Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          +4TR+RaxWEqzAzkT4p1cwuL6oeDjf9kt5upPUMwtDbk=
Subject key identifier:   6E:08:F7:23:26:2A:8E:9B:C7:F3:CE:22:19:49:21:4A:46:DB:74:30
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       01976F2D04EEE47642DC78FC99EC51E7804B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 16:01:50 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:50 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:50 +0000
Files and hashes:         1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: TtBZ/tx5Piz5vYSb+kHefHgErRdLW/nPVobtGZSFqT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2d:04:ee:e4:76:42:dc:78:fc:99:ec:51:e7:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Jun 14 16:01:50 2025 GMT
            Not After : Jun 15 16:01:50 2025 GMT
        Subject: CN=6e08f723262a8e9bc7f3ce221949214a46db7430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:c4:0d:c9:08:e7:80:b0:d2:e2:cc:2a:ba:
                    5b:4e:be:d4:30:94:2f:9f:e1:a8:6b:4b:c8:6b:d3:
                    b0:80:40:15:23:74:2b:82:9b:34:bd:70:9e:fd:64:
                    c5:1f:71:d5:6b:8f:98:81:78:b4:42:38:d0:8a:08:
                    ce:b3:47:9b:d0:3f:1e:1f:f4:a7:1c:72:7a:6f:35:
                    5a:ab:f2:6b:f7:ff:18:5e:56:5b:79:a4:15:13:92:
                    e2:e9:63:a4:78:1b:75:04:1c:73:7d:78:ab:28:fc:
                    7f:cc:05:9c:7c:6c:4d:62:3f:d6:39:53:8e:62:96:
                    f2:17:d7:f5:90:03:d9:aa:98:45:78:94:33:cb:3a:
                    62:ef:6b:05:a3:59:0d:b4:d4:de:a3:20:42:e5:35:
                    0e:fb:e9:47:c0:9d:13:98:58:a4:e2:90:9f:1e:24:
                    34:a4:d2:94:fb:fb:c1:98:f6:8b:91:26:f2:5a:ae:
                    8a:c9:ee:76:65:d8:12:3a:d0:58:3a:38:97:7d:7e:
                    58:92:76:12:8e:d5:ef:8a:cd:71:4f:38:d8:e5:71:
                    da:0c:be:6f:7b:a3:c1:5e:26:ac:4a:46:38:7d:8d:
                    80:3d:78:62:fc:22:6e:3c:c6:bb:f5:bf:a8:a6:f2:
                    4e:0c:f5:97:91:81:80:54:8f:01:ae:0d:7b:4c:86:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:08:F7:23:26:2A:8E:9B:C7:F3:CE:22:19:49:21:4A:46:DB:74:30
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:6c:5c:cb:1c:93:c2:34:08:e0:cc:3b:71:0c:d1:bd:59:
         1e:c4:8f:4b:66:8d:82:03:a3:92:6c:2c:3e:2e:9d:82:56:ec:
         ff:8d:39:97:9e:42:cc:ba:65:6c:04:c2:5c:16:b9:ff:26:2b:
         d3:4b:f1:8e:b3:79:d7:99:2a:c4:ca:28:6a:10:aa:9d:74:dc:
         7d:a0:76:2a:44:84:c7:ff:e4:3c:13:8d:8d:33:05:99:8e:f1:
         69:57:41:7e:36:db:e6:b7:ea:a2:b9:bc:f0:ea:48:1c:0d:57:
         2b:33:39:b7:f4:1e:d6:41:4d:2a:d6:3e:fe:1f:96:79:f4:42:
         3c:56:6e:66:ae:cf:c1:17:c1:52:2d:fc:e4:74:75:9c:5d:34:
         50:07:7f:b4:94:c4:e0:49:65:37:15:00:b4:f4:75:5b:4d:ff:
         d4:d4:dc:d9:c5:28:a3:d9:1a:64:94:87:6b:af:6e:0d:ff:a6:
         fa:a2:8e:47:2a:00:08:81:49:66:7f:e6:23:50:02:64:88:13:
         cf:1e:f9:88:48:a3:cb:90:54:b5:88:4b:fe:4a:60:58:25:39:
         24:f2:9c:2b:38:ee:f4:4e:3f:8a:cb:3b:0f:c2:01:b6:fd:dc:
         02:0a:24:70:73:9d:aa:3b:a0:03:57:45:39:d8:c3:f6:0d:59:
         b7:f7:b7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:55 2025 by rpki-client