Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          ADIxUrEKd1DBqfvr7pzROdikk/EtXKTzUJpwblIouAw=
Subject key identifier:   91:C8:5D:B1:E9:2A:15:C5:5F:BD:FD:50:04:95:E6:38:68:70:DB:A9
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019780C42FAA0EEBDBCCED1CCE27DF83EF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0935
Signing time:             Wed 18 Jun 2025 02:00:30 +0000
Manifest this update:     Wed 18 Jun 2025 02:00:30 +0000
Manifest next update:     Thu 19 Jun 2025 02:00:30 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (hash: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=)
                          4: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (hash: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=)
                          5: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          6: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: MR0fCbm4Iv2YTaW7VfmNBqmnWBZg5k93N5De4v+eiDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:c4:2f:aa:0e:eb:db:cc:ed:1c:ce:27:df:83:ef:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Jun 18 02:00:30 2025 GMT
            Not After : Jun 19 02:00:30 2025 GMT
        Subject: CN=91c85db1e92a15c55fbdfd500495e6386870dba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fb:68:00:fd:3e:d0:90:c5:ad:5c:ca:7a:b9:
                    fc:bc:8f:36:86:a0:c8:b4:53:e9:e8:ff:21:99:7e:
                    09:4b:a5:2f:68:82:0f:08:f5:13:f0:78:34:a3:58:
                    d3:91:75:85:dc:11:7a:6f:9b:9b:d7:66:76:60:5d:
                    77:bb:2a:63:c5:48:e5:50:e7:f5:06:7d:bf:39:c3:
                    7e:cf:39:00:34:95:45:dd:a5:c6:02:c5:64:00:3c:
                    9c:88:e0:2c:e3:5f:f3:e0:1e:90:9a:b7:d0:78:01:
                    b8:9f:74:74:4e:d7:98:16:f0:98:0e:ff:31:64:35:
                    e6:15:f5:f9:84:af:d6:38:d0:c5:bf:ba:06:8f:62:
                    5e:ff:55:51:f3:18:da:b1:42:e1:3b:c4:10:cf:b4:
                    67:50:f1:d6:fc:76:9e:6e:62:5d:99:d6:b7:84:0e:
                    65:00:65:1f:40:71:7a:b7:1d:9f:94:9b:32:93:06:
                    3d:1e:97:ef:42:d9:00:50:00:a2:bb:02:c5:0d:23:
                    4a:58:ac:7d:d8:41:0e:48:70:a3:fa:23:1a:3f:6f:
                    41:f6:86:12:82:12:42:b7:ef:91:f0:b0:05:10:ee:
                    ea:8a:f5:74:1c:e0:ab:23:60:08:a0:d3:10:e5:7f:
                    d5:04:a3:f7:9d:0f:df:b4:86:94:84:86:8d:29:81:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C8:5D:B1:E9:2A:15:C5:5F:BD:FD:50:04:95:E6:38:68:70:DB:A9
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:74:c8:39:14:2d:d5:ff:2e:f4:f6:b4:7d:e3:19:d8:0a:e6:
         ba:81:1c:94:76:91:55:de:f9:9c:e6:cd:a8:5b:66:57:6d:69:
         96:dc:76:a8:61:ff:de:0f:77:45:2f:5b:27:19:46:6e:dd:89:
         9b:51:0e:7b:1f:6c:fe:9d:8c:98:5f:c4:96:7f:53:62:f5:c8:
         b1:00:b1:80:0b:f4:3f:30:f7:e1:ed:5e:6d:04:96:2b:0f:dc:
         3f:e4:45:e3:29:78:d3:40:7a:81:db:56:1a:88:f2:b8:6e:10:
         01:33:0d:6f:62:c6:7e:59:1c:3f:a8:f5:fb:8e:a5:a5:97:f9:
         f7:22:70:a3:35:17:d9:4f:c3:c4:18:b6:70:a2:65:8f:aa:ee:
         50:e4:9b:93:d8:4f:b0:b2:1e:a0:e3:46:51:ad:43:6a:30:1d:
         52:e8:17:07:d6:46:63:01:f4:3f:a2:b6:59:b1:69:c0:4c:c8:
         0c:01:f9:a9:b4:26:05:14:a3:b9:7b:a0:c3:4d:ce:73:21:ad:
         0e:4d:f0:7f:08:77:01:54:90:d3:87:47:97:fe:ac:ef:ae:42:
         1b:09:38:fe:7d:bb:11:5e:d9:27:ff:2a:01:c7:0d:97:96:4e:
         38:ba:71:53:c9:19:cf:fe:98:d4:01:78:51:f7:4d:b1:2b:da:
         10:b8:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:45:34 2025 by rpki-client