Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File:                     V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier:          fD5vqyfWHpAyOeH7wzcde5e+X6JYJwBhoK50qLg5BaQ=
Subject key identifier:   DC:D8:6B:CD:DD:81:D2:AC:EF:61:25:86:DA:11:55:91:51:C7:FA:A4
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer:       /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial:       0197B88F5FD0797EE662B385196C29641BD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number:          071E
Signing time:             Sat 28 Jun 2025 22:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:33 +0000
Files and hashes:         1: DnRh90F6ngW2Q_l8KyvAvTFYNhk.roa (hash: jU7eitkasCXaSHRJrOwhJr50g3LZ5XZllbkxukDWdO0=)
                          2: SW4Yp7z-czq3Wyk3SkqgTnWrKpk.roa (hash: YmIRklQ+efQc+b8RqPf+ZXpsg1COSPp4Bv5KKeWEZK8=)
                          3: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: zPGJ1Cqrk8ofg9CLbxcADa0KNYOH3+btwaviib8fOaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:5f:d0:79:7e:e6:62:b3:85:19:6c:29:64:1b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
        Validity
            Not Before: Jun 28 22:01:33 2025 GMT
            Not After : Jun 29 22:01:33 2025 GMT
        Subject: CN=dcd86bcddd81d2acef612586da11559151c7faa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:d6:9f:d5:b7:6b:92:79:7c:25:13:87:24:
                    f7:20:87:17:9e:8e:b3:11:1d:32:91:be:bb:09:62:
                    a5:25:f8:ca:99:c9:31:11:c0:bd:81:c3:00:0e:35:
                    a7:cb:6c:c4:0e:61:d6:31:cb:ec:82:40:18:f5:ad:
                    00:e7:17:14:50:b5:4e:9f:17:06:3b:de:fb:f9:15:
                    f6:7e:71:6d:25:4e:b6:d5:61:4f:8b:22:2c:90:17:
                    47:32:10:e5:a8:9d:53:bb:be:72:45:c3:78:f3:d3:
                    90:09:e5:1a:5a:0b:75:21:a5:3d:47:16:a7:0c:fe:
                    c7:3d:f2:a5:09:a4:7f:c5:ba:46:99:8a:98:f8:db:
                    82:49:e7:82:40:ee:25:d6:b9:bb:66:92:d2:02:40:
                    64:ca:ea:2e:66:74:0c:cd:ae:8e:65:c8:f0:56:b3:
                    69:58:8b:9c:ac:22:cb:fd:1f:c3:64:2f:cf:49:96:
                    00:fd:b4:07:25:13:83:56:bd:02:60:3a:91:c9:bc:
                    18:07:00:fc:f7:3c:86:88:71:7b:b7:b2:83:52:5b:
                    2a:12:0a:af:d4:45:6e:d1:5d:ff:1e:d4:81:a0:d0:
                    d0:17:2a:bf:1b:d3:be:e6:ed:d8:58:bb:39:79:ac:
                    ce:f5:aa:a8:50:31:b4:25:44:40:17:c3:7c:59:64:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D8:6B:CD:DD:81:D2:AC:EF:61:25:86:DA:11:55:91:51:C7:FA:A4
            X509v3 Authority Key Identifier:
                keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:e2:c8:6f:db:13:69:88:06:0f:6b:36:93:ab:a5:24:ae:
         c2:45:b7:79:17:60:a1:33:1e:da:5f:6e:24:f3:86:86:78:07:
         83:b4:02:58:7b:b9:d5:d4:79:a6:56:dc:45:d2:3c:5e:62:75:
         00:56:cb:7a:cf:44:c5:94:69:f1:d0:d6:7a:64:b1:60:3f:66:
         f5:bc:ee:32:24:1d:36:1d:09:88:f2:f3:a4:1f:fb:7d:90:9d:
         76:3f:dd:20:0b:00:5b:5f:22:4f:aa:62:b9:ca:fd:76:16:fc:
         a0:88:bd:25:bc:4d:a5:28:0c:cd:7c:1b:63:04:e3:61:d2:c6:
         69:a5:e2:3a:c0:a4:91:4b:90:d6:e5:ca:ce:6e:b4:3b:b4:9d:
         86:d7:1a:87:d3:22:64:b1:99:b2:60:75:46:c7:33:c2:01:28:
         ac:8f:de:45:71:cf:b3:04:d6:e2:9d:8f:b7:4f:f6:54:e6:16:
         d5:ea:b4:20:d3:ba:55:71:a0:a5:29:d3:a0:c4:28:22:a7:9f:
         fb:12:8f:bc:ce:28:2b:e1:6b:7e:f4:46:1b:ba:52:49:a2:89:
         35:92:36:8e:ec:02:42:3b:bb:19:72:dd:25:6d:4b:89:bb:8c:
         81:8b:f1:1b:1c:d8:9b:a7:2c:ad:bd:76:c8:07:38:7d:3d:47:
         7a:32:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:47 2025 by rpki-client