Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
File:                     va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json)
Hash identifier:          7kb125oML5d/wFIRgLjFZmQv0zo6TFqsLuuC7YCi2PM=
Subject key identifier:   1A:E0:F4:8A:2D:D5:C1:EF:E3:FE:35:BC:32:66:1B:0F:07:9E:E4:1C
Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45
Certificate issuer:       /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
Certificate serial:       01977188B82F69AC16026D08AD1F282A0ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
Manifest number:          07BA
Signing time:             Sun 15 Jun 2025 03:01:14 +0000
Manifest this update:     Sun 15 Jun 2025 03:01:14 +0000
Manifest next update:     Mon 16 Jun 2025 03:01:14 +0000
Files and hashes:         1: rblVAHC3Ti1jzAkfPvLVAeStPKM.roa (hash: xDEpLEs8GRGGr1pP5UvsMJUnYZVw+q+8Ehz2NnMyem0=)
                          2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: wMrX4I8uqebPc0H0XQtw+sM1ESf0mm9RhCEWkcsZGks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:88:b8:2f:69:ac:16:02:6d:08:ad:1f:28:2a:0a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945
        Validity
            Not Before: Jun 15 03:01:14 2025 GMT
            Not After : Jun 16 03:01:14 2025 GMT
        Subject: CN=1ae0f48a2dd5c1efe3fe35bc32661b0f079ee41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:52:2e:f3:37:7e:6a:bc:8a:51:a1:a9:a0:20:
                    be:75:d3:9c:d0:c1:13:9f:30:26:b0:0d:d0:38:e1:
                    ca:b5:13:fc:0f:53:97:76:51:4d:de:d1:eb:a2:6f:
                    a2:92:4a:80:02:c1:85:1d:1a:b7:52:30:49:9c:36:
                    82:e9:3a:4c:49:b8:7a:b4:4e:96:ea:91:d6:bd:59:
                    b8:dc:97:4f:14:ef:81:e3:c2:27:ea:9d:e8:14:b9:
                    15:9e:8c:43:1d:0e:2c:24:71:94:50:cd:25:78:ae:
                    ee:0f:95:0a:65:95:ae:cc:7e:cb:c6:5a:8b:80:57:
                    f1:30:6d:c1:a8:eb:49:96:90:07:66:8a:64:32:fc:
                    78:06:26:7e:e4:13:03:ca:8a:8a:8e:f9:f3:b3:58:
                    2f:f2:31:a5:e2:3d:a5:10:2f:ee:6b:73:5f:b2:fd:
                    70:13:42:e9:2c:8c:3a:1c:49:57:4f:22:af:ac:b2:
                    33:89:80:a4:fa:c9:81:b7:00:74:10:4b:b5:32:29:
                    8d:bb:ab:1c:c6:fe:e8:12:5f:27:64:da:48:74:7a:
                    e2:99:ed:3b:01:ab:0e:d3:1a:79:83:ac:5f:f2:29:
                    16:48:8c:74:37:60:e0:61:db:b2:36:7e:c4:d2:40:
                    d4:f1:09:7b:0c:99:68:50:c5:45:31:d1:b3:53:46:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E0:F4:8A:2D:D5:C1:EF:E3:FE:35:BC:32:66:1B:0F:07:9E:E4:1C
            X509v3 Authority Key Identifier:
                keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:90:be:7f:b6:22:94:61:0f:54:7a:a8:37:a8:e2:d6:27:39:
         e7:a9:63:b3:18:fe:93:23:d8:e4:c5:74:6f:38:bf:ba:be:95:
         d6:07:9e:a7:f7:a2:66:49:b2:14:d0:25:02:21:f5:4b:13:ed:
         cb:84:0b:3e:a2:be:aa:9c:a5:6a:ab:1b:e7:31:49:9f:fa:c7:
         39:95:be:0e:4b:75:16:dd:31:a6:d9:5c:a6:29:cd:24:fb:bf:
         e9:d5:6a:6d:e1:09:43:2d:55:e4:4e:76:08:2b:ec:b9:32:0e:
         62:fa:3b:49:9d:d0:b5:1b:d1:a3:7a:27:3d:84:e5:6f:26:f2:
         21:75:40:96:01:6b:20:8d:58:cd:7a:c6:bd:52:9f:ed:54:e5:
         69:e0:f7:c3:48:37:0c:b3:64:c5:96:fc:2a:1c:4d:77:fa:12:
         97:1b:b1:84:41:bc:ff:05:36:7f:23:62:5f:0f:64:e7:5f:17:
         b0:66:31:8f:15:98:32:06:ae:40:d2:4d:e9:a4:44:c5:fd:29:
         8e:07:91:95:c9:3f:cf:b7:eb:bf:f3:14:5f:00:9a:48:57:19:
         26:ef:05:26:08:55:74:b2:04:f3:43:ac:df:6d:6e:4a:35:21:
         86:c1:6c:ef:eb:ba:26:96:f9:99:18:b7:5e:e6:d5:cb:7f:a7:
         95:7f:b2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:23:49 2025 by rpki-client