Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File:                     vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier:          sGk9O9lSJutGRNDYlMdCi8pLVOIWRfu2A+TNcxrV6rE=
Subject key identifier:   93:FF:63:18:0A:BE:06:C8:FB:FE:40:7C:20:0B:17:73:1F:64:FB:B9
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer:       /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial:       0198D6603FD1EB1ADEA01C9326560F25BBCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number:          0C11
Signing time:             Sat 23 Aug 2025 10:01:28 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:28 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:28 +0000
Files and hashes:         1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: YM1oao37RvgwYCT2NzYZBvZuo7NAVdhPbozEnC81csA=)
                          2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:3f:d1:eb:1a:de:a0:1c:93:26:56:0f:25:bb:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
        Validity
            Not Before: Aug 23 10:01:28 2025 GMT
            Not After : Aug 24 10:01:28 2025 GMT
        Subject: CN=93ff63180abe06c8fbfe407c200b17731f64fbb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:ac:10:2d:c9:ee:a7:57:2e:cb:2f:87:b8:
                    18:9e:5e:09:83:57:dc:53:08:2b:97:b0:a3:e3:8e:
                    79:5e:db:3b:c6:89:cb:d8:02:53:48:08:4c:46:38:
                    6d:63:52:b7:af:50:ce:c4:d5:f2:3a:f6:79:c3:51:
                    62:fc:89:c5:9e:07:c6:82:3b:ff:41:2f:1f:1f:fa:
                    b3:d2:4d:33:4a:97:e5:a3:03:73:a5:e0:53:ce:3d:
                    c9:32:10:a5:97:51:76:c7:a9:76:dc:fb:72:93:27:
                    23:bf:27:cb:04:ad:c4:82:bc:ae:ef:a5:54:30:95:
                    bc:a9:f9:a2:9d:bb:73:32:06:c1:b2:52:1b:d2:49:
                    3f:d0:65:42:aa:75:05:2d:a6:11:87:67:d6:e1:34:
                    02:d7:4c:d1:d0:4e:d0:86:9a:ab:ac:92:c3:07:75:
                    16:78:67:4a:2e:ec:70:35:8d:2f:69:bc:37:e9:85:
                    d0:cc:00:ad:2d:8e:96:75:7b:a0:ca:54:27:9a:46:
                    ac:a1:ee:29:59:9f:52:58:ea:3e:fa:cd:0b:ed:0c:
                    31:d6:fe:6a:cd:8d:8b:1f:87:ae:e9:e7:67:6e:7a:
                    0d:eb:99:6e:71:7f:78:55:c2:06:b6:e5:ab:17:30:
                    62:bd:d9:00:ba:a3:eb:95:1a:bb:e0:aa:b7:ca:8d:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FF:63:18:0A:BE:06:C8:FB:FE:40:7C:20:0B:17:73:1F:64:FB:B9
            X509v3 Authority Key Identifier:
                keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:42:0b:9b:58:98:dd:52:9d:5f:b4:ce:f4:da:93:e4:2a:
         71:17:d8:79:40:0c:20:dc:11:fa:dc:3b:54:70:f6:a8:be:e4:
         c2:d0:4c:18:08:0a:46:ac:ea:3c:7a:d8:95:3a:6c:ad:0d:73:
         f6:d5:29:96:90:45:3a:3a:2e:20:e5:b7:24:f2:e7:58:a7:91:
         7b:01:22:28:8f:2b:fb:04:15:1b:98:df:21:88:22:7b:26:4f:
         8b:d3:88:1a:f6:eb:e3:1c:9e:d6:5d:d4:5c:dc:81:ce:af:9f:
         8e:e7:f2:d9:4c:b8:ef:00:b5:4b:10:82:21:30:c9:a5:3a:88:
         af:2f:7a:42:63:38:76:09:be:b0:58:39:b4:31:52:f1:c9:f8:
         9e:f9:08:30:6f:fc:c1:18:ba:e8:76:85:6a:91:52:a2:dc:6f:
         1f:bb:c9:5c:74:af:82:bc:4b:c3:bf:95:16:78:e5:65:90:a2:
         8e:79:e7:34:62:80:a7:0c:16:91:a2:ee:99:fc:26:ca:ef:77:
         e1:97:75:b5:ad:04:da:85:14:8e:6a:d8:35:72:4e:3b:6d:ad:
         06:a5:12:f5:e7:1c:57:79:53:ad:7a:3d:7e:f1:59:a1:bc:1f:
         99:ff:53:c9:92:22:48:e3:8a:7b:aa:60:e8:53:26:eb:31:d8:
         5f:d0:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:16 2025 by rpki-client