Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          f6jF+AK7nwqKYzx2MIj39PqAf/94jcxkTHlCQay/uRI=
Subject key identifier:   40:94:0D:C3:58:59:C8:B9:42:28:75:61:60:CF:D5:4D:F2:CF:8A:68
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       0197B6A166F5ED543FF58A7A6CEF8D36834E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          0F4E
Signing time:             Sat 28 Jun 2025 13:02:00 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:00 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:00 +0000
Files and hashes:         1: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (hash: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=)
                          2: DAWuOXIzShKngVeAXIk14zxR1_o.roa (hash: BRexZQjukSfkz0NX2Zg92MIjIVuvAgUDzsMd3Qrzxp0=)
                          3: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: WBbQT0pEvBE0ElSlJxo15sZ5pdyIbG71DdIFu/YIqdU=)
                          4: kc4z2zzYiTW0GaLmTuuhDE91d5o.roa (hash: g/g6twuj787QLJVbdboV8m3Ts06Is1fDi161w4I+b/0=)
                          5: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (hash: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:66:f5:ed:54:3f:f5:8a:7a:6c:ef:8d:36:83:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: Jun 28 13:02:00 2025 GMT
            Not After : Jun 29 13:02:00 2025 GMT
        Subject: CN=40940dc35859c8b94228756160cfd54df2cf8a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:16:5a:6c:17:4b:a3:d4:31:ac:26:0f:4c:
                    3b:21:fd:25:ec:98:7e:9a:01:f1:42:67:a9:65:39:
                    01:5a:0f:f0:5a:20:3e:0c:c9:47:44:cf:fa:c7:c8:
                    1b:db:d3:b9:59:aa:67:65:17:d9:54:31:c2:2e:6d:
                    90:71:f0:5c:72:db:8f:39:a7:4e:b0:81:61:a7:4f:
                    4d:e8:3c:e5:34:0d:d5:c7:48:2f:1b:8a:a7:fb:dc:
                    3c:a7:15:50:b4:76:f4:db:33:4b:80:4e:83:fb:16:
                    59:79:81:df:87:60:39:af:aa:8b:ec:87:48:ad:14:
                    78:3f:67:d8:9d:15:56:b1:97:dd:d8:72:db:2c:05:
                    d7:f5:5f:50:0d:2d:80:ef:b4:5f:fa:95:4b:c9:b2:
                    e9:31:aa:68:c2:c9:c2:12:e7:05:d2:62:b6:22:f1:
                    3b:71:9c:98:1a:c7:fc:7b:6d:5d:1f:ea:11:fb:96:
                    b4:82:d2:d1:1f:0d:b0:ad:54:78:72:c2:ee:64:d5:
                    61:02:8d:cc:69:ab:7d:0e:a7:e9:bb:21:f1:6c:da:
                    f6:ba:c0:ce:2e:90:f8:8f:fe:a7:cf:55:aa:e7:72:
                    b9:0e:f3:17:25:77:8d:a2:39:b3:e7:5d:6c:24:1f:
                    cd:be:4e:7a:2f:b9:42:21:66:df:37:00:f5:b9:8e:
                    42:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:94:0D:C3:58:59:C8:B9:42:28:75:61:60:CF:D5:4D:F2:CF:8A:68
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:15:a3:1a:11:4d:01:d7:8e:ce:31:02:2f:6b:e7:c8:5a:
         fd:44:3c:b1:a5:01:28:a0:f2:7b:ce:a0:26:09:57:2c:ae:ce:
         6d:fc:bf:83:da:3e:40:4e:29:a4:3b:31:82:9a:25:f7:45:bc:
         d9:4d:fb:c5:da:05:e1:cc:e4:33:a7:7c:ca:69:9a:15:8f:38:
         2c:84:8f:e7:b2:f9:2f:e0:0e:8f:9c:66:7f:c8:af:b3:ba:13:
         c5:da:04:3c:ed:01:6b:2b:0a:87:7d:d5:66:dd:e2:d0:21:dd:
         8c:9e:4b:f9:8d:04:d3:3f:82:e1:fa:35:f1:35:8f:3d:fb:7e:
         14:48:eb:f6:29:e6:18:da:8d:ae:ed:5c:4b:0a:df:f1:36:9c:
         0e:f9:b9:b7:e4:13:63:5d:05:54:7a:74:21:a3:0d:ed:5f:0e:
         9e:76:c2:19:68:56:fc:df:90:77:e5:3e:21:0d:ce:b1:9b:95:
         13:c0:23:90:4c:6b:23:01:75:7f:f3:d5:c8:b0:10:07:33:1d:
         94:9a:a5:f6:96:2a:66:d4:16:1a:ab:f5:7a:5d:7a:5b:a4:f3:
         f9:0e:69:b0:f8:59:b0:c6:af:9a:9b:2e:e2:0a:1d:df:db:64:
         f2:ba:66:f4:dc:77:55:90:75:7b:ff:1c:f2:7c:38:c7:62:b5:
         7e:3c:b8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:57 2025 by rpki-client