhAay637h5I3MY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:69:df:1e:8b:d7:2c:f0:4a:c0:6c:64:1e:c7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Jun 14 07:01:36 2025 GMT
            Not After : Jun 15 07:01:36 2025 GMT
        Subject: CN=53d0a3ba26812f39d80948764c90539603d694db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f3:c7:02:75:b1:06:14:44:ef:73:16:48:a0:
                    2b:18:e2:0a:51:33:87:3d:a7:1e:d2:b3:2a:f8:ff:
                    5f:87:bb:45:e0:3a:58:ba:a1:09:9e:3b:21:85:79:
                    ff:bc:c6:2f:d1:89:4c:41:d3:90:e6:27:89:00:76:
                    6b:14:8f:66:ec:6d:f2:07:92:01:c1:ef:fe:67:ff:
                    d8:73:4d:5c:ec:6b:92:d0:89:7c:55:99:1c:a1:66:
                    1c:e7:ff:b5:ce:85:fb:b4:e2:5b:c9:c4:78:6e:0e:
                    1f:bc:7b:3e:ee:1f:38:48:a0:74:e0:1b:8a:1e:9d:
                    2f:60:77:35:40:2e:e3:c6:63:13:bc:09:b2:2c:32:
                    af:26:2d:f1:b5:74:29:4f:89:a6:9a:43:e8:98:b0:
                    f2:4b:5d:82:1c:dd:d6:89:07:59:79:69:11:2c:b8:
                    1e:09:a2:3d:52:02:29:99:6b:a1:b0:58:e3:7a:c9:
                    c1:33:90:44:46:f1:c5:9f:c1:53:c0:f3:5d:9d:e4:
                    9e:a1:72:5a:45:02:57:f6:24:a0:71:06:ab:73:eb:
                    a1:35:ae:46:c0:2f:2a:9b:8d:b5:c7:de:f5:f0:1b:
                    11:22:1b:9c:fe:e2:c4:ec:1a:e8:3b:2e:eb:2d:87:
                    66:87:0f:43:1d:8e:ac:c1:7f:c9:df:1d:f8:95:4e:
                    52:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D0:A3:BA:26:81:2F:39:D8:09:48:76:4C:90:53:96:03:D6:94:DB
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:25:a9:7a:30:0d:6c:92:64:cc:d1:46:cd:c5:78:66:e0:
         f9:5f:cc:be:9a:98:ae:2e:f3:df:94:20:ca:26:5f:d7:07:bb:
         82:d5:ed:bb:41:00:3c:44:c2:0f:a2:31:3c:00:4b:3b:37:cf:
         1b:76:fb:33:4f:4b:ed:6d:56:0e:ed:3a:27:8e:3a:8a:4b:36:
         1d:8e:0a:20:f3:58:1a:dd:e2:9e:eb:f7:82:86:89:e0:e1:4c:
         e1:91:3a:b9:0d:8f:40:94:be:b6:2b:a8:19:57:4b:8c:38:f4:
         f6:1d:d5:5f:ba:a6:88:3c:d7:d3:ac:d4:a8:42:59:da:d9:4c:
         b6:ea:fe:c7:eb:36:33:cf:52:df:4b:b0:3a:69:4c:90:7a:03:
         2f:df:7c:10:32:b4:64:2f:78:2c:88:86:a6:9e:57:6b:6b:d5:
         a9:29:26:40:5f:a0:6e:03:0b:e2:c8:d3:f1:19:b7:28:5a:5b:
         bd:ee:50:fe:e9:4b:b6:87:08:17:63:98:87:b9:6f:54:d8:3e:
         e9:26:63:c9:2c:b8:4c:df:6e:25:6b:37:42:54:47:28:8d:03:
         6e:82:b1:cc:90:43:1a:a3:18:28:b4:ae:ea:80:71:ef:bc:c8:
         b4:3d:80:02:91:ef:21:59:25:7b:07:2e:57:a9:04:06:9e:8d:
         80:6a:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:51:05 2025 by rpki-client