Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          Zamr7PB+LxqYmmL0i2PjPdQcSUuPCFdKbgWzUSwjCQk=
Subject key identifier:   59:AE:10:FD:D2:EC:16:C7:44:02:77:D0:A1:B7:40:7C:C2:06:5F:82
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       0197B7458B6C97D5F31CD264BF4C76E8C237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 16:01:17 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:17 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:17 +0000
Files and hashes:         1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: JEWfKOsJK+SW5pkfeZie1DFRZQYZM28YIfei/oV1/L8=)
                          2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:8b:6c:97:d5:f3:1c:d2:64:bf:4c:76:e8:c2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Jun 28 16:01:17 2025 GMT
            Not After : Jun 29 16:01:17 2025 GMT
        Subject: CN=59ae10fdd2ec16c7440277d0a1b7407cc2065f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9d:71:56:c4:4d:24:e1:82:2a:05:01:ba:1f:
                    2b:0f:c4:d6:f1:06:0d:87:10:5f:45:4c:5e:25:9d:
                    42:b4:5d:19:a6:b8:1c:f7:40:81:83:9e:77:c0:7b:
                    8c:24:9a:b6:c9:88:47:f4:6a:61:64:9d:bd:9a:f2:
                    8e:77:46:84:5b:6a:b5:91:5b:a6:fc:97:72:6a:82:
                    96:ff:bf:1f:84:00:78:05:7b:c9:c1:2b:80:ee:2b:
                    2f:7a:ba:53:97:28:de:c7:4c:bc:73:97:60:7f:62:
                    d0:76:87:38:be:4c:70:53:d0:27:4a:94:67:f4:65:
                    8c:81:c5:0e:97:aa:2e:75:4c:96:a2:ae:b4:42:1e:
                    2e:99:fb:07:cc:29:13:4c:f3:80:61:ab:12:8b:b1:
                    62:24:d6:67:a0:1d:d6:3b:cc:da:6a:96:74:97:0f:
                    15:f3:c2:1a:1c:b4:b2:d2:d0:d1:6f:97:79:a4:d1:
                    81:30:6c:fe:c2:9f:64:b3:f4:d0:eb:cf:5a:06:39:
                    01:42:3f:75:86:4c:f6:70:c0:5e:c5:8b:2f:86:c1:
                    c5:e5:52:46:c0:e7:6d:99:ca:8c:d2:41:08:5e:b0:
                    1d:92:a8:5b:f0:da:e9:0b:32:92:6c:8b:63:05:31:
                    b2:f8:ed:27:c4:4a:05:99:8d:a7:c0:ed:c0:e5:fc:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AE:10:FD:D2:EC:16:C7:44:02:77:D0:A1:B7:40:7C:C2:06:5F:82
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:47:3c:d1:9d:9b:2e:1d:cb:40:1a:dd:b7:6b:e1:82:72:b8:
         da:be:70:78:8c:32:04:26:0b:1c:ae:92:2f:0b:8c:fb:e3:87:
         9e:6f:0a:46:a5:df:6a:55:34:3b:a9:e4:77:7e:2e:51:2e:80:
         5e:49:f5:e3:b9:a9:d0:47:85:0b:02:4b:e9:a6:cb:98:87:9d:
         10:bc:34:f4:68:47:ce:c1:b0:82:aa:61:34:12:9f:a5:e8:f4:
         b8:32:f1:b0:1b:86:4f:e1:ce:08:7a:c5:76:9f:6c:eb:a8:56:
         99:13:05:7a:3b:37:de:98:6a:fc:6d:a4:2f:5d:a6:89:16:00:
         2d:3a:7c:ee:a1:dc:39:5a:6d:82:9a:fe:58:77:1b:d4:52:37:
         0d:d3:9d:97:69:94:ff:42:fa:a0:ef:e7:25:14:eb:f8:88:36:
         5e:f4:d8:11:af:4c:42:0f:ff:50:d0:28:bc:5c:ce:ed:7c:2e:
         99:fb:e6:d9:2e:9d:dc:df:b0:55:bb:1b:47:58:72:2a:92:8e:
         71:42:16:a6:1f:3d:0c:e4:eb:29:b8:5a:8e:f4:50:2a:97:62:
         09:4e:90:db:3f:74:b4:78:3f:ae:aa:3c:b0:1f:fd:93:ea:f7:
         81:aa:44:b9:f4:c7:5f:45:23:05:a5:48:b3:f9:78:8f:be:6d:
         8d:5b:d7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:31 2025 by rpki-client