Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File:                     vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier:          V+3+Hm5M0isrpZHWhoW+XwWJREYQtgifopu37dECC0c=
Subject key identifier:   F3:8C:00:0D:F9:FB:09:AD:F4:FB:81:00:B1:C3:54:53:37:8A:CC:90
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer:       /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial:       0197BA7D989FDD09F270A35D92893C093941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number:          0B7E
Signing time:             Sun 29 Jun 2025 07:01:22 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:22 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:22 +0000
Files and hashes:         1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: SzhdfuYpDkQsZnJ/PZKTSvh0RJsl4jaNScBBiAcMbI0=)
                          2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:98:9f:dd:09:f2:70:a3:5d:92:89:3c:09:39:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
        Validity
            Not Before: Jun 29 07:01:22 2025 GMT
            Not After : Jun 30 07:01:22 2025 GMT
        Subject: CN=f38c000df9fb09adf4fb8100b1c35453378acc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:78:9b:38:5d:e2:9f:2e:07:46:24:61:5c:
                    e3:53:9a:04:ed:e6:37:1f:aa:f3:b2:cf:4c:dd:bc:
                    36:04:7b:55:36:eb:9f:b8:b7:e5:e0:d6:9d:5c:b3:
                    25:7f:31:4b:32:9e:ed:e9:65:1a:d1:b1:01:c9:b7:
                    44:f2:36:76:3c:6d:f7:93:5d:c4:50:47:2d:66:17:
                    3d:41:64:aa:12:00:78:12:9d:0a:ea:32:6f:11:4e:
                    d7:20:86:19:dd:b3:d8:d9:f6:6d:1c:67:0e:92:80:
                    0c:97:4a:e5:74:8b:37:9a:44:36:03:29:01:a7:96:
                    af:68:2e:2b:93:b6:79:b2:dd:e9:af:b2:fe:bd:cc:
                    6d:fa:5c:5e:ed:85:7d:65:3e:bf:96:80:a4:28:aa:
                    10:d8:9e:92:f2:f0:5e:54:b5:88:e0:bc:c3:ac:89:
                    f8:e1:dc:50:ab:57:b5:30:35:d1:45:4f:ae:64:e7:
                    b2:73:b7:ca:67:e3:6a:a0:25:bf:ac:f4:09:51:d7:
                    82:87:03:f4:2a:df:3b:c0:17:07:e7:fd:6b:e6:6c:
                    62:eb:b7:e8:b8:a9:93:e6:58:29:41:1c:55:6c:94:
                    cc:b6:0f:60:34:1c:5e:d7:a7:8e:45:24:2d:a5:20:
                    e6:7b:27:cb:47:59:7d:02:eb:3d:c4:3d:24:3c:4f:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:00:0D:F9:FB:09:AD:F4:FB:81:00:B1:C3:54:53:37:8A:CC:90
            X509v3 Authority Key Identifier:
                keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:af:5f:06:10:ad:67:ba:a4:28:1c:5b:06:9e:45:b2:ff:
         66:bc:02:1b:fa:92:ec:79:db:a4:35:13:38:c6:fc:52:bf:6b:
         94:d8:20:7f:4e:4b:6d:52:54:32:b1:34:dd:95:9c:b3:46:00:
         71:3d:18:7e:6f:17:bc:c3:2e:7b:fa:04:d1:9a:8f:e9:c5:17:
         53:f2:05:34:fa:6b:a5:05:97:34:b7:16:91:2c:67:24:a8:fc:
         15:ab:09:7d:db:c9:31:a8:b8:af:1d:70:35:d1:e9:9a:27:68:
         26:3e:bb:2a:d1:66:18:01:34:2f:b2:e7:cc:79:e1:64:af:ed:
         11:5b:15:f7:b0:e0:ea:c0:7c:58:92:eb:b2:aa:26:48:f0:12:
         27:fd:77:79:cf:04:f8:36:44:57:58:fb:ac:8d:36:17:47:b2:
         7b:ba:67:6d:67:81:d3:38:96:76:21:ed:60:e3:c0:e0:47:e0:
         28:8b:56:86:dc:cf:97:70:38:41:b5:0e:49:aa:dd:05:97:cb:
         14:58:03:b6:9a:12:14:4c:b3:03:18:f6:d7:8b:35:a7:ac:e4:
         58:ab:38:46:af:ca:0b:b6:64:2a:71:97:3a:2d:f8:96:07:fd:
         38:68:92:5c:8e:5d:83:1e:02:6b:22:77:d9:53:81:6a:c9:2e:
         97:27:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:32:08 2025 by rpki-client