Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File:                     VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier:          NYRoVfzxFuMiMi3lZUZZ+y4oWBKjOWqNyUtUYBmcV0M=
Subject key identifier:   E6:B3:FC:09:C9:5B:78:C1:48:A5:B3:09:8E:2F:B2:34:61:F6:27:FA
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer:       /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial:       01976F99936DC752C1B4ADAA190592173882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number:          08DD
Signing time:             Sat 14 Jun 2025 18:00:25 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:25 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:25 +0000
Files and hashes:         1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
                          2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: kB6anVMJQf7RqZnKjgGZloFi9p8vWxE/cDxE/o2wMJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:93:6d:c7:52:c1:b4:ad:aa:19:05:92:17:38:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
        Validity
            Not Before: Jun 14 18:00:25 2025 GMT
            Not After : Jun 15 18:00:25 2025 GMT
        Subject: CN=e6b3fc09c95b78c148a5b3098e2fb23461f627fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:d2:9e:7c:a9:59:45:d8:7f:63:76:04:75:
                    c9:65:5b:a7:9d:34:24:85:b6:1e:09:32:50:a8:a9:
                    35:aa:d8:4e:39:d2:88:7c:54:3e:85:3a:1e:4b:b2:
                    98:63:9a:85:4d:10:9b:c8:28:74:68:fd:66:51:b3:
                    4f:d9:cb:a4:87:2d:6f:61:87:7d:ba:27:35:12:59:
                    70:a5:2e:f9:46:42:8d:78:97:89:af:ca:e7:4b:81:
                    11:75:ec:f8:14:c3:ce:e1:b7:10:4f:28:5c:ac:b1:
                    a0:88:f5:e9:73:0b:30:ad:1c:b6:88:44:36:b3:ce:
                    53:0b:3a:64:57:ca:7b:44:fa:97:5b:3d:6a:26:10:
                    e4:f2:24:94:6c:6a:c8:f6:2b:f2:c8:a0:50:84:7c:
                    9a:00:2d:1a:c6:a3:c1:8d:2d:32:cb:30:d1:b9:5a:
                    07:2d:dd:26:2d:85:a6:11:92:4e:32:a8:aa:1d:74:
                    09:68:4c:e1:b8:5b:c2:07:f4:24:7d:2b:7d:c1:e6:
                    9f:0f:f5:27:ea:ed:8d:da:01:64:b0:6b:21:8e:e6:
                    29:76:c3:4e:57:86:4d:a1:96:cb:dc:64:08:c9:85:
                    15:1d:12:d6:17:fc:fc:c4:06:09:49:72:cb:30:cd:
                    9f:c5:fa:24:99:b8:0c:a6:22:11:d3:c9:93:20:a7:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:FC:09:C9:5B:78:C1:48:A5:B3:09:8E:2F:B2:34:61:F6:27:FA
            X509v3 Authority Key Identifier:
                keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:9f:ac:bc:15:fc:be:bc:d3:95:17:30:86:c1:02:d1:c9:96:
         0b:1c:25:d4:c9:0b:40:a5:1b:51:e4:be:c4:a3:cc:2f:57:e8:
         59:bc:83:91:ed:83:c0:e5:dd:cc:e5:d8:e8:c0:e0:27:c9:a9:
         df:52:ef:cb:3c:b3:1f:50:a2:1b:e6:28:68:14:46:ce:10:2f:
         20:f4:65:b0:01:f7:3d:da:7c:63:e8:73:2a:a9:f1:d0:95:3d:
         a5:1d:dc:11:a5:70:7d:0c:96:04:c2:b6:7c:1a:95:01:97:82:
         d3:9a:27:0e:55:79:46:4f:c8:a3:5a:93:ca:b8:b3:23:ed:a8:
         c3:db:d2:bb:5d:1a:a9:a9:3e:4c:79:8b:ab:2a:6b:0f:64:5e:
         69:4e:c9:1f:d7:ce:1f:e9:21:7f:3c:c4:fb:7c:11:a2:29:de:
         a4:23:97:48:b1:f6:18:0e:55:2b:fe:d7:68:ec:92:1d:39:00:
         d2:5c:c0:b7:ad:44:a9:0f:cc:12:e5:44:28:0f:b6:5b:60:b5:
         81:22:e2:9d:0d:30:db:f4:78:89:75:18:ae:74:36:70:5e:21:
         ad:ad:de:ec:71:9a:c4:64:02:17:f9:9c:02:c9:da:a3:b3:6e:
         bb:33:ce:a7:95:e6:ae:a9:c6:78:1e:e4:30:1b:a0:7f:ab:40:
         2a:6e:50:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:30 2025 by rpki-client