Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          N37pT7wu2axsku2C0huuvXxR6/Qua9e63LdsSKIwY1I=
Subject key identifier:   13:11:C1:42:81:54:5E:A5:90:B1:F1:97:29:29:E2:7A:0D:4E:1F:BF
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       0197B6D78811655A48782D219F43D6EBEAAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0951
Signing time:             Sat 28 Jun 2025 14:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:07 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (hash: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=)
                          4: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (hash: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=)
                          5: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          6: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: WHel9XkH9f9CsHAJzusTifH+mD1Is/oWx9BdpEDo1LM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:88:11:65:5a:48:78:2d:21:9f:43:d6:eb:ea:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Jun 28 14:01:07 2025 GMT
            Not After : Jun 29 14:01:07 2025 GMT
        Subject: CN=1311c14281545ea590b1f1972929e27a0d4e1fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:21:c6:76:cf:d1:9d:a2:5b:5e:ed:e6:6d:cd:
                    0e:f8:f0:05:d6:35:00:8d:41:28:67:4a:7c:59:19:
                    79:ec:e4:24:7b:e7:6c:49:ec:54:18:49:90:66:5e:
                    29:cd:14:ac:4e:c5:eb:e4:0e:72:89:46:38:9b:60:
                    45:2a:a3:5b:c7:9b:2d:fd:a0:b4:02:fe:e4:c5:24:
                    07:0e:6c:25:91:ba:83:22:37:35:28:ec:67:04:8b:
                    f1:f3:e8:6b:2e:e8:4e:3d:a0:38:69:8c:61:13:3f:
                    be:fb:c2:54:1f:15:71:15:33:c8:87:cd:ed:59:9f:
                    aa:19:21:5f:e3:44:48:90:7e:39:36:61:3a:c3:43:
                    14:18:b3:76:2a:dc:f4:57:54:18:40:bf:db:bf:c9:
                    6a:1c:64:59:b5:1b:84:4c:15:6f:db:17:fb:72:a7:
                    b9:c6:46:06:f3:7b:2d:b7:d4:70:3f:71:6a:0b:6e:
                    7c:5c:3c:c9:bd:91:fa:8f:4b:00:b6:98:73:7d:21:
                    cc:ed:4a:67:8e:50:da:2f:99:df:7a:e3:c4:87:f0:
                    e1:af:e2:c8:4b:74:ad:1f:5e:90:4e:db:eb:a8:c6:
                    b5:ff:8f:e2:08:60:69:3f:91:f7:96:c0:16:8b:06:
                    34:8b:3e:53:e7:64:fc:f7:70:78:0d:5a:24:5e:8b:
                    d5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:11:C1:42:81:54:5E:A5:90:B1:F1:97:29:29:E2:7A:0D:4E:1F:BF
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b3:ff:34:64:44:20:f0:00:29:d5:41:fa:80:0d:98:03:c3:
         15:02:d2:9a:2b:5a:c3:d1:ed:5b:8c:0f:0c:b6:e0:8b:24:1a:
         0a:b1:46:8f:24:95:1f:3d:30:0f:f3:7d:0f:e2:e5:cd:84:d1:
         cd:23:9a:5d:1c:4b:2b:76:11:bb:5a:06:fc:e1:ae:fd:2d:f4:
         a7:7d:9f:25:df:be:17:af:ae:f3:17:14:91:17:2b:25:95:65:
         b9:bb:34:29:21:12:31:f7:a6:d3:59:de:1d:da:8a:dc:4f:d3:
         ef:21:d4:3b:73:d4:34:bd:06:b5:29:2b:72:6b:52:53:40:c0:
         3a:3b:ef:22:7c:d9:ae:30:76:33:34:50:7a:33:a4:ac:df:eb:
         f8:83:f9:13:80:85:3a:67:0e:99:9e:c6:7b:21:15:0d:18:32:
         bd:c9:0a:72:b1:b5:9f:4f:71:f2:5f:c0:87:28:8c:5f:0b:a3:
         80:f9:6a:f9:a4:04:fb:3f:78:ed:a9:41:c6:4f:ed:a2:d8:aa:
         a4:ca:9e:1a:24:2d:d4:ad:6b:69:af:fc:1d:20:16:14:c1:ba:
         00:7a:40:a7:a2:29:f1:e6:74:f8:f9:a8:c0:80:c2:af:d3:5c:
         bb:17:c3:1f:ec:79:90:ca:33:7b:a3:9e:3b:09:4c:34:d1:e3:
         b5:f5:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:30 2025 by rpki-client