Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File:                     vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier:          oEA/dyeMln1BhG8Ov5JoH9ktb8mtuPHRIZyrmtxko5I=
Subject key identifier:   89:52:95:42:2C:0D:20:43:D3:45:99:90:F8:07:CC:1B:0E:FA:5A:CF
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer:       /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial:       0197B9A1C70605220309A14161F75444261C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 03:01:16 +0000
Manifest this update:     Sun 29 Jun 2025 03:01:16 +0000
Manifest next update:     Mon 30 Jun 2025 03:01:16 +0000
Files and hashes:         1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
                          2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
                          3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: PR6mlFNyiarWOQGvMC/4PH3znIFBBnrZxGUuJDsMRkg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:a1:c7:06:05:22:03:09:a1:41:61:f7:54:44:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
        Validity
            Not Before: Jun 29 03:01:16 2025 GMT
            Not After : Jun 30 03:01:16 2025 GMT
        Subject: CN=895295422c0d2043d3459990f807cc1b0efa5acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:43:8a:eb:35:ba:36:f2:da:71:2c:de:81:
                    73:af:e9:c8:d1:41:64:93:31:9f:97:8a:71:a1:de:
                    02:8c:d0:d7:4d:8a:dd:d2:5c:8e:c4:55:40:82:1f:
                    87:b2:2f:2d:67:ec:e5:69:9d:0c:fd:e5:8a:f9:c0:
                    9c:9d:5f:fc:7d:d6:d6:ee:55:fc:6f:5c:6f:fb:a7:
                    da:7f:7d:04:7b:88:cd:e6:86:71:73:26:8d:c3:51:
                    c5:fa:e2:4e:06:ec:42:25:43:a8:86:32:a5:4b:55:
                    dc:d3:ee:7d:7b:c2:60:da:f2:4f:af:32:fb:cf:7a:
                    46:61:a5:29:05:06:90:f0:37:d9:27:cd:59:fe:ef:
                    da:76:36:45:7c:54:ca:fd:a9:95:a4:38:bf:91:fe:
                    52:25:fa:ab:73:52:12:6f:29:6f:a4:39:a9:4a:b7:
                    0c:60:da:e2:ce:67:de:16:07:dc:1d:14:06:51:5f:
                    57:b6:35:50:be:e7:46:3c:be:00:c1:59:1b:ad:dc:
                    fd:20:59:3f:62:5d:64:0d:c1:93:dc:96:d7:9c:00:
                    02:53:31:a1:2d:f2:f6:8b:60:63:25:11:b4:ca:45:
                    3f:47:28:ac:bc:c0:db:9b:73:bb:36:8b:ff:20:af:
                    41:01:b0:6d:4b:63:5c:ac:45:32:06:e8:ad:5b:2d:
                    0f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:95:42:2C:0D:20:43:D3:45:99:90:F8:07:CC:1B:0E:FA:5A:CF
            X509v3 Authority Key Identifier:
                keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:ad:68:ed:4c:81:97:a3:8c:a7:ab:9c:d4:5a:75:93:5a:
         65:aa:3a:6b:a5:3d:25:01:63:1c:09:b4:27:cf:b1:cd:61:a2:
         02:17:e3:ae:d3:81:e2:0a:ab:34:83:7f:94:ee:cb:8e:6d:00:
         81:da:49:44:f7:f8:a1:95:26:b4:a1:99:2d:5a:7f:2b:cd:0e:
         90:8b:80:e7:de:03:35:54:a3:ca:93:cf:ab:01:ad:77:67:cb:
         5f:f9:9b:60:77:8d:db:eb:79:aa:52:a7:f7:f7:a9:fe:3a:d4:
         dd:01:a5:3f:45:49:38:13:b5:d7:91:7e:b4:79:16:97:4e:46:
         25:ca:ee:67:5d:a5:df:8c:4c:95:64:75:7c:52:23:2b:25:7a:
         6c:6a:19:89:50:81:21:3a:3b:cf:02:7c:c9:9b:6f:5d:80:8d:
         3b:b3:8e:32:1d:57:c1:74:b3:fb:a7:45:9f:cf:bf:6d:e0:61:
         21:f2:d8:24:12:61:14:c2:3a:0f:c7:6c:3b:7b:dc:46:30:2e:
         11:05:cb:90:d2:7d:4c:d2:10:f7:7a:17:54:7f:be:36:9d:63:
         47:b3:36:f0:dc:df:ca:f7:c0:20:d9:8b:f2:46:7a:3f:b6:71:
         0a:37:c4:7f:06:ab:3a:c0:20:b3:9e:e3:42:e8:2b:66:65:54:
         6e:2f:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:00:40 2025 by rpki-client