Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File:                     vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier:          auGytVyJxHNYxQKqtqkr8kvN4u4kgUj84l6Mu3efClE=
Subject key identifier:   16:F0:BD:16:7D:12:B7:7F:6E:33:74:12:31:B0:B8:31:EE:6A:CF:54
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer:       /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial:       01976EF5322872A2AFDBF4D2D59803CCADF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 15:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:52 +0000
Files and hashes:         1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
                          2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: CCxRQgn9WAnj/xWzdnkRTIgxSkbe82S9V+pnyWYwmIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:32:28:72:a2:af:db:f4:d2:d5:98:03:cc:ad:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
        Validity
            Not Before: Jun 14 15:00:52 2025 GMT
            Not After : Jun 15 15:00:52 2025 GMT
        Subject: CN=16f0bd167d12b77f6e33741231b0b831ee6acf54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:09:f9:e7:5a:55:63:96:89:2a:63:dc:13:
                    70:ef:62:af:47:b0:e4:a7:12:2b:52:08:67:37:5b:
                    52:94:92:f4:3b:16:18:b9:af:e6:66:b5:9a:99:7a:
                    7b:4a:4b:2e:29:a2:84:91:b7:6c:bc:f2:4f:c1:10:
                    50:94:6a:b3:18:9b:43:60:1c:bf:e2:68:df:e9:b6:
                    bd:a4:08:ef:96:c3:83:ee:74:f5:52:34:a0:72:5f:
                    d4:3a:8c:78:09:2f:74:8c:5f:67:cb:fc:6f:b3:64:
                    a7:64:f4:b7:55:72:89:a1:a2:b0:68:0b:0b:7c:35:
                    66:8d:87:bf:e3:d9:ae:8c:53:2f:d4:89:93:3b:03:
                    57:22:78:50:de:ff:65:6c:0e:be:4a:07:71:1f:d9:
                    1f:44:94:6d:e4:b7:42:0d:bd:fe:3b:57:ba:c8:89:
                    71:63:9e:6f:af:b7:a8:04:f9:24:97:ed:6f:17:ea:
                    e1:9d:20:81:80:05:5c:8d:b1:e5:af:fa:8f:af:04:
                    46:a7:a5:e8:fe:19:50:e1:71:84:84:c1:99:77:48:
                    f7:5c:fb:72:27:63:ec:07:6e:45:e9:a4:58:ec:bf:
                    87:69:09:c9:56:d8:df:dd:5b:e9:a0:0c:51:b1:92:
                    66:f9:4d:fd:73:dc:ad:5f:3e:cd:c6:91:c8:36:d0:
                    8d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F0:BD:16:7D:12:B7:7F:6E:33:74:12:31:B0:B8:31:EE:6A:CF:54
            X509v3 Authority Key Identifier:
                keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:10:db:e3:11:a1:b1:c1:d1:88:55:7e:ee:0d:bc:6e:66:f7:
         ce:24:45:54:02:8c:06:59:18:30:84:b8:93:00:cd:25:41:56:
         dc:5e:81:f9:2a:93:0c:22:bc:d6:da:fc:21:c2:4b:aa:8a:af:
         7f:eb:0b:65:fd:bb:76:2a:64:5c:63:f0:13:bf:8d:10:0e:9a:
         f0:3c:54:6b:1b:ed:51:6d:3a:a9:d9:8a:19:11:93:60:a9:75:
         09:25:9b:28:4c:47:8c:09:11:cf:8a:1d:53:41:a7:08:cc:cd:
         cc:0d:e7:2f:19:b1:44:7a:57:ad:6d:dd:c2:bb:37:92:c6:78:
         53:b8:90:fa:ed:36:cd:b7:d3:83:df:74:33:a0:21:95:ac:9a:
         64:b2:e9:9d:c9:4e:26:f2:a2:c1:a5:30:fd:83:0c:0a:61:5e:
         db:e6:27:72:7f:ba:d6:8c:29:25:be:53:c3:a0:f6:ed:97:79:
         4f:06:d5:bc:83:13:91:7d:30:31:a5:67:6f:35:a6:8c:3e:a9:
         be:5c:c0:15:ad:2f:dd:7d:70:75:40:f7:ad:2b:b0:86:1f:b0:
         c4:47:27:31:65:97:0e:c1:f8:0d:fa:6a:9c:0f:fb:8f:12:11:
         55:cc:ca:72:28:ac:87:7c:c4:fa:67:b7:41:e3:00:81:90:a6:
         be:a9:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:09:34 2025 by rpki-client