Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File:                     VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier:          931qGnjZRnHpgh4pjjmvCy4rfxLvxXBTf8b+Y2Rld6E=
Subject key identifier:   DF:CE:02:4E:DF:6E:18:B6:C2:DD:12:C9:8F:FF:69:76:46:09:2F:4A
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer:       /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial:       0197B70E57A32934949E0663EB7FC0C0106F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 15:00:59 +0000
Manifest this update:     Sat 28 Jun 2025 15:00:59 +0000
Manifest next update:     Sun 29 Jun 2025 15:00:59 +0000
Files and hashes:         1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: xW2BPMwVT2yI9t2wxmkH1uHXl2Eso9hyotDOktGcldA=)
                          2: ZI5xHGAAawem8l14dj3kmApEGWg.roa (hash: gQVQJokb8l7v3e3ujraYshzYQvAhAvVrZfuw7H2HApU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:57:a3:29:34:94:9e:06:63:eb:7f:c0:c0:10:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
        Validity
            Not Before: Jun 28 15:00:59 2025 GMT
            Not After : Jun 29 15:00:59 2025 GMT
        Subject: CN=dfce024edf6e18b6c2dd12c98fff697646092f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:de:59:a2:3a:5a:56:a4:34:d1:52:df:6f:
                    eb:2c:90:7d:cd:bd:f1:dd:cc:26:ec:fa:64:ea:eb:
                    04:05:b0:31:42:d2:9b:f7:fe:cf:9d:9f:c7:6f:d4:
                    f3:25:6c:03:80:3e:13:c0:c7:87:a2:d2:d3:af:0e:
                    bd:06:0a:cd:be:d0:f8:db:d1:fd:a4:f8:09:af:36:
                    c0:4d:82:0a:4e:75:04:33:c2:08:c1:32:c4:13:4b:
                    6d:8c:7a:25:fb:35:4c:66:fc:73:da:4a:9a:96:fe:
                    c0:38:fc:4f:bb:25:d3:2e:5e:2f:60:04:28:b3:b2:
                    d5:5d:9a:8d:2a:7f:64:cd:ef:1c:10:19:3e:72:88:
                    7f:32:53:f3:0f:a6:a8:8e:fa:17:51:16:f0:1d:54:
                    c9:c0:a2:5c:98:da:6c:91:7d:5f:9d:e5:4a:2f:ef:
                    44:47:6e:d4:c9:9a:2d:e6:b7:ac:be:b4:37:a6:d6:
                    a5:b2:81:d9:72:d9:1f:44:1c:81:91:a6:75:71:0a:
                    a0:e3:b3:34:bf:69:7b:da:1c:e3:60:7d:4f:5a:b4:
                    66:fb:9f:91:df:96:df:a1:d5:be:e1:b1:01:8a:07:
                    de:39:66:41:6b:30:ef:bb:83:12:49:7c:6b:f3:8a:
                    ac:d1:65:00:c1:61:09:23:29:58:b0:68:3b:fa:9c:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:02:4E:DF:6E:18:B6:C2:DD:12:C9:8F:FF:69:76:46:09:2F:4A
            X509v3 Authority Key Identifier:
                keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:7d:96:d7:bb:c0:7b:1d:71:68:5f:df:ff:22:a5:98:9a:3e:
         ff:8b:e9:54:74:d9:1c:c1:09:c6:4d:8c:3d:d5:0f:14:f0:f5:
         6b:7f:ef:d9:c9:28:4c:90:b5:04:5b:78:74:86:a4:79:c2:bd:
         93:4a:cc:94:64:84:11:a7:9a:01:fc:4f:b3:16:f4:39:89:b4:
         5d:a9:c0:81:6b:f6:77:59:1f:00:46:95:97:4e:1a:03:60:8c:
         83:fc:64:c4:94:aa:68:ae:54:a5:e2:b4:99:dd:5b:09:c5:91:
         bc:60:6c:10:1a:45:3d:2e:b6:ce:ed:17:df:09:7a:69:17:38:
         24:38:ee:16:a2:1d:99:9c:84:36:92:5e:cc:6e:6f:97:c0:0a:
         25:1f:64:36:98:7f:40:ee:64:98:e3:9f:94:99:3c:54:5a:98:
         f6:4c:51:56:4a:5d:83:a7:9d:ce:cf:a5:f0:a3:a4:b2:a5:ee:
         69:8d:8c:6e:a2:30:d4:52:cc:ea:c1:c3:23:ea:32:81:5e:dc:
         13:d1:f7:b6:cc:42:bf:a6:8f:12:e1:da:a1:87:91:71:a5:94:
         2c:ca:f0:7d:24:99:e8:7d:10:f2:fa:4a:b2:f0:29:89:1a:52:
         09:01:45:ff:9c:99:4e:b0:41:e1:21:42:2b:70:f6:79:40:a5:
         6b:79:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:17 2025 by rpki-client