Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier:          E0QR5F8JDSwMoOrEi1ZAnBk9beSEMgglntxDoYa0Uk4=
Subject key identifier:   6A:70:E6:E2:7A:01:28:22:DA:DB:21:43:EF:6D:CB:01:CF:A7:D0:7A
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       019769CEFE488BB12532D6A16C64029FEA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number:          0A6C
Signing time:             Fri 13 Jun 2025 15:01:02 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:02 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:02 +0000
Files and hashes:         1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: bGtZvST+oK5eP6V7rKO8R/GcvOP/OZe0mZKGf2VH8RM=)
                          2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:fe:48:8b:b1:25:32:d6:a1:6c:64:02:9f:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Jun 13 15:01:02 2025 GMT
            Not After : Jun 14 15:01:02 2025 GMT
        Subject: CN=6a70e6e27a012822dadb2143ef6dcb01cfa7d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:cb:8e:ac:26:04:ea:09:12:14:dd:90:d8:
                    60:d9:26:f9:59:c7:96:95:31:74:fc:ca:0f:9b:9a:
                    3a:a9:21:7e:0b:76:33:5b:0c:96:38:cf:0e:e4:92:
                    e3:2c:c2:e3:58:b4:97:68:51:d9:4e:f0:7d:3a:01:
                    14:fc:48:13:3b:52:f8:21:80:f2:9b:4d:aa:e7:b1:
                    8b:9d:4d:7d:f9:41:bb:2e:73:28:c1:35:36:70:f7:
                    db:78:71:3b:86:c7:e0:62:ee:0f:b9:61:d4:65:5d:
                    d6:90:c8:99:2f:12:d0:4b:b6:02:ca:0c:cc:34:24:
                    2e:11:63:8c:8f:ff:62:b6:34:6b:bf:eb:7a:c7:35:
                    dd:00:ff:b2:d7:84:61:c0:16:12:32:52:3c:ee:7e:
                    cc:89:ff:80:bf:75:04:d2:74:01:4b:4d:44:d9:13:
                    e8:e9:0e:49:7d:63:9a:02:72:03:c9:fc:7d:6a:64:
                    5b:95:0c:3b:80:54:2c:02:bb:6f:4e:ee:8f:0a:3d:
                    ee:68:bc:4d:b8:5e:f5:d7:8c:7d:96:48:78:ac:de:
                    69:04:d9:96:c3:18:f8:98:f0:90:d3:41:91:8e:9d:
                    c1:9f:89:ff:e8:65:56:57:19:c9:29:54:3e:82:50:
                    8c:58:a5:4c:66:fe:2c:c6:8b:71:c2:9d:9b:23:10:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:E6:E2:7A:01:28:22:DA:DB:21:43:EF:6D:CB:01:CF:A7:D0:7A
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:90:ec:ff:4f:fc:3e:25:99:1f:12:69:87:7a:bc:5d:ab:
         85:cf:cd:f2:4d:8f:43:86:7c:dd:49:19:7f:29:b9:c5:c0:bf:
         cb:66:34:55:80:4a:9b:2c:23:ec:50:a8:1e:87:2a:01:d7:a7:
         72:03:32:79:a7:ab:1a:80:81:76:bf:eb:6e:77:49:35:44:72:
         fa:44:ac:3e:9b:b4:f2:ca:dc:f9:e5:82:c9:ba:9c:23:67:8b:
         2f:78:25:80:f4:c6:a2:0b:a0:37:65:c4:fd:2b:6d:10:8f:d7:
         d3:93:1e:fa:14:98:15:dc:db:0f:18:6e:28:9e:7b:c8:f5:e3:
         f0:3c:e1:15:2a:42:d9:58:6e:47:e0:58:47:bb:b4:b9:13:7d:
         74:47:7a:5f:6c:06:27:7a:b4:ec:11:fb:0d:2a:87:c0:9c:46:
         dc:e0:1a:fc:d3:73:fa:aa:82:59:5c:fb:f6:d4:ac:65:f4:90:
         a4:b9:78:4b:78:40:e6:91:66:3d:b5:75:87:9b:30:dd:a3:b5:
         ff:c1:41:e1:87:2a:29:69:6c:3d:3f:da:3b:db:c5:32:de:52:
         ae:3d:b1:be:f5:f9:dd:95:c5:20:bd:f7:96:12:d3:84:8c:3d:
         8f:0c:d5:1f:3a:c1:4c:75:d1:85:a8:3a:03:24:84:1d:c9:ec:
         ad:dc:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:52 2025 by rpki-client