Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
File:                     vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json)
Hash identifier:          J/WD+3NuNl1LfdRPRVfV6xRvTDDPYW9zluADTztEahw=
Subject key identifier:   D0:A5:F4:74:3D:36:28:FC:03:12:9D:1E:9B:45:C2:F1:40:F7:B1:83
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Certificate issuer:       /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial:       0197B7B3451431FCA7D1FB2D787ABF95A83D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
Manifest number:          0831
Signing time:             Sat 28 Jun 2025 18:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:08 +0000
Files and hashes:         1: 2ea_Ght-OBVvtgKuaEhUjFGnCIo.roa (hash: dArjpyisxrgvkT5h9NbQ4Zg16ShXRNvAx7t0mMervEs=)
                          2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: oSRfB5Wp4BNgQTGYphPqDdQKtd3d9BZvBvliJ2+Et/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:45:14:31:fc:a7:d1:fb:2d:78:7a:bf:95:a8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
        Validity
            Not Before: Jun 28 18:01:08 2025 GMT
            Not After : Jun 29 18:01:08 2025 GMT
        Subject: CN=d0a5f4743d3628fc03129d1e9b45c2f140f7b183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:9a:b0:fc:b0:45:ca:40:1a:b1:33:a5:fc:
                    11:82:8f:cf:cf:3d:ae:1b:7c:bb:fc:3f:c8:71:bb:
                    64:32:b1:85:7a:5c:04:a8:e1:0a:fb:f8:8b:af:0e:
                    2b:c3:e4:ea:eb:81:4c:87:60:ab:8c:1a:84:6e:87:
                    40:51:77:e3:55:3e:64:5d:de:b8:2c:91:de:1d:d9:
                    a4:93:93:1e:e3:df:03:e9:92:45:bc:22:2c:34:5c:
                    01:e0:96:d5:8a:db:29:6d:db:7e:14:29:f3:14:cc:
                    08:5f:48:e6:cc:af:1a:7d:d5:1d:5d:90:46:93:40:
                    55:a7:18:38:03:fb:38:c1:86:19:08:1d:a9:b7:86:
                    c5:81:18:ef:17:de:f3:d1:c7:cc:af:42:d9:32:7d:
                    39:86:52:11:5e:56:e3:9b:95:f4:36:4a:04:41:45:
                    a8:fd:f3:ef:12:38:1b:b5:a6:cb:4b:e2:a6:c0:3b:
                    9f:0c:b6:a9:98:32:48:c3:7e:aa:6f:0f:b6:30:c8:
                    1d:b8:41:e6:ec:5c:05:b4:d6:33:68:31:cf:49:ea:
                    97:54:69:87:66:94:8f:9f:51:5c:20:d6:73:a6:01:
                    31:13:fc:ee:a7:0e:54:cb:b2:99:8f:82:22:0e:e5:
                    00:03:9b:a9:20:fd:1f:28:44:70:c4:37:74:b3:e8:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:F4:74:3D:36:28:FC:03:12:9D:1E:9B:45:C2:F1:40:F7:B1:83
            X509v3 Authority Key Identifier:
                keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:e8:e9:da:60:22:33:ee:1f:08:71:99:62:ed:7e:de:45:
         bb:ab:ae:aa:c6:23:a9:33:43:fc:c9:06:f2:fb:1c:fc:9f:bc:
         87:38:66:3e:d7:36:7f:29:a7:1c:48:23:10:34:bf:23:fa:c5:
         72:47:b9:45:69:95:f7:53:65:7c:00:09:9f:dd:57:de:f5:2b:
         76:51:73:08:94:e1:82:66:0f:28:ea:6e:40:16:39:23:88:c4:
         a9:81:b4:7a:a5:e9:e5:00:28:55:5c:0b:63:b3:a0:d6:84:3e:
         0a:14:c3:7a:2e:f8:88:f4:26:cb:fc:a6:51:f6:09:ca:4b:cc:
         19:a4:ed:c4:24:4a:fd:2a:75:18:2a:5e:c4:e2:e7:1e:d9:86:
         cc:a0:5e:cf:b3:f0:96:88:83:49:59:2d:66:e9:11:d8:5d:b2:
         97:4c:a0:91:89:b8:06:95:96:27:30:88:60:05:c0:2f:25:a6:
         2e:c4:2b:37:b6:01:5e:ba:12:d6:71:d0:f6:db:a5:b0:23:e8:
         60:f9:f6:4a:02:7b:33:61:16:80:f6:e1:0f:07:17:8f:ef:32:
         19:68:64:e6:bb:b8:98:3b:3f:6a:62:da:2a:8b:66:38:40:12:
         68:e9:0f:db:4f:63:f6:a1:61:45:55:2d:fe:a8:21:dd:d2:27:
         a9:54:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:55 2025 by rpki-client