Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
File:                     _vf9VxCuWkc-FY3D_WyPF--j5Vs.mft (raw, json)
Hash identifier:          TGNw4PlYmjwkTt+h8Z1zfgVqYeIZmCJLHRSMTycD9LE=
Subject key identifier:   59:40:23:E4:E2:B5:EC:00:F9:34:DD:24:C2:70:5E:1C:4B:3E:20:4D
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Certificate issuer:       /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial:       0197715107228C7F9F9C54A9B0CBD047E40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
Manifest number:          088E
Signing time:             Sun 15 Jun 2025 02:00:24 +0000
Manifest this update:     Sun 15 Jun 2025 02:00:24 +0000
Manifest next update:     Mon 16 Jun 2025 02:00:24 +0000
Files and hashes:         1: 718OhuWzPYV76do8dJwyLY1c4nY.roa (hash: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=)
                          2: _vf9VxCuWkc-FY3D_WyPF--j5Vs.crl (hash: ghBAsgcRoGfvUn8zv3Z2xowXktd6Au8EIhNXeGEvA8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:51:07:22:8c:7f:9f:9c:54:a9:b0:cb:d0:47:e4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
        Validity
            Not Before: Jun 15 02:00:24 2025 GMT
            Not After : Jun 16 02:00:24 2025 GMT
        Subject: CN=594023e4e2b5ec00f934dd24c2705e1c4b3e204d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:56:df:39:c6:aa:ce:70:ec:4f:8d:6e:e1:
                    97:15:6a:04:78:47:24:0d:bb:68:60:26:da:29:1a:
                    bd:2f:8a:f4:a9:0f:19:ed:19:5d:ca:43:66:57:61:
                    a6:e5:04:d8:ad:40:95:a1:6c:7f:ea:29:52:10:24:
                    0c:af:cb:b1:3b:07:41:12:8c:fd:9a:9f:51:12:f9:
                    09:1f:da:a2:a3:53:be:49:69:ab:fa:dc:84:87:47:
                    f3:a2:21:0c:34:80:76:16:bf:65:ca:f6:08:36:7b:
                    0c:23:30:2e:fd:a8:a1:82:6c:b7:aa:99:89:65:a0:
                    26:62:03:33:dd:75:73:be:c4:90:ad:5f:88:91:48:
                    ac:f3:86:dd:b1:40:66:be:35:fc:5c:7c:43:42:ae:
                    18:21:08:ff:78:1c:ec:f2:67:9c:fd:fb:9f:4c:59:
                    5a:6f:e1:2d:42:06:48:a8:5a:c0:3c:b4:d2:32:86:
                    35:f9:60:f6:8e:84:b8:62:eb:d0:01:c2:12:94:8a:
                    2a:8a:db:c9:5a:a1:fa:ad:f6:dd:ab:62:0a:c1:06:
                    8a:58:6c:66:7b:15:74:69:77:c8:ae:b6:9e:7b:41:
                    f9:df:ce:0e:3c:00:ed:de:cd:75:d9:9c:70:9d:3e:
                    c9:85:dc:ce:e8:16:f3:ee:9d:f7:06:d9:8d:d2:51:
                    7d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:23:E4:E2:B5:EC:00:F9:34:DD:24:C2:70:5E:1C:4B:3E:20:4D
            X509v3 Authority Key Identifier:
                keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:3c:ab:10:23:a1:2a:00:7b:bc:a8:ee:13:e2:7e:bd:e7:
         55:9f:e9:f4:a7:10:e4:e8:9b:0b:68:e2:a9:1b:3b:7e:7f:c9:
         32:7f:05:41:6c:74:b5:a6:ab:25:46:b0:92:4b:ef:83:00:4c:
         84:f5:8a:2a:e1:e0:19:60:5d:73:c9:08:7d:90:34:d3:63:64:
         22:fd:6b:79:8c:e9:c8:6f:5e:59:08:94:7a:04:99:9c:38:ae:
         13:55:f1:e3:ea:59:15:98:97:f8:81:17:67:95:75:8e:9a:f2:
         97:97:dd:de:0e:d2:f8:5e:e6:d3:0f:87:55:70:6c:43:0f:43:
         b4:e0:64:e5:a3:80:05:a3:c5:78:29:bb:c1:e5:bb:04:69:9a:
         da:ea:d3:d5:86:f6:ac:41:88:ef:40:4f:f5:5b:c9:53:ea:16:
         38:95:61:05:80:e8:ac:6a:96:4a:b5:fb:7d:6a:e2:7b:fb:b4:
         72:b0:22:0e:15:26:19:c8:dd:2c:54:3f:32:eb:3c:e8:d9:28:
         84:2d:33:54:29:53:7f:c7:d3:f3:4f:02:6e:9e:dd:51:93:5b:
         d6:8a:c5:c0:59:dc:41:6d:1b:c2:d2:20:7a:8a:00:ef:13:52:
         5b:e1:3c:ec:5f:5d:06:3a:6e:d7:d1:a6:f7:1c:7b:d7:6c:c4:
         83:10:e0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:43:03 2025 by rpki-client