Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File:                     vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier:          WD9/dn4mbHVPRq74119qPbK4407inGumK0IiPlG7iCA=
Subject key identifier:   69:E3:92:88:59:F5:51:37:DA:B2:BD:A1:C5:88:1B:AC:9F:EC:D6:F1
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer:       /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial:       0197B7EA71046B88972DCE6DA5FAB2220B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 19:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:24 +0000
Files and hashes:         1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
                          2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: rp+1wVuk2BprH1yptDyw0LrfEPaSaws5AOCJxunVVi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:71:04:6b:88:97:2d:ce:6d:a5:fa:b2:22:0b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
        Validity
            Not Before: Jun 28 19:01:24 2025 GMT
            Not After : Jun 29 19:01:24 2025 GMT
        Subject: CN=69e3928859f55137dab2bda1c5881bac9fecd6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:25:b7:e9:5f:67:c8:3c:78:c1:83:71:af:86:
                    71:c4:c5:84:7e:7b:f8:18:3f:41:d5:d5:ba:ad:ea:
                    f4:8f:94:57:88:15:8f:ee:3e:b7:61:16:8d:54:80:
                    4e:4a:dd:36:6b:1d:71:72:a9:aa:e7:dd:32:cf:a3:
                    ee:41:b4:35:f7:2b:21:02:ec:01:97:6a:4c:de:63:
                    13:1b:e8:e8:2c:ef:31:5f:95:72:72:74:f0:8b:4e:
                    af:0e:0f:70:74:bb:af:13:3d:bb:9b:93:7f:4a:6c:
                    17:64:93:c2:88:96:50:ed:4a:5e:1f:a4:14:ee:99:
                    7e:7b:88:45:76:5e:ab:b7:de:c8:45:f1:ca:34:e3:
                    ec:f7:22:8c:5c:da:e1:c4:47:67:fc:d7:7f:ce:b0:
                    55:de:15:7e:8a:33:48:23:74:95:32:7f:c1:47:f6:
                    04:25:c6:35:5a:b0:96:aa:57:b6:c6:b5:5e:ee:64:
                    f3:18:a0:99:b1:5e:fd:f5:2f:33:b4:1f:0e:96:bc:
                    e4:d2:17:1e:8d:16:1a:ae:a1:5b:bf:eb:bc:76:b0:
                    15:5a:d7:f7:84:5f:02:bf:bb:35:73:ff:47:16:a1:
                    d7:c4:f8:30:91:35:47:c1:c9:84:22:80:87:44:02:
                    e6:88:81:55:e9:04:0c:1f:25:af:8e:38:68:24:95:
                    70:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:92:88:59:F5:51:37:DA:B2:BD:A1:C5:88:1B:AC:9F:EC:D6:F1
            X509v3 Authority Key Identifier:
                keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:77:5b:ab:8c:62:b4:8a:1e:4e:a7:96:7d:24:ea:c6:db:69:
         9d:87:17:f8:97:8a:f7:07:be:de:b8:9a:04:d0:4a:f5:55:68:
         8b:63:15:e3:43:b7:c5:5b:35:5f:64:76:71:36:78:e7:4a:76:
         59:2f:cf:1e:5c:44:94:51:e8:da:57:72:26:e0:92:eb:6c:7a:
         c3:41:28:75:d5:80:8a:80:93:a9:b6:58:1d:51:1f:3a:26:26:
         60:63:87:d1:90:c2:59:8c:5e:3a:06:8d:9c:9b:fc:a6:c0:8a:
         b0:3f:1e:85:bb:b5:7c:b2:f0:0d:7b:97:05:e2:66:04:17:2d:
         78:8c:f9:a1:d2:b1:fd:45:a5:24:a2:31:de:e5:45:be:f9:70:
         3e:5a:f7:ce:6e:49:3a:0b:95:4f:b6:07:5e:5a:89:0a:02:32:
         c5:09:f3:64:35:50:98:18:24:71:46:33:dc:b4:5d:4d:ae:54:
         9c:a9:90:ce:69:63:fb:d0:88:3b:95:6e:57:a6:58:fe:18:fb:
         f8:7f:fa:69:f6:e2:65:48:c4:76:a3:57:0e:12:3c:d6:08:65:
         2a:49:56:f7:16:83:14:0c:e8:37:bb:22:c7:c1:36:d5:ce:5e:
         fa:cf:d2:07:c9:54:81:a1:95:68:cc:2e:13:12:be:8e:52:ca:
         f4:f4:b1:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nEEa4iXLc5tpfqyIgszMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNmFhNzM2MmQzNjc5MmNiY2ZhODM2MDliNWQ3NWNjOTY1
ZjNmYWYwHhcNMjUwNjI4MTkwMTI0WhcNMjUwNjI5MTkwMTI0WjAzMTEwLwYDVQQD
Eyg2OWUzOTI4ODU5ZjU1MTM3ZGFiMmJkYTFjNTg4MWJhYzlmZWNkNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SW36V9nyDx4wYNxr4ZxxMWEfnv4
GD9B1dW6rer0j5RXiBWP7j63YRaNVIBOSt02ax1xcqmq590yz6PuQbQ19yshAuwB
l2pM3mMTG+joLO8xX5VycnTwi06vDg9wdLuvEz27m5N/SmwXZJPCiJZQ7UpeH6QU
7pl+e4hFdl6rt97IRfHKNOPs9yKMXNrhxEdn/Nd/zrBV3hV+ijNII3SVMn/BR/YE
JcY1WrCWqle2xrVe7mTzGKCZsV799S8ztB8Olrzk0hcejRYarqFbv+u8drAVWtf3
hF8Cv7s1c/9HFqHXxPgwkTVHwcmEIoCHRALmiIFV6QQMHyWvjjhoJJVwdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnjkohZ9VE32rK9ocWIG6yf7NbxMB8GA1UdIwQY
MBaAFL1qpzYtNnksvPqDYJtddcyWXz+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzkt
ZDVjODYzNWJlYzg4LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mOWE4ZWMtZjU4Mi00NzVjLThjYzktZDVjODYzNWJlYzg4
LzEvdldxbk5pMDJlU3k4LW9OZ20xMTF6SlpmUDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHdbq4xi
tIoeTqeWfSTqxttpnYcX+JeK9we+3riaBNBK9VVoi2MV40O3xVs1X2R2cTZ450p2
WS/PHlxElFHo2ldyJuCS62x6w0EoddWAioCTqbZYHVEfOiYmYGOH0ZDCWYxeOgaN
nJv8psCKsD8ehbu1fLLwDXuXBeJmBBcteIz5odKx/UWlJKIx3uVFvvlwPlr3zm5J
OguVT7YHXlqJCgIyxQnzZDVQmBgkcUYz3LRdTa5UnKmQzmlj+9CIO5VuV6ZY/hj7
+H/6afbiZUjEdqNXDhI81ghlKklW9xaDFAzoN7six8E21c5e+s/SB8lUgaGVaMwu
ExK+jlLK9PSx6w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:23:12 2025 by rpki-client