Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File:                     92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier:          t0ZyhVB9CXLbtD4O4hZrEtz6vmuSeIOfMW4k6rGxLkI=
Subject key identifier:   56:4F:7F:32:64:8E:F4:7F:1E:B7:FD:5C:90:AE:22:B1:AC:12:4B:C0
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer:       /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial:       019778D3E80DF2D5AB0072422C2E7EDAB26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number:          0DAC
Signing time:             Mon 16 Jun 2025 13:00:42 +0000
Manifest this update:     Mon 16 Jun 2025 13:00:42 +0000
Manifest next update:     Tue 17 Jun 2025 13:00:42 +0000
Files and hashes:         1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: 0H6eN/0ZEwMw9E7uOhGxXzr/aSDgN39zHbVDsEfs6bk=)
                          2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d3:e8:0d:f2:d5:ab:00:72:42:2c:2e:7e:da:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
        Validity
            Not Before: Jun 16 13:00:42 2025 GMT
            Not After : Jun 17 13:00:42 2025 GMT
        Subject: CN=564f7f32648ef47f1eb7fd5c90ae22b1ac124bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ff:8a:3d:b3:ae:d8:10:cc:78:43:9a:26:35:
                    74:7b:42:a9:29:d8:fa:3e:58:e9:ea:3c:70:2e:69:
                    3d:12:1b:d9:ea:52:dc:6b:ad:d9:a3:79:d8:64:5a:
                    bb:2a:af:06:18:c5:a7:0b:53:69:36:af:23:f7:c4:
                    7d:10:e2:9a:4a:dd:9f:f9:3e:42:f8:b4:03:59:b7:
                    a9:16:91:43:f6:50:61:ea:eb:4e:01:68:8c:c9:4f:
                    a8:e3:ce:ba:97:22:4a:0d:01:d6:32:85:71:93:d9:
                    17:10:59:b8:e9:5e:07:ee:06:e1:0b:6e:34:56:4c:
                    0b:68:79:41:1c:20:49:cd:6c:07:d9:f6:7e:79:b2:
                    2e:56:7e:b9:2f:c5:ad:a4:1a:40:b8:9f:05:eb:1a:
                    59:af:98:ad:8f:4b:ae:76:27:de:7b:b8:d5:2a:23:
                    8a:05:4a:20:52:22:0e:16:ba:61:0a:1b:68:ad:98:
                    71:7d:9c:56:cd:47:18:18:fe:ff:63:d0:dc:71:44:
                    7f:b3:71:16:c2:d7:d4:6a:ff:89:3a:92:13:60:d7:
                    fc:b3:10:0d:4e:ca:7e:ce:f8:7b:fc:d5:e3:0d:d9:
                    70:24:eb:69:a4:4c:e7:9f:bc:ae:07:c3:45:46:8f:
                    0b:8d:9c:2e:8e:ee:aa:86:6e:bc:0d:2c:fb:a4:10:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4F:7F:32:64:8E:F4:7F:1E:B7:FD:5C:90:AE:22:B1:AC:12:4B:C0
            X509v3 Authority Key Identifier:
                keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:16:e8:30:72:87:82:bd:68:5b:4d:0c:90:7f:51:78:9e:
         65:79:4e:52:9e:fc:00:2b:03:64:f0:7a:d5:74:ab:eb:13:ce:
         c6:eb:6a:a8:17:c4:63:85:33:ff:e8:2a:81:ae:1b:65:d4:6a:
         8b:63:97:59:cc:8b:ea:cb:5c:f7:5c:8e:9c:33:1b:c8:3d:7d:
         29:bb:c7:aa:0e:a3:b0:38:44:d3:94:7d:e2:40:97:9c:09:7e:
         a5:4f:d3:c9:f7:dd:8d:83:05:dd:34:d1:62:62:80:cf:b0:c2:
         72:77:af:7e:9c:9c:8f:88:bb:0c:1e:1d:97:21:3b:02:9d:f6:
         6c:c9:1c:7c:2a:63:bd:1f:cf:30:68:7d:c4:00:a7:76:86:32:
         db:92:d2:75:86:19:5e:0b:63:ce:7d:a3:0a:20:69:d5:0d:08:
         ca:20:12:e6:d2:88:24:ae:0e:f2:76:0c:3a:a9:14:c8:26:0c:
         14:9f:c5:d7:2b:3e:31:36:67:e9:23:7b:c0:78:d3:81:b7:7f:
         a7:59:2b:76:01:a8:73:d3:02:93:8a:78:6f:c9:db:f0:7a:72:
         19:2a:35:9d:f2:9c:1c:32:23:97:e0:dd:66:8b:a4:fd:13:cf:
         f3:d0:4d:00:57:d0:6e:61:90:2d:54:4b:08:89:01:79:1c:45:
         14:eb:47:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:12:37 2025 by rpki-client