Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          UkBvwT3JPeWVna2Sxg/nDdrL0dqr0ku/r/p45o6THag=
Subject key identifier:   97:85:B2:E4:CA:51:C7:C9:2C:C2:B3:3F:6A:88:1A:04:75:A0:7E:CE
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       01976CCF91D68E8220E26B37B041AD393DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          15A9
Signing time:             Sat 14 Jun 2025 05:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:31 +0000
Files and hashes:         1: 1-fqkV7JZgJxycvSPusdfWjnU1xQ.roa (hash: QONebl1+/LHi2kQ7q9RN/wwgttq2CVHi0V6T+dpI+kM=)
                          2: 1-xYWEWhRA8nM0__wgU5vRp_QcU.roa (hash: bnYzR+tYP6QenME6qvGbnZ7/wPK7R1RpQJzzDie5Khc=)
                          3: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (hash: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=)
                          4: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: DeBf+UCeHkbUjBnJNxltJ8AdBvLs4IkkkjzqjiAIvNQ=)
                          5: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (hash: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=)
                          6: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:91:d6:8e:82:20:e2:6b:37:b0:41:ad:39:3d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Jun 14 05:00:31 2025 GMT
            Not After : Jun 15 05:00:31 2025 GMT
        Subject: CN=9785b2e4ca51c7c92cc2b33f6a881a0475a07ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cf:e2:6b:36:ba:0c:a6:54:41:a4:fe:ca:17:
                    72:60:33:72:c5:ce:be:71:37:2f:79:fc:15:dd:c9:
                    2d:37:b2:87:46:9c:55:4d:cd:82:42:67:16:d6:1d:
                    da:4a:6e:5b:0b:7a:2d:0d:6c:5e:b0:aa:9c:52:e9:
                    31:ca:0c:7a:7d:f8:40:15:ec:45:b6:cb:86:cc:c3:
                    8b:7f:16:c0:38:bd:5d:0c:88:41:76:cc:6a:74:13:
                    9f:79:fb:bb:08:0b:28:06:7e:e6:e8:34:35:60:87:
                    57:9c:59:ad:b5:c5:06:2b:00:db:6f:ed:1a:bf:b8:
                    10:e8:d9:d4:1e:00:2e:93:0e:35:b7:da:e7:fb:c6:
                    65:ea:82:45:46:c9:a0:b2:a1:c3:11:27:a3:3a:6f:
                    e9:52:d0:17:13:c5:1a:ef:3e:b7:18:45:77:66:1f:
                    6e:08:e9:a1:10:8f:3c:23:82:68:ae:d2:22:61:4a:
                    c6:7d:aa:a0:bd:d2:84:77:85:96:97:31:95:c5:e0:
                    67:94:c1:17:95:45:22:8f:0e:87:c4:3b:7b:72:8a:
                    8c:86:8d:9c:f0:ed:af:c8:dc:48:7d:88:e9:f3:f7:
                    8b:25:0d:fa:f8:25:f0:1b:2f:d1:e1:55:04:01:28:
                    6e:fa:79:00:93:3d:f8:6a:3b:38:65:4f:0f:7e:01:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:85:B2:E4:CA:51:C7:C9:2C:C2:B3:3F:6A:88:1A:04:75:A0:7E:CE
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:76:e3:32:03:ee:d9:6f:3f:44:67:6c:9a:b4:d3:83:6e:b0:
         a4:f8:14:19:9f:3d:f3:66:30:5d:b9:47:83:52:74:b2:fa:22:
         a2:70:27:69:ce:5a:a6:9c:5a:65:f9:fe:25:e9:12:72:ae:56:
         4c:8c:57:37:13:05:f3:ca:bb:c6:75:03:02:98:45:94:df:22:
         90:5c:36:b5:ce:d8:fe:a7:8b:cb:c0:4f:6e:a3:1b:7c:f9:e3:
         3b:87:5b:54:10:87:b4:3b:1e:50:2a:69:64:61:e9:d2:5e:27:
         8f:04:76:62:39:be:72:ec:3e:60:ff:4a:3e:8c:11:c7:df:56:
         c3:e4:b3:fe:bb:12:59:c5:42:c8:41:cd:d7:b1:b7:23:c6:c9:
         65:c9:00:fe:d2:5a:8d:7e:e3:fa:24:a0:4d:2c:2b:cd:1e:c6:
         9a:e5:4e:e3:c3:81:79:f0:e1:5d:0f:f3:97:57:47:85:db:5b:
         0a:67:b5:44:f3:2c:a6:0c:42:09:dc:96:08:c8:c7:3e:ca:af:
         36:46:c8:da:b2:14:a7:c0:da:98:b7:a1:b8:f8:b0:cb:f1:6e:
         40:f8:99:ff:ac:6d:0d:8f:57:68:a5:6d:9b:f5:f1:21:ec:64:
         39:42:8a:c0:07:52:04:da:30:9c:77:be:ca:8b:cc:67:1d:e7:
         bc:52:65:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:19:11 2025 by rpki-client