Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          /3WA/WDQdy3lfn5JJ+R05i3R9hMhnsGj6Lz/Acc4qDk=
Subject key identifier:   FE:F9:D6:BA:8F:88:69:C9:1F:02:DF:49:24:0D:D2:FC:0F:A0:0C:F0
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       0197696159BE147A751C54EF6FE9150DD5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          0CBE
Signing time:             Fri 13 Jun 2025 13:01:16 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:16 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:16 +0000
Files and hashes:         1: Wov-rogss9nwzo0EqvEMesDtem8.roa (hash: ajFMqrFV3/ilI/Icdeg3WVYYBJHDgZFZXDWmXuDh9DU=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: KsBwBPI8AnUg9+cihw/bCvofqYINmgBG0rG5I5nGvCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:59:be:14:7a:75:1c:54:ef:6f:e9:15:0d:d5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: Jun 13 13:01:16 2025 GMT
            Not After : Jun 14 13:01:16 2025 GMT
        Subject: CN=fef9d6ba8f8869c91f02df49240dd2fc0fa00cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:5d:08:bf:29:55:15:53:27:d8:03:4d:01:
                    c2:87:ad:76:57:33:d5:52:2a:18:81:4a:f3:00:35:
                    ce:11:51:5c:d4:50:e5:13:a1:ca:15:c5:62:1c:41:
                    f8:56:65:9e:1b:6e:4d:d9:0d:3f:5d:42:f6:58:01:
                    0f:ec:76:8f:9a:84:63:a3:c5:0d:1e:68:32:88:bb:
                    95:b3:2f:ae:56:ba:fb:55:ea:13:e7:4e:3d:87:bf:
                    b1:b8:46:3e:5f:81:31:61:c7:21:30:d4:b6:21:63:
                    cd:f9:fa:19:2a:14:9c:43:10:a2:9f:88:42:71:ed:
                    27:29:d6:bd:8b:86:ef:07:bf:37:8b:7f:96:82:06:
                    af:e3:7c:79:d4:88:ae:db:d7:50:c1:05:8d:1c:d2:
                    8d:38:2a:26:39:9e:64:71:a3:ac:11:41:1c:cc:85:
                    34:f5:27:56:8c:47:57:88:91:d4:cb:85:ce:8d:25:
                    6f:f8:bb:6a:27:47:b7:fb:b8:bd:96:98:d1:84:b7:
                    b1:7d:e9:bc:05:d7:34:da:f4:2d:fe:3c:64:1b:1b:
                    bf:45:57:5b:e2:2c:b2:82:4e:b1:ab:f2:93:58:4d:
                    82:c3:44:97:73:22:07:16:2d:b1:32:5a:b5:69:2d:
                    7f:37:07:4d:ea:b1:92:eb:b3:20:80:6f:cf:26:28:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F9:D6:BA:8F:88:69:C9:1F:02:DF:49:24:0D:D2:FC:0F:A0:0C:F0
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:a5:10:92:8f:5e:83:ac:d0:e5:36:6b:35:16:7d:b5:c7:
         cd:7d:a0:fd:7b:c1:66:4c:4a:49:ae:c4:56:7c:fa:0e:8e:c6:
         e0:0e:a8:53:14:7f:9c:6b:b2:65:56:6d:32:3d:1e:71:03:34:
         e8:8a:66:60:29:fd:39:48:79:28:87:a1:c5:2e:33:e1:8b:ee:
         8a:20:80:bc:80:b4:0f:f5:1d:a1:9b:90:6e:ca:b8:0f:ea:44:
         fc:94:b7:32:ee:f2:da:f2:b9:c1:d2:2b:3b:a6:b7:19:73:aa:
         8c:93:17:3a:6d:9b:83:a6:ba:63:f5:a6:58:77:1f:26:91:50:
         ec:49:44:86:74:9c:dd:91:60:be:ce:12:a1:0f:25:38:48:3f:
         c2:00:f8:69:e0:35:1e:04:c5:34:43:8e:e4:ba:59:d9:12:29:
         01:be:d9:3f:20:81:66:96:9f:29:b8:02:71:b6:77:20:a0:2a:
         b0:ea:fa:1c:cb:b1:9a:1c:29:27:21:f9:12:96:dc:23:55:b6:
         25:37:ea:1a:86:87:97:d6:a1:2b:52:09:96:a9:78:a3:78:44:
         94:15:6f:a1:32:dd:13:49:5f:45:33:fa:09:2d:9d:e5:e8:e9:
         87:c6:a9:d4:16:74:83:3f:bf:2e:f8:94:25:eb:59:a6:8e:06:
         cc:a5:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:44 2025 by rpki-client