Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          KTQeUM8r46rKPm3Eq5ruiwhILiTBKgl5n4NdzKRMf3I=
Subject key identifier:   7C:EB:F6:3B:4A:6D:4A:97:4F:D5:CD:BE:57:A2:08:CE:BC:CF:7A:A5
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       019776AE84B86D4AA41B8F95749BF2ECBAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0A8A
Signing time:             Mon 16 Jun 2025 03:00:37 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:37 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:37 +0000
Files and hashes:         1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: ppr87EVyRPHLhXWXHnSo6T/XZQ3gNIG2J/2lrmRH1GI=)
                          2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 03:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:84:b8:6d:4a:a4:1b:8f:95:74:9b:f2:ec:ba:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Jun 16 03:00:37 2025 GMT
            Not After : Jun 17 03:00:37 2025 GMT
        Subject: CN=7cebf63b4a6d4a974fd5cdbe57a208cebccf7aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:79:25:a8:0b:c3:5a:e4:ea:66:cb:a3:f9:2c:
                    da:63:3b:53:97:71:ba:28:fd:cd:66:0a:d1:f1:e0:
                    22:58:b6:0d:c0:68:2f:a5:3b:86:5c:1d:ea:10:02:
                    6b:58:b0:37:20:01:29:e0:d1:d6:69:55:2a:92:62:
                    5b:2d:1a:de:0b:48:f8:a8:1d:ac:2f:e8:c7:e7:07:
                    1c:b5:05:d4:f0:e2:42:2c:7c:c6:5f:d2:c2:04:ad:
                    ea:cf:41:ea:58:8d:a3:ca:a3:13:93:8d:74:ec:08:
                    bd:f7:ec:ee:32:50:8d:f4:7e:91:e3:7e:12:cd:3f:
                    c7:3d:78:b3:6c:26:f0:6c:32:1b:88:1a:08:c5:d0:
                    ec:9f:6e:f8:2a:84:54:14:d0:6d:cb:e3:50:44:14:
                    c7:33:c8:a2:fe:94:38:f2:82:4a:48:fd:c4:4d:e7:
                    73:aa:07:8d:f4:74:39:fc:40:76:82:0c:d5:5f:2e:
                    84:7c:59:b8:6e:2c:6f:a5:40:7f:20:31:34:4e:33:
                    8f:2e:89:ef:61:9e:8f:9f:96:29:57:60:9c:4b:bd:
                    a2:31:05:99:47:56:5d:27:ca:22:02:d0:55:77:38:
                    0c:16:d0:f1:4d:09:51:d7:46:d2:ad:83:d3:da:27:
                    f9:54:09:64:0f:28:76:9f:5c:c8:32:59:49:d9:cb:
                    1d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EB:F6:3B:4A:6D:4A:97:4F:D5:CD:BE:57:A2:08:CE:BC:CF:7A:A5
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:70:fa:87:3d:29:81:cd:5d:a0:bd:a0:92:21:07:37:28:
         b7:a3:2b:d6:bb:d1:85:6d:75:ce:2e:dd:4a:c5:f1:ad:63:27:
         37:6a:6e:6d:73:1e:b2:44:e8:e2:92:88:f1:6d:bf:50:b4:a0:
         19:27:a9:49:94:78:a9:fd:ee:a7:de:16:f4:17:b1:18:f8:5b:
         38:8b:a8:13:3d:17:cc:79:7c:9d:38:ba:10:2a:b0:d1:33:35:
         16:ec:ae:89:52:e9:27:01:a5:48:07:68:35:30:75:76:df:78:
         10:48:b7:8d:be:e6:1d:01:a4:29:03:8a:30:83:e1:11:e6:0c:
         f2:a4:7d:a6:09:64:af:19:3e:bf:89:cf:32:66:a2:8e:a9:98:
         cf:2e:e1:b3:9d:8a:1d:18:87:9c:c0:a8:6c:6f:e3:2a:33:3a:
         6e:5c:32:dc:d8:bb:e1:22:29:4a:90:c2:aa:06:55:f7:1e:45:
         fc:b6:9f:72:22:77:7d:e7:12:b3:d0:44:3c:6f:c6:62:eb:bc:
         df:f2:01:ec:c9:db:8c:1a:5d:1f:6e:f7:9c:11:b3:fa:8e:d8:
         0e:bc:04:dc:a3:45:05:fb:17:1e:44:b1:2d:84:fe:31:f1:b4:
         77:19:0d:ee:91:39:59:f9:8c:88:3f:0b:71:82:07:da:20:89:
         f6:23:4b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:43:26 2025 by rpki-client