Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
File:                     vOGWOkBKcyQMrRFrloi_ExDy_lo.mft (raw, json)
Hash identifier:          r5a6GedqELBjVsM8yCFTJappylgSVgzhQmZUCVxLMrw=
Subject key identifier:   0C:E1:BD:92:9D:55:25:92:13:E3:DE:85:10:2E:3D:AE:3B:83:2E:67
Authority key identifier: BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A
Certificate issuer:       /CN=bce1963a404a73240cad116b9688bf1310f2fe5a
Certificate serial:       0197BEFE9117080E7CC78F1557143A82B923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
Manifest number:          0FB3
Signing time:             Mon 30 Jun 2025 04:00:43 +0000
Manifest this update:     Mon 30 Jun 2025 04:00:43 +0000
Manifest next update:     Tue 01 Jul 2025 04:00:43 +0000
Files and hashes:         1: EyG9e2Y-kxvmuOydUJDDgq2-Jvs.roa (hash: dN8Yi0kIJplgFqGhn/wQEirsJIam2YZVzXUASivGFy0=)
                          2: vOGWOkBKcyQMrRFrloi_ExDy_lo.crl (hash: H3kZ+V552Ru2AIA1cBn+7fvMmLop/1ZQ70JBjF9QRWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:be:fe:91:17:08:0e:7c:c7:8f:15:57:14:3a:82:b9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce1963a404a73240cad116b9688bf1310f2fe5a
        Validity
            Not Before: Jun 30 04:00:43 2025 GMT
            Not After : Jul  1 04:00:43 2025 GMT
        Subject: CN=0ce1bd929d55259213e3de85102e3dae3b832e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:55:a2:0e:bc:64:b6:be:13:c7:f9:5a:e0:
                    35:6c:36:1c:bd:60:84:88:7a:5d:f0:3a:ec:74:1d:
                    10:4d:6b:ee:92:72:21:b6:65:fc:7d:cf:a7:39:0c:
                    e2:8d:28:1c:3a:03:1f:e3:d5:a3:6a:24:10:e0:96:
                    01:ac:c8:d7:47:bf:0a:b9:78:f1:3f:16:a7:cf:85:
                    2a:81:fd:27:42:80:de:2b:29:c6:46:8a:85:c0:a1:
                    c0:8d:39:25:d9:f1:49:f0:bc:7b:68:e7:c8:b6:5e:
                    9f:19:1f:1d:92:d1:36:f3:1b:0a:c8:78:c6:05:10:
                    bb:8b:50:f4:d4:78:14:5d:76:22:10:6b:b1:26:5d:
                    2a:46:08:21:52:38:0e:f8:54:05:57:d4:b1:0b:f6:
                    12:56:1e:ad:b2:9f:e1:1b:d0:ac:a0:33:04:4d:1d:
                    ff:12:cf:bd:31:c5:b8:4a:02:3d:9f:e6:b5:4d:33:
                    3f:cc:ec:25:49:52:56:9c:45:c3:97:ec:22:13:eb:
                    f7:b2:8f:4e:72:0e:f6:42:27:20:eb:cf:28:12:9a:
                    e0:c8:c0:26:61:44:b0:eb:ec:e6:7b:db:2c:08:5a:
                    52:ff:63:5b:4a:25:c3:c4:37:41:f2:76:d0:3f:07:
                    5c:20:96:10:4e:b4:d8:a8:4e:27:f8:f1:1b:cd:50:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E1:BD:92:9D:55:25:92:13:E3:DE:85:10:2E:3D:AE:3B:83:2E:67
            X509v3 Authority Key Identifier:
                keyid:BC:E1:96:3A:40:4A:73:24:0C:AD:11:6B:96:88:BF:13:10:F2:FE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOGWOkBKcyQMrRFrloi_ExDy_lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b25256-0b92-4048-af47-9c9330bd367e/1/vOGWOkBKcyQMrRFrloi_ExDy_lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:6c:4d:40:c9:5b:d1:7a:1f:e0:92:27:a9:38:27:c8:5a:
         a7:52:ae:71:bd:7d:21:5f:5d:b8:8f:c0:b7:4d:32:00:22:ce:
         ee:13:48:e7:cc:c9:d1:84:b7:a8:ee:10:ff:e4:71:97:94:02:
         d3:a0:85:d4:3a:f7:8d:39:5f:c0:75:a8:76:28:56:4b:ed:97:
         25:ec:5b:5d:de:dc:7b:27:56:1c:58:40:24:7e:34:e3:8f:c2:
         57:a4:26:35:b0:97:6c:9e:e3:14:fa:5c:a7:23:73:1c:e1:87:
         9d:1c:62:6f:71:cc:49:82:cf:b7:d9:1f:64:c7:9d:1d:14:d9:
         42:b2:df:c6:00:06:dd:b6:03:a4:db:3b:f5:06:7a:32:97:4c:
         ce:30:79:97:1d:73:62:b0:7f:52:e7:48:75:1d:d8:4d:c5:dc:
         95:12:80:33:5a:16:24:be:86:46:84:bf:8e:8b:e3:44:4e:00:
         66:a6:b4:1e:be:7a:13:8c:e8:32:c4:38:13:77:77:1d:ad:63:
         b6:77:20:cf:08:32:f4:32:56:d7:9f:0a:ff:55:1c:a4:bf:5b:
         fb:cc:cb:96:e6:f6:cb:46:97:79:43:0b:49:70:ff:a3:52:f0:
         ab:a8:06:af:ea:a1:01:ae:9d:3a:2f:9c:c7:f1:0b:ca:95:9b:
         ed:ce:44:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:55:19 2025 by rpki-client