Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          E9xxnfiFeHgviL7nbIZdaI34hxC1ngemBrZGK7kF7jE=
Subject key identifier:   F2:48:FF:A7:11:6F:7A:84:79:32:AF:0A:EB:8A:8D:51:42:D5:49:0C
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0197C0ED655FFD7DE6396B0D24F68D7FA319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0BC7
Signing time:             Mon 30 Jun 2025 13:01:12 +0000
Manifest this update:     Mon 30 Jun 2025 13:01:12 +0000
Manifest next update:     Tue 01 Jul 2025 13:01:12 +0000
Files and hashes:         1: EpDBPVNlNeVkVgjR_m5x1NyX39k.roa (hash: xU4je7vw+hy54ZIE4xMAX4T+f8GKgqonphRIwXr+3Ro=)
                          2: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
                          3: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
                          4: j4-0AZNF6iCS-Y8DwznMUfguQKM.roa (hash: 9UHind5om+M7xPoByFFXJSZvuZyNAdK5MCxVIuXiRrs=)
                          5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: awIBeb4f2wgTOn9Kqj7xtqPvToxlaAOmRzVnWjDa00A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:ed:65:5f:fd:7d:e6:39:6b:0d:24:f6:8d:7f:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Jun 30 13:01:12 2025 GMT
            Not After : Jul  1 13:01:12 2025 GMT
        Subject: CN=f248ffa7116f7a847932af0aeb8a8d5142d5490c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:80:ef:69:2a:38:18:87:a2:82:04:de:08:
                    4e:7d:48:f7:24:34:51:76:93:7b:b1:b7:3d:39:28:
                    2c:54:20:87:64:1f:8e:e6:d7:62:fa:82:4d:43:e9:
                    fd:ef:fb:82:50:28:21:fe:e7:46:a7:ed:49:73:19:
                    2f:dc:b3:7e:63:e0:d9:9e:01:db:6e:be:62:60:d9:
                    76:5b:d0:84:0f:d3:02:24:0e:3f:07:ca:18:c5:6f:
                    36:29:f1:76:35:8f:ef:42:1d:07:ce:0b:01:8f:a2:
                    b8:54:4b:c9:35:7c:71:b4:0d:21:68:9f:23:34:25:
                    18:05:8a:4d:ad:36:a1:89:68:77:45:ee:2b:d1:c0:
                    24:fb:c6:21:6c:26:78:f9:f1:7e:2c:5d:2e:7b:6d:
                    62:52:08:e0:17:ba:57:af:a6:31:dc:8f:6f:f0:2c:
                    bc:47:6f:18:da:c4:26:09:c2:a8:8e:4d:f3:fc:2e:
                    c1:4c:a4:e7:fa:e9:99:7a:e6:62:a9:85:dc:e3:28:
                    01:21:c8:9b:f0:ff:73:7d:98:c1:a8:46:e3:02:08:
                    75:84:e1:70:23:ab:c8:48:96:f5:ae:d3:f4:27:4a:
                    e5:ca:3d:8a:62:9c:dd:25:3a:63:a8:70:da:31:f0:
                    2a:74:0e:b2:94:2c:b6:5f:db:d2:37:1e:0d:10:ca:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:48:FF:A7:11:6F:7A:84:79:32:AF:0A:EB:8A:8D:51:42:D5:49:0C
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:eb:8f:9a:0e:a3:5d:98:12:9d:7f:ee:17:3d:7a:90:c6:06:
         f6:3f:e3:8a:96:55:f0:80:8c:f7:eb:55:1e:cb:4d:d0:5a:10:
         5e:54:28:36:9d:99:13:ea:24:2c:a5:ae:66:12:1f:a1:a4:85:
         86:f2:2c:0b:a6:6c:27:f1:58:fc:d6:80:6e:68:f1:03:e3:9b:
         19:bc:54:9c:7e:7a:80:d3:45:4e:cd:9f:ce:5f:61:54:e0:ba:
         a6:5c:36:07:86:e6:9a:da:67:e1:6c:b6:61:17:7e:ba:c5:e0:
         0e:94:44:0d:a3:c2:9f:17:02:fe:87:42:f8:76:f7:be:4e:39:
         55:b2:80:2b:a8:6b:43:be:b0:4c:f7:21:d7:a8:34:a3:2d:21:
         0c:cf:75:61:d2:41:43:4c:40:f0:5b:61:8d:b8:85:4b:7b:8d:
         e9:ce:9e:31:06:56:c3:e6:e3:d2:1b:b6:f3:11:2c:d8:65:e7:
         91:1b:b8:9a:4e:93:35:ed:df:0a:be:3c:9a:4f:44:24:d0:f9:
         e0:67:6a:52:ba:c4:97:1a:11:06:c0:4e:55:ed:ca:1e:eb:d3:
         cd:8d:50:23:b3:0f:af:b7:15:d4:ac:b5:6c:86:1d:8a:10:ee:
         39:72:90:2e:ca:93:86:65:e2:01:2e:b7:c0:c6:81:e5:a8:cb:
         bb:8b:b3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:17:33 2025 by rpki-client