Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File:                     VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier:          DPXEyPVCBhjL5cnet7N+fyV4YOEceEZr6KK7gvs6Hxc=
Subject key identifier:   46:87:87:47:D1:40:95:85:F7:43:62:1D:4F:C0:BC:AB:8A:F4:51:A7
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       01977FB17F88EFBA877F54309B5FC0A352F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number:          02DD
Signing time:             Tue 17 Jun 2025 21:00:28 +0000
Manifest this update:     Tue 17 Jun 2025 21:00:28 +0000
Manifest next update:     Wed 18 Jun 2025 21:00:28 +0000
Files and hashes:         1: 1oDgYJVaoy6a1UlMJjV-HeYaVxw.roa (hash: gq9DSt1z8pzfpArR6AUfhAN5L8sZbluHboX9Tdi8vnI=)
                          2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: gC/t8Bu2op27YHzYyEmROUusUzEKBUEZAtH2zPi7EVo=)
                          3: mIYNX3TKD58X31sUuJjIVNPZnQE.roa (hash: FJh4sfcfOAejjak4K/zG+JbB/xqwu/eM7SW0sqBIZ3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7f:b1:7f:88:ef:ba:87:7f:54:30:9b:5f:c0:a3:52:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Jun 17 21:00:28 2025 GMT
            Not After : Jun 18 21:00:28 2025 GMT
        Subject: CN=46878747d1409585f743621d4fc0bcab8af451a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cd:45:6e:67:82:f4:1d:33:57:2d:54:f7:ec:
                    da:e2:14:ae:f4:b1:b2:8b:e3:7e:ba:a9:fd:f0:a1:
                    d7:7e:88:f2:dd:6d:f9:c2:73:1e:81:6b:28:43:84:
                    83:e4:07:92:b3:a8:63:cb:3d:20:05:65:a4:50:b5:
                    93:89:e9:26:07:da:af:c5:5a:8e:cc:71:66:3b:4d:
                    f4:59:e6:39:88:4a:13:14:fc:88:b9:cb:c0:cd:55:
                    c0:52:cd:40:df:c0:e3:be:5a:24:0f:15:15:6d:1d:
                    50:13:92:7f:ca:a8:73:98:3e:76:b9:f2:f3:89:cc:
                    1a:49:51:5e:51:17:a1:31:de:ac:14:9a:97:d7:cc:
                    55:da:cb:e9:ee:7e:3b:d0:ce:03:98:5a:ae:61:e9:
                    d2:9f:9a:5a:c9:4a:27:92:cd:1a:2e:68:c9:d0:63:
                    cb:a0:a7:97:50:68:5c:01:20:83:15:5d:f9:65:73:
                    37:36:b4:8a:b1:11:a2:01:d7:83:33:4f:12:a0:93:
                    c2:f1:4c:b6:47:3c:8e:40:03:7f:ca:8f:8d:96:2b:
                    42:78:1a:7e:72:96:b5:ea:d8:4d:9e:2d:28:d6:79:
                    04:1e:f8:f2:5c:ad:50:64:f3:ee:75:0a:9c:56:1d:
                    97:fd:e3:bb:da:20:48:ce:b4:99:45:2c:94:72:38:
                    4b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:87:87:47:D1:40:95:85:F7:43:62:1D:4F:C0:BC:AB:8A:F4:51:A7
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:de:9c:40:c5:21:91:42:eb:f7:a2:eb:12:fd:3d:54:68:b6:
         3a:05:5e:dc:99:75:7f:b7:6e:e1:c5:b8:df:a1:19:5d:72:dd:
         bf:a0:7d:39:8c:a2:07:72:1d:26:45:85:e5:e6:09:48:fa:a6:
         4e:dc:eb:4b:b4:33:e1:07:70:b0:74:fb:f6:e4:f2:33:a6:66:
         5b:a0:95:6f:4b:5b:e3:23:08:a4:7b:73:e0:c0:49:cb:d6:f8:
         76:a7:10:b6:77:33:71:f0:c3:91:82:7e:c6:a3:e8:6a:75:af:
         58:e8:ee:f4:98:d7:3b:3d:09:92:70:e0:80:6c:51:af:52:f5:
         90:ff:d3:f4:33:86:38:38:00:7c:5f:8d:43:4b:81:24:c2:3e:
         9e:47:c1:40:8f:05:47:cd:7d:b3:5a:d2:5e:02:0b:33:e9:b2:
         06:98:27:b0:02:6e:b2:c0:67:2a:c4:4c:e0:d1:1f:25:ea:ae:
         f0:7e:81:bf:e6:32:39:60:5c:8c:0e:e6:42:7b:70:7b:ba:a8:
         ee:c7:1e:b7:1f:b3:fb:5b:c2:43:12:82:f7:fe:3d:76:92:df:
         74:44:06:ed:30:00:b0:ea:fe:46:80:ac:a8:87:d2:3e:17:f6:
         2d:e1:93:86:29:2c:59:bc:1e:23:06:be:38:42:27:60:aa:74:
         7d:52:fe:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:44:27 2025 by rpki-client