Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
File:                     VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft (raw, json)
Hash identifier:          RuODdk5H+mxgkDltGcx68AvVUSUelnweqRG9iAc7ggw=
Subject key identifier:   36:99:83:69:18:2F:B7:51:E0:AF:42:69:E2:2E:D8:0D:A0:49:5D:46
Authority key identifier: 55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D
Certificate issuer:       /CN=55c9620593cc4fca8567c244257861a522f7359d
Certificate serial:       0197B5C4936A3128F4897A8B83DD31E10620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
Manifest number:          03EC
Signing time:             Sat 28 Jun 2025 09:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 09:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 09:00:48 +0000
Files and hashes:         1: 91CTdDNsjs_qam4yfYvkxhDQgJs.roa (hash: Wj9O/301kCWg3Va3W0E92TWsePIQ3Kx5Wa2obkc5IyE=)
                          2: VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl (hash: omQeARgCeOOH13zRuXhMS57qVtrWxGtPsaEwhmwu2DQ=)
                          3: tKEsqsadjWPvO1jPaZy5I3A_ye4.roa (hash: kHfnj4N6pUDMw3ADpNh+ksVOg0Sz2BCb0u9pD00mP2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:93:6a:31:28:f4:89:7a:8b:83:dd:31:e1:06:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9620593cc4fca8567c244257861a522f7359d
        Validity
            Not Before: Jun 28 09:00:48 2025 GMT
            Not After : Jun 29 09:00:48 2025 GMT
        Subject: CN=36998369182fb751e0af4269e22ed80da0495d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b6:ed:17:7b:b9:5d:92:60:28:dd:3e:71:c4:
                    2a:84:aa:27:d0:5c:ac:53:ea:26:6b:cd:04:02:17:
                    b7:54:bb:1e:c9:dc:3e:62:d0:e9:8a:72:57:16:68:
                    45:c9:17:89:84:3f:32:46:f1:a3:56:fd:3d:bd:6f:
                    5f:58:de:6f:25:ad:44:1f:bd:47:b5:fb:6b:78:d0:
                    64:38:7c:05:c4:af:53:4e:8a:4e:01:bc:e3:a7:50:
                    2d:b6:50:f2:17:74:9a:50:2b:e8:05:e7:90:81:d5:
                    a4:68:7c:44:00:29:d2:6f:c7:a9:12:34:52:97:e4:
                    7a:51:02:1a:b4:e1:ef:71:25:97:35:17:a7:75:f9:
                    e9:9d:22:75:a7:32:ab:82:01:08:60:db:dd:57:af:
                    1f:03:03:9d:98:89:67:88:31:04:97:2c:d8:34:e7:
                    a5:df:ff:56:9b:de:e6:74:59:01:c1:1e:c1:42:17:
                    c2:ee:f1:6c:7b:d0:7b:c2:04:0d:3f:d4:ba:76:1c:
                    53:78:65:52:b8:c4:05:ac:c8:f3:b1:e8:50:d6:b7:
                    0e:de:a0:96:26:41:4a:39:51:86:ee:2a:fd:f7:00:
                    a7:f8:ce:1a:9a:f9:76:a7:0a:54:a6:b7:f6:f9:44:
                    cf:7c:e4:fa:9e:13:ca:18:9a:6e:e3:de:bf:7d:84:
                    0a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:83:69:18:2F:B7:51:E0:AF:42:69:E2:2E:D8:0D:A0:49:5D:46
            X509v3 Authority Key Identifier:
                keyid:55:C9:62:05:93:CC:4F:CA:85:67:C2:44:25:78:61:A5:22:F7:35:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/df8017-af8c-4b77-9dbc-35c0502a0bb7/1/VcliBZPMT8qFZ8JEJXhhpSL3NZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:14:99:b8:90:94:d4:c4:51:a6:7e:63:e0:bd:44:60:a4:7b:
         0e:7b:4d:e2:ee:4a:70:e7:ab:2e:b6:63:bd:66:e0:60:b1:e3:
         8e:46:50:ee:de:37:33:9e:2b:17:4a:91:5f:cd:ed:19:89:5c:
         68:b4:9f:1d:eb:5a:ee:65:0f:59:44:c7:e8:82:bb:60:96:f5:
         52:cc:b1:f8:4c:6c:ef:27:eb:b0:81:58:dc:a2:5e:1b:9d:8f:
         a8:08:e1:15:8f:d8:d9:b2:df:55:14:b9:7a:e7:99:cd:dd:9f:
         fa:8e:42:d0:f9:dd:a8:6f:0a:3b:9b:c0:dc:cc:bb:b7:d9:0d:
         8b:91:6d:53:73:44:d5:92:83:de:8b:a0:bf:e1:c6:4b:39:ac:
         f9:42:68:39:82:b5:84:eb:86:3f:ff:02:d3:11:fa:a2:8f:5d:
         ab:67:fe:e0:ca:67:d3:31:f9:73:82:56:30:b1:03:79:70:2f:
         cc:b9:70:91:cc:84:a8:90:9f:a1:76:6f:9e:5d:ef:ac:61:76:
         9d:d3:18:f9:a0:cd:2c:fe:e3:b2:f9:eb:da:d8:3b:ae:c9:98:
         ed:99:fa:c1:9d:a5:ec:1b:e9:85:43:93:79:4d:3f:df:c7:f8:
         19:8d:1d:35:85:91:b8:6e:5e:cb:ab:c1:42:03:a7:f2:8c:74:
         cf:dd:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:27 2025 by rpki-client