Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          e3wJefp5ueO3WVZn8VUN5/d/OKoLE6KlrhZKTi1OhNo=
Subject key identifier:   79:66:BD:CD:E7:EB:A2:16:EA:D7:5C:12:2B:6C:5E:DA:CB:C2:B4:FA
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       0197B890957948C1CC646FEA75FF67E2188A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          0CE7
Signing time:             Sat 28 Jun 2025 22:02:52 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:52 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:52 +0000
Files and hashes:         1: Wov-rogss9nwzo0EqvEMesDtem8.roa (hash: ajFMqrFV3/ilI/Icdeg3WVYYBJHDgZFZXDWmXuDh9DU=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: SHrJujwbgS8OHQPMHhy2P8yfNx0sM9z75SzAPJNLoDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:95:79:48:c1:cc:64:6f:ea:75:ff:67:e2:18:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: Jun 28 22:02:52 2025 GMT
            Not After : Jun 29 22:02:52 2025 GMT
        Subject: CN=7966bdcde7eba216ead75c122b6c5edacbc2b4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:25:e2:5c:a6:7b:bb:70:ff:55:df:1e:06:
                    5a:17:3b:81:5f:34:5a:53:71:a4:68:f2:46:4c:6f:
                    65:6b:a5:54:4c:86:f5:50:ff:6d:d1:00:b4:6c:7d:
                    3c:c5:e8:18:a5:37:04:eb:ff:6a:4a:81:9e:ec:85:
                    5c:57:1f:15:8e:d2:1e:01:4f:0d:e0:1c:b0:04:c6:
                    c3:a5:b6:31:0d:88:2b:5d:ec:3b:c6:76:57:22:ee:
                    9d:80:5e:e7:d2:15:d4:3b:d7:95:e4:9c:08:f6:26:
                    89:0e:2a:74:e3:2c:23:53:ad:05:31:93:fc:04:36:
                    21:48:b5:45:ed:eb:91:2f:50:11:05:26:25:2b:41:
                    3e:b9:0d:7c:99:01:2f:f1:b1:d7:f4:12:ce:31:57:
                    60:75:3b:a4:ad:dd:40:3b:49:e5:df:6e:8a:4c:db:
                    27:1d:0d:85:04:d1:aa:c1:e1:08:fa:80:03:63:7d:
                    d9:3e:9e:fd:06:62:35:55:33:fe:97:f9:87:36:92:
                    31:90:89:3d:2e:89:84:67:4f:71:cb:05:80:6a:8c:
                    b3:21:98:9e:59:ee:1f:b7:20:bf:13:80:82:c5:66:
                    a3:a4:7c:b4:a0:47:6e:a4:01:b6:b4:80:c3:a2:a3:
                    85:00:55:b5:f2:2a:0d:6b:dc:63:60:61:65:50:64:
                    19:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:66:BD:CD:E7:EB:A2:16:EA:D7:5C:12:2B:6C:5E:DA:CB:C2:B4:FA
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d6:7a:30:d4:d4:a8:4d:e8:1b:dc:f6:1a:73:28:a8:5f:e2:
         08:a8:47:4c:c5:10:0f:c4:1b:cd:56:b7:ed:ad:03:fb:28:c9:
         89:25:5f:16:74:20:48:2d:fc:67:29:6b:d8:7b:ed:c9:09:ce:
         88:12:28:0e:3f:0d:4f:2a:90:ed:94:63:cb:71:c0:39:97:b8:
         c7:a3:ac:69:bf:4a:ee:1d:c0:df:42:77:3e:d2:27:fa:ae:82:
         1c:31:6f:33:f5:c9:09:e7:9e:db:40:b6:a3:2d:dd:af:32:fc:
         17:66:e2:a2:c8:23:0c:30:64:41:08:4d:3c:82:41:04:f7:b4:
         18:c9:3b:3b:f5:a9:b2:c9:3a:62:8c:be:44:99:f4:d7:5e:90:
         6c:3d:fe:05:45:8a:4f:b8:6f:52:8d:5a:23:e2:83:09:56:15:
         5c:b3:fc:d1:44:2c:69:97:cb:aa:c3:c7:ab:51:85:b9:0e:39:
         35:ad:b8:37:ae:6a:9c:92:58:d0:3b:f3:19:6f:9a:5f:2b:7d:
         74:d0:20:b4:25:23:13:86:24:59:a8:09:60:d5:47:3d:08:cb:
         5e:24:c9:f6:9a:f5:24:f3:c9:eb:23:33:d9:77:19:0c:a4:11:
         a4:d3:12:08:93:33:15:11:31:13:a7:ca:26:67:77:dd:bb:c0:
         a4:07:bc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:24:37 2025 by rpki-client