Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File:                     VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier:          43ohWyQCbxwQM1rLSE3AKek34XewVDxsYtM5GCddXmY=
Subject key identifier:   96:C6:89:77:86:FB:E7:E9:76:1E:72:11:11:DF:27:2A:2E:06:C1:79
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer:       /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial:       0197B8FCFE495F9DE6A6F11C77F3D2B77D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number:          0137
Signing time:             Sun 29 Jun 2025 00:01:17 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:17 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:17 +0000
Files and hashes:         1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
                          2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: c5ZeVUpT4SmPhNc4D4dQ9gX1N1GiyKPDvv+bYJF3ywM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fc:fe:49:5f:9d:e6:a6:f1:1c:77:f3:d2:b7:7d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
        Validity
            Not Before: Jun 29 00:01:17 2025 GMT
            Not After : Jun 30 00:01:17 2025 GMT
        Subject: CN=96c6897786fbe7e9761e721111df272a2e06c179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:41:a8:2e:ce:d1:1e:c4:65:87:f6:09:08:
                    45:b1:0c:21:a3:08:70:99:45:4b:fe:5a:41:72:37:
                    5d:93:38:37:c2:0f:6a:cf:b7:93:f6:81:3b:50:f6:
                    d8:5b:73:2a:cc:85:05:95:50:55:11:0d:80:55:a0:
                    f4:bb:89:b5:4a:54:ba:63:4a:57:c0:39:1d:07:cc:
                    fb:f7:e3:c8:50:c6:63:28:b8:fb:d0:2c:84:2a:5c:
                    7a:a9:12:a1:f3:b1:11:60:02:4e:18:da:f7:f5:ca:
                    41:a3:92:aa:bb:ec:12:11:ae:18:3a:23:a3:0e:fc:
                    e9:c0:50:b1:46:cc:32:60:28:3d:84:b8:3e:55:24:
                    dc:56:c4:a6:2a:0f:9f:2e:ad:96:d1:c1:2b:17:fd:
                    59:8d:97:a1:71:18:49:73:ab:f3:f6:99:fe:b3:22:
                    4c:c0:57:eb:80:91:64:84:df:91:ed:9a:dd:ee:e6:
                    b5:3d:7f:e4:95:67:af:06:48:97:fa:1b:f6:e6:67:
                    9c:41:31:69:9d:e8:42:28:7a:a7:70:1d:ee:f2:7e:
                    17:dc:ec:f0:b3:9b:40:5b:99:b0:10:5b:27:9b:47:
                    91:7c:22:87:86:f4:0b:d3:5e:05:99:2e:ac:9e:3b:
                    f2:36:9a:27:ec:e4:8e:a6:20:60:5f:20:de:2c:dc:
                    c2:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:89:77:86:FB:E7:E9:76:1E:72:11:11:DF:27:2A:2E:06:C1:79
            X509v3 Authority Key Identifier:
                keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:5e:43:a3:dc:e8:6d:c6:53:5a:7c:2d:53:e1:cb:1a:74:a9:
         a7:44:4b:69:83:70:e2:3f:33:5a:98:72:ff:f0:7b:01:12:ff:
         e3:99:52:05:9d:c8:a4:81:1f:c4:cd:cf:a8:a1:b7:c1:b7:e4:
         55:37:d4:12:b9:c0:e0:b9:a1:cb:8a:a2:19:49:fd:65:8e:a9:
         a0:cb:03:30:43:4e:9a:39:23:6f:82:3d:3d:08:80:e7:b0:ad:
         80:e3:70:f8:ec:eb:85:69:7f:56:ab:c9:f6:85:25:7e:d2:90:
         72:b0:72:01:d6:e1:e4:8f:fe:92:8c:f8:46:80:9f:91:12:ff:
         df:bc:e3:25:8b:40:ed:b9:36:f1:0f:3b:6f:ce:a2:4b:35:e6:
         fe:7f:f3:b4:79:ff:2d:33:90:e9:29:70:01:3c:55:86:39:40:
         42:7c:9f:06:5e:7b:9b:96:a9:e9:b0:98:1e:07:1d:c1:38:a0:
         78:6e:60:8a:fa:3c:fc:a0:c9:51:e4:62:4e:88:53:10:08:93:
         1f:b2:65:15:5a:3e:1f:7c:d5:71:57:5b:d1:28:e4:a9:3e:b0:
         bd:37:89:8e:ed:0a:39:46:18:cf:d3:ec:f3:dc:49:4b:91:93:
         f6:78:eb:52:f6:a3:6f:04:c1:41:27:55:46:b3:62:d7:6a:5e:
         b8:13:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:53 2025 by rpki-client