Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File:                     vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier:          EU8Yp3NHsBK7WNswt2N/A+FtQ104zsBRWFMc2C8Z8t0=
Subject key identifier:   CC:45:C3:C5:5F:04:A2:C5:58:C4:AD:EB:35:7C:F7:36:B9:D9:22:E3
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer:       /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial:       019770E33CEB793BF778E462344D3B356F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number:          0A4B
Signing time:             Sun 15 Jun 2025 00:00:29 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:29 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:29 +0000
Files and hashes:         1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
                          2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: gBuMOxTZa9Ozh6Qf53btACvJrXt7P62eOO5SoGKOJic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:3c:eb:79:3b:f7:78:e4:62:34:4d:3b:35:6f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
        Validity
            Not Before: Jun 15 00:00:29 2025 GMT
            Not After : Jun 16 00:00:29 2025 GMT
        Subject: CN=cc45c3c55f04a2c558c4adeb357cf736b9d922e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:86:3b:ed:a0:3d:60:b9:57:32:35:26:20:
                    60:67:33:e8:1d:d3:3c:54:fa:22:e3:f6:80:8c:e9:
                    4f:f5:64:3f:44:f9:59:3f:6a:98:1a:7f:76:8a:aa:
                    8e:69:bc:ff:f8:ae:7f:36:70:c6:cb:d8:79:23:11:
                    20:d6:41:b4:0a:aa:a8:66:4f:c0:69:e7:e7:59:5c:
                    9c:51:5c:ec:99:a2:97:0f:d0:4a:6b:bb:65:b5:c2:
                    40:98:f7:6f:ee:09:e5:cb:a2:33:31:53:d5:d6:d7:
                    36:e8:9d:fb:8f:76:13:a3:66:66:12:01:bf:3d:3d:
                    74:a7:d8:c1:de:d1:57:d4:e8:8c:82:89:46:d7:10:
                    cb:dd:9e:ea:68:e9:98:67:ed:d2:7d:74:77:10:65:
                    5a:1b:70:53:ef:12:42:0b:f8:a5:f4:a6:1e:7c:9d:
                    99:78:46:cd:c1:58:8e:54:25:d7:3a:6c:05:aa:59:
                    83:c7:e0:26:af:dd:50:13:90:f2:2c:57:4c:c3:f0:
                    ad:f3:a9:86:00:95:b5:3e:09:41:52:d8:cc:b2:bb:
                    0b:76:df:31:ad:44:86:d6:61:9f:13:e0:d1:96:3a:
                    10:9e:2b:02:53:e6:a8:ad:c0:56:4c:10:f6:66:7d:
                    93:8f:53:3e:bf:a9:02:ba:b5:bd:cd:e9:80:34:6d:
                    74:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:C3:C5:5F:04:A2:C5:58:C4:AD:EB:35:7C:F7:36:B9:D9:22:E3
            X509v3 Authority Key Identifier:
                keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:35:e0:3e:73:9b:3d:5e:8c:c9:56:3b:60:70:6a:51:4b:ed:
         52:bc:2e:75:85:97:17:60:fa:f2:be:6d:3d:21:fd:50:c6:41:
         a1:f7:64:85:06:82:ee:58:a2:2f:71:d4:e1:5e:cd:39:19:33:
         41:8e:38:0b:99:b2:01:37:fb:f0:31:72:ef:d3:cf:7a:5c:34:
         b7:05:8a:10:a3:51:20:fc:9c:c4:7c:a1:ca:e2:4e:38:40:c2:
         37:49:1f:88:4c:29:36:48:7c:b6:c6:d8:9c:47:51:39:23:6b:
         61:1e:27:f1:00:1f:27:1f:b0:66:d1:bb:e4:8d:6f:d6:c2:0d:
         69:e8:2b:19:33:bd:18:84:3e:e6:43:4b:b3:fa:7b:27:77:4e:
         f2:61:04:b0:8a:22:d8:42:69:34:51:1c:9c:1a:9c:5f:5e:87:
         e9:19:7d:73:e2:87:54:b8:19:81:ab:1c:d6:bb:c4:40:04:13:
         0b:2d:5c:a7:96:17:62:b4:02:d9:37:7e:ed:9a:16:c7:38:b5:
         99:c1:ca:00:a9:a4:9c:17:c9:5e:3d:bf:7f:c4:fc:36:e1:09:
         44:6c:be:e9:b8:11:9c:02:93:d0:12:9c:44:84:df:9f:23:42:
         a9:3f:c1:cf:c7:70:71:d9:1d:ab:23:c8:86:3f:db:79:bb:69:
         61:cf:d7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:09 2025 by rpki-client