Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File:                     viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier:          Qal9Xm/C6bjC788Cw5yaQDqoiZdWeAhIGEXYPLDCIPc=
Subject key identifier:   FE:85:2D:62:D5:DE:77:DB:8F:13:14:C7:56:05:13:32:1B:A3:C7:37
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer:       /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial:       0197B88FBE02F442F0C1D65D75E12AA1F2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number:          12C9
Signing time:             Sat 28 Jun 2025 22:01:57 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:57 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:57 +0000
Files and hashes:         1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: KC1KrNtGGLnoxffgqjxEigfaxs1Ptqn8dtfZITMn44A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:be:02:f4:42:f0:c1:d6:5d:75:e1:2a:a1:f2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
        Validity
            Not Before: Jun 28 22:01:57 2025 GMT
            Not After : Jun 29 22:01:57 2025 GMT
        Subject: CN=fe852d62d5de77db8f1314c7560513321ba3c737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:b7:ae:6f:2c:a9:5a:8c:3a:d3:9c:bb:34:
                    24:f0:4c:05:cf:e0:9e:17:65:25:2a:c8:a0:c1:f6:
                    ae:53:7b:da:75:d0:a4:33:ed:d5:e3:62:f3:47:60:
                    39:42:a2:62:9a:84:16:6b:66:3b:c6:db:e3:b9:ca:
                    44:ba:db:28:0c:cc:fd:76:2c:9d:d3:d6:c3:59:c0:
                    e8:c1:8c:d7:c8:d6:c0:57:cb:10:53:39:d9:72:bf:
                    3e:ac:44:f3:be:69:33:10:86:b6:b9:77:73:65:b6:
                    c1:df:ee:88:9d:eb:2f:78:14:19:e0:0f:96:7c:02:
                    b1:35:35:34:38:6a:90:ac:22:89:43:ca:c9:a0:d2:
                    56:c5:f9:87:e4:15:5d:7e:52:b1:42:a6:a0:aa:4b:
                    4b:b8:62:52:ae:b2:7a:bf:7c:0f:99:40:75:59:d2:
                    88:ad:6a:b4:e1:7a:ac:fa:f7:40:08:01:cc:84:78:
                    9b:d8:2f:7c:f1:ec:29:e7:f2:2b:e4:b4:ba:8a:91:
                    59:cb:0b:b8:8f:46:70:fd:16:12:67:5d:3a:d8:a8:
                    98:92:81:e1:8e:79:0e:39:dd:f3:9f:45:7f:5b:72:
                    43:07:c8:7c:53:a9:c2:bc:45:f0:00:9a:2c:69:93:
                    4f:b8:23:d1:9a:f9:36:e0:37:6d:70:14:0e:5b:01:
                    7d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:85:2D:62:D5:DE:77:DB:8F:13:14:C7:56:05:13:32:1B:A3:C7:37
            X509v3 Authority Key Identifier:
                keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a5:8e:6a:dd:69:67:44:f8:5a:1b:4d:e1:d0:7c:39:88:d4:
         ce:ac:99:d7:b6:ef:c3:36:bf:55:2e:a1:e2:21:f5:5b:cd:1b:
         fc:6d:52:1b:77:97:32:ad:dd:d6:32:c8:b0:f4:d9:8d:1a:c4:
         74:e3:4c:83:6a:d1:4c:99:91:ee:45:7d:26:d5:84:c4:7e:03:
         cb:1f:24:13:38:49:a5:b1:86:dc:14:da:61:ba:50:c6:62:39:
         a6:31:83:1a:f7:0f:1e:bb:f3:2c:cd:5e:49:6c:d3:ca:03:7c:
         e2:9d:b4:8e:13:36:b1:d6:3f:85:ee:10:eb:16:ff:d1:6e:e4:
         77:20:42:36:25:f8:18:8d:be:ff:34:b6:1d:24:87:69:74:70:
         3b:c9:f3:e2:46:bf:76:38:34:bf:86:75:a0:d1:30:a5:a2:e2:
         d2:5f:37:22:80:29:6e:e9:98:6a:2a:58:53:4b:0d:dc:82:34:
         b1:76:b1:ce:52:42:9b:78:be:a5:0b:03:80:08:df:ad:49:35:
         64:58:e0:dd:e9:e1:eb:20:d9:3e:d5:d0:be:46:78:af:67:60:
         3c:77:67:b5:0b:5f:3a:4d:59:93:a7:50:08:7e:eb:fa:a8:1e:
         69:4e:c5:3e:b2:e8:7b:02:73:34:47:7b:26:5e:b2:07:65:b5:
         36:db:0b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:37:04 2025 by rpki-client