Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          JN3NXDZzlWQy5fortBOWApXwM2yoKJwpPnS8GonKrJk=
Subject key identifier:   CE:17:C3:F3:5B:B3:B8:94:26:4E:9E:F4:EB:BC:F8:CB:88:17:24:91
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       0197B7EA52C97D6F980BFE70A8C3861B8147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          E6
Signing time:             Sat 28 Jun 2025 19:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:16 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: 8iWHeA5fuhS9+2bSMUEbswAfL1ql0VDAe82YfV+SfQs=)
                          2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:52:c9:7d:6f:98:0b:fe:70:a8:c3:86:1b:81:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Jun 28 19:01:16 2025 GMT
            Not After : Jun 29 19:01:16 2025 GMT
        Subject: CN=ce17c3f35bb3b894264e9ef4ebbcf8cb88172491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:5a:28:d6:02:67:24:1d:6f:00:0a:ae:23:
                    fe:b8:fe:0c:00:38:d8:7e:47:34:4c:75:b4:b4:b7:
                    b1:71:0a:20:d7:41:53:3a:94:12:8b:74:b2:bd:2c:
                    07:d6:5f:c0:e0:81:38:f4:ae:39:5f:ac:f4:4a:a6:
                    aa:34:76:a7:be:2b:7a:02:14:e3:68:2c:5a:a1:50:
                    65:04:73:05:b6:cd:2c:7c:b7:19:25:c4:71:d0:b3:
                    75:f0:39:c4:40:81:a7:2f:81:96:e7:ae:2d:3f:b4:
                    27:8a:e2:20:08:1b:83:c8:8e:e0:97:98:50:14:0b:
                    16:22:dc:82:21:e5:84:11:73:3d:a9:e9:00:db:14:
                    02:56:ef:1d:56:a6:1c:f9:7a:e6:a6:b0:c0:b2:9a:
                    3e:07:4c:a5:1a:58:77:f4:1b:3f:34:35:4e:ab:7d:
                    ae:ea:24:fd:4f:46:19:8c:77:f8:85:f5:d7:ce:0e:
                    5d:23:b9:90:57:f3:de:dd:fb:42:8f:ad:43:14:c2:
                    3a:e7:8e:6f:cc:83:9e:71:e0:c0:92:1b:58:8e:82:
                    39:22:01:72:b2:78:8a:c9:1c:52:ab:1f:5e:c5:dc:
                    ca:8d:89:7d:0a:cb:35:53:17:78:7b:9f:93:ae:14:
                    33:44:7c:fc:41:f7:15:65:62:70:a1:fc:e4:10:02:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:17:C3:F3:5B:B3:B8:94:26:4E:9E:F4:EB:BC:F8:CB:88:17:24:91
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:31:74:f9:a2:ee:41:6d:15:e8:81:45:ce:cf:d1:a0:40:
         5f:a9:17:ba:ff:d2:65:bc:c2:02:8c:ff:5b:0f:3b:e9:ee:44:
         57:da:27:98:8f:46:d5:ab:7f:99:1e:38:1a:ae:7f:fa:01:55:
         f2:cb:d6:96:80:6f:62:10:ec:74:8f:a8:e5:71:4f:af:b4:9e:
         fe:c7:97:10:7b:44:47:38:d7:32:c0:f5:31:7e:a4:09:87:a6:
         eb:2d:02:02:70:10:f7:34:79:b2:f6:d0:76:ba:17:06:d6:1a:
         75:85:2b:d5:2f:2a:26:f5:f0:19:46:4c:a0:54:e0:c0:61:d6:
         6b:93:5b:79:1c:34:15:91:77:54:3f:c6:2d:02:74:ab:9c:2b:
         13:04:c9:ca:50:87:63:a3:3a:18:cf:d2:7f:b3:63:95:85:ef:
         59:6c:d3:90:32:89:f6:d6:9e:87:b2:e1:af:ed:dd:a4:13:19:
         db:a3:f0:1a:7a:5b:5a:f7:e0:ad:6b:2a:85:18:24:d9:a4:e7:
         37:01:c7:28:62:d6:f4:ec:44:0d:41:76:bc:9d:5b:ba:0f:06:
         d4:c1:e3:d2:d1:eb:c2:e8:b8:ac:94:a0:46:3b:a8:18:85:41:
         2b:3d:df:e4:7e:d0:03:70:f0:36:7e:42:90:eb:21:b9:a1:e7:
         01:f6:d0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:32 2025 by rpki-client