Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          cJ/sGGXCQHELekq0s1uhl8unaxbZ9OV5vJBggwoMZY4=
Subject key identifier:   65:33:46:0F:0D:84:9A:5F:7E:61:D4:E0:3B:C1:8D:37:1A:FB:C8:62
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       01976C98C9903E216DA1E2CCE0A24FB42F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          13AC
Signing time:             Sat 14 Jun 2025 04:00:41 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:41 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:41 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: BBmd3zYIkSKrYWflq6CGp4SM8qfo5NMqdIgDDkF7NLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:c9:90:3e:21:6d:a1:e2:cc:e0:a2:4f:b4:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jun 14 04:00:41 2025 GMT
            Not After : Jun 15 04:00:41 2025 GMT
        Subject: CN=6533460f0d849a5f7e61d4e03bc18d371afbc862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:e7:3c:4d:1c:dc:a9:15:50:fd:9e:3b:7e:
                    88:ce:49:b6:98:48:7b:cf:0a:3e:5d:f6:9d:89:ec:
                    9e:64:d5:31:c8:32:3a:07:15:35:29:41:ce:a0:d6:
                    7f:02:50:94:b0:f8:c6:4e:30:70:d2:e1:10:45:71:
                    dd:53:3b:0d:7a:d5:02:e0:04:4f:5a:ec:cd:e7:3c:
                    48:17:43:d9:39:59:12:b9:31:84:4c:58:d0:43:f7:
                    c8:f3:09:0f:83:cd:ed:68:7f:6c:2b:f8:93:c7:3e:
                    db:c9:55:a8:44:6a:4e:37:17:0f:74:7d:61:4b:01:
                    70:40:69:66:97:dc:68:b0:3c:d4:75:83:fd:9c:3a:
                    69:11:14:b6:cb:7a:03:19:0b:bd:99:14:eb:b6:70:
                    c7:a0:29:04:3e:9d:b8:f7:d6:e0:a8:2c:a6:50:de:
                    95:17:6f:cf:7e:cf:03:02:2a:d7:9e:8a:59:ef:01:
                    c9:04:d7:dc:ff:83:d2:df:da:29:09:76:55:73:2e:
                    03:88:98:d8:48:52:c2:23:93:e7:fd:07:e0:2e:f4:
                    5b:c5:e0:8e:ab:99:d6:f4:8f:23:1e:8b:2b:fa:31:
                    19:69:c8:fe:6b:d6:30:ec:40:ff:c0:df:c3:04:d1:
                    73:53:09:5d:bb:c3:46:2f:bc:1c:74:56:2c:24:6e:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:46:0F:0D:84:9A:5F:7E:61:D4:E0:3B:C1:8D:37:1A:FB:C8:62
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:c5:88:d8:d0:44:68:eb:ee:47:04:7a:59:b3:59:da:b8:
         f8:30:aa:b9:5a:24:cb:b8:11:fd:54:82:d3:a1:f3:03:f4:0e:
         79:ea:b4:36:4e:cf:94:c4:0a:c3:8f:4c:9e:ca:f9:a1:27:4c:
         3e:1c:f0:1e:18:85:e2:a3:a1:7e:bf:12:71:f3:89:6b:72:f0:
         c7:05:71:04:28:b0:6b:ed:c1:a7:7b:d4:93:eb:cb:c8:2a:86:
         2a:c3:00:b1:61:a6:9f:74:e9:06:2c:5a:67:44:26:b3:f9:64:
         7d:a3:2a:9e:33:87:cf:d3:7a:79:73:94:eb:c4:c5:b7:8a:be:
         d3:67:e8:7c:9c:1f:30:be:42:87:3c:c6:12:99:31:a0:f6:57:
         a6:5d:a0:e4:0a:18:86:ea:a5:84:61:d9:87:f4:56:57:ee:05:
         9d:81:e4:10:3d:1c:9b:6e:f1:2f:4a:f7:fd:76:f3:64:fb:71:
         f6:22:22:8d:16:12:ac:69:28:7f:3a:ff:63:37:52:3e:0d:3e:
         e6:ac:77:13:b1:47:2b:13:c3:72:ab:f3:5f:6e:2e:b9:32:95:
         ca:94:61:3f:5e:0b:61:cb:11:ef:d5:ec:bc:bc:e7:4f:5e:d1:
         2f:6f:7b:d9:48:25:07:58:4d:01:cc:f6:c6:d8:49:95:78:af:
         a9:5a:2c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:56 2025 by rpki-client