Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File:                     vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier:          sFzXYAPVaxgc/95ew/TX7tshuJFpX6yMJiDOQzqUtuM=
Subject key identifier:   18:26:EB:1C:68:FC:94:BC:38:CE:D2:D7:CC:E2:57:8B:F9:54:CB:C7
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer:       /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial:       0197B6A062394BF0B0000E1DD49EF9631538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number:          06D0
Signing time:             Sat 28 Jun 2025 13:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:53 +0000
Files and hashes:         1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
                          2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: 7zBzgatyWtGhBch2VFthS4iIEdkkehBM1Nu5RZWL5f0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:62:39:4b:f0:b0:00:0e:1d:d4:9e:f9:63:15:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
        Validity
            Not Before: Jun 28 13:00:53 2025 GMT
            Not After : Jun 29 13:00:53 2025 GMT
        Subject: CN=1826eb1c68fc94bc38ced2d7cce2578bf954cbc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:03:e2:6c:44:ee:a4:a4:a9:d3:73:53:bb:
                    37:3b:12:de:30:85:46:57:88:eb:74:fa:78:8e:48:
                    11:8c:dd:df:c3:22:7c:75:22:53:f2:36:60:aa:d4:
                    34:93:45:a3:48:d1:ca:7e:bc:7a:9e:d6:f0:d4:04:
                    a9:c0:bc:ff:72:eb:4f:08:f1:a6:ae:b1:4b:16:f9:
                    97:03:ff:c6:b7:85:7f:19:d6:2a:17:05:de:e2:d9:
                    7c:b0:1f:d7:89:24:97:d4:59:bf:c8:5b:42:b6:0a:
                    a7:49:20:96:5c:22:7e:c5:25:c9:7f:16:47:03:dd:
                    ab:1f:bf:c3:e3:e9:19:04:72:60:51:11:fd:ac:ee:
                    b5:86:97:bf:f0:c1:c7:b1:14:a5:d6:dc:b3:dd:63:
                    34:0c:b3:40:4a:f3:0c:85:bf:96:31:d6:ca:04:b1:
                    00:3b:f6:1f:41:0b:5d:b7:90:92:07:63:d7:6d:a7:
                    07:b9:77:4c:80:c4:cf:1d:f5:57:63:87:09:73:94:
                    df:8a:bb:22:9f:05:2c:86:a2:08:ba:f3:8b:a8:d6:
                    e4:a0:5e:d4:2c:aa:ad:9d:13:6e:95:54:8c:dc:84:
                    8b:b3:da:d9:54:0a:1e:ee:42:f9:ba:45:2e:ed:20:
                    c1:bb:b8:26:81:05:ad:44:74:1d:d1:9d:5f:cc:ab:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:EB:1C:68:FC:94:BC:38:CE:D2:D7:CC:E2:57:8B:F9:54:CB:C7
            X509v3 Authority Key Identifier:
                keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:29:8f:58:b7:f6:f8:5c:cb:c6:7c:2a:0b:b0:3e:18:6c:ce:
         2f:e5:23:7f:d2:00:b2:da:93:25:a3:a6:55:d0:fb:04:8c:b6:
         24:6e:4e:7e:a4:3a:59:62:de:b3:9c:5e:5c:7c:3c:af:b0:fc:
         e8:6e:76:0f:b6:95:5e:be:5b:60:aa:7c:7a:e6:55:ce:a7:db:
         c6:73:bc:94:b2:34:f6:89:e5:f8:49:0e:ab:fd:2f:b3:ad:47:
         01:96:c2:04:52:94:45:97:37:ab:0a:f5:db:84:e4:01:6d:15:
         6b:07:f3:27:a5:61:10:b7:d2:34:92:de:cf:80:6f:fe:e0:47:
         1f:09:de:c5:87:f7:06:6d:8b:06:d7:7b:6f:40:41:be:5e:d3:
         fe:ac:68:21:ee:5b:bb:5c:a9:6b:8d:72:10:63:8b:db:a2:e3:
         b4:37:7d:77:0a:ee:3c:3c:14:9c:0e:66:be:41:ca:53:89:21:
         6f:41:87:f8:77:b2:2a:74:f9:1a:a7:fd:2f:07:e6:05:6f:fc:
         fe:b5:cf:2c:45:f1:57:b9:cf:91:d3:22:fd:f9:e7:9a:98:26:
         e3:bf:68:c1:18:df:79:33:86:df:9b:98:5e:2e:e9:7b:c4:df:
         e9:e3:66:81:d8:a6:1a:e2:28:19:18:f4:3e:f7:d5:81:88:09:
         3a:c7:2f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oGI5S/CwAA4d1J75YxU4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODVkMzc5MWY1ODM2YzQxNWZmZDM5MWYyZDU4NWM3M2Ri
ZWNhMzkwHhcNMjUwNjI4MTMwMDUzWhcNMjUwNjI5MTMwMDUzWjAzMTEwLwYDVQQD
EygxODI2ZWIxYzY4ZmM5NGJjMzhjZWQyZDdjY2UyNTc4YmY5NTRjYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq4D4mxE7qSkqdNzU7s3OxLeMIVG
V4jrdPp4jkgRjN3fwyJ8dSJT8jZgqtQ0k0WjSNHKfrx6ntbw1ASpwLz/cutPCPGm
rrFLFvmXA//Gt4V/GdYqFwXe4tl8sB/XiSSX1Fm/yFtCtgqnSSCWXCJ+xSXJfxZH
A92rH7/D4+kZBHJgURH9rO61hpe/8MHHsRSl1tyz3WM0DLNASvMMhb+WMdbKBLEA
O/YfQQtdt5CSB2PXbacHuXdMgMTPHfVXY4cJc5TfirsinwUshqIIuvOLqNbkoF7U
LKqtnRNulVSM3ISLs9rZVAoe7kL5ukUu7SDBu7gmgQWtRHQd0Z1fzKvkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgm6xxo/JS8OM7S18ziV4v5VMvHMB8GA1UdIwQY
MBaAFLyF03kfWDbEFf/TkfLVhcc9vso5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDct
Yjg0MmI5OTA2ODllLzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9hZjk1MGYtYzE5My00NWRmLTkwZDctYjg0MmI5OTA2ODll
LzEvdklYVGVSOVlOc1FWXzlPUjh0V0Z4ejIteWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCmPWLf2
+FzLxnwqC7A+GGzOL+Ujf9IAstqTJaOmVdD7BIy2JG5OfqQ6WWLes5xeXHw8r7D8
6G52D7aVXr5bYKp8euZVzqfbxnO8lLI09onl+EkOq/0vs61HAZbCBFKURZc3qwr1
24TkAW0VawfzJ6VhELfSNJLez4Bv/uBHHwnexYf3Bm2LBtd7b0BBvl7T/qxoIe5b
u1ypa41yEGOL26LjtDd9dwruPDwUnA5mvkHKU4khb0GH+HeyKnT5Gqf9LwfmBW/8
/rXPLEXxV7nPkdMi/fnnmpgm479owRjfeTOG35uYXi7pe8Tf6eNmgdimGuIoGRj0
PvfVgYgJOscvEQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:18 2025 by rpki-client