Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          NMv/tVql/0zp7MYt3X/kf590S5bXyikqhS1hATuo+3s=
Subject key identifier:   3D:98:93:15:44:5C:90:7C:A4:D4:EA:71:BE:48:64:1A:E6:C6:5E:FF
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       0197B88FCC2C4DD6CC118F0AFA32C22E0F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:02:00 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:00 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:00 +0000
Files and hashes:         1: D4-_NyM3vwkXYlu-mJ9EwymWROo.roa (hash: jmfn8sb8ov8NeJ0KfbubQ1wvTdk/ufMjoTE9s0yWgsE=)
                          2: TeFaZ4zKnJuYW1U6fAsNH1VarVE.roa (hash: 3nZzR0avNgt7/s2NV+FklcMPV5cBZpJIPzIuCfYYbl8=)
                          3: bL9ewQCt4RdgNbYkLxPSTrmyc9w.roa (hash: jBes/JXB5Pa9fZGI6VO0yVOLtKRuEN7Q7HgrRfyiy4I=)
                          4: sJa8reR2mkuVQCPsBOyH2kdgHt8.roa (hash: XUKMRflOYqtRl78E3R0klOa+kDeCKWI6ajUh/jBFZW4=)
                          5: v4QrgtblJ9YZHJ2hce6GFI5FWqo.roa (hash: IPVSappB/my+2I72ZgF53a9v013O3iiBW8wa9eIfulg=)
                          6: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: 6kaaOtijyAbEA9IVnF2PMCDjLLeesCWrr2Zb/m81n4k=)
                          7: wa6NcU7XwuvzaWsIZAv7WsszO5o.roa (hash: kXg66oE0eqkMI6otmLSvECRSREoGo1YKzKjRF+u7yi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:cc:2c:4d:d6:cc:11:8f:0a:fa:32:c2:2e:0f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Jun 28 22:02:00 2025 GMT
            Not After : Jun 29 22:02:00 2025 GMT
        Subject: CN=3d989315445c907ca4d4ea71be48641ae6c65eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ce:eb:8f:02:30:ab:86:63:82:f0:60:9a:37:
                    29:06:ff:d8:89:ac:9a:6c:d2:6d:d6:8f:f5:51:ba:
                    fe:09:14:eb:62:17:72:74:2f:fc:5e:c0:18:51:4b:
                    fb:5f:db:54:f7:e2:a3:93:06:6d:14:92:2d:df:dc:
                    a5:c8:39:e2:26:95:08:42:11:59:c4:4d:53:8e:13:
                    37:7a:b6:48:be:a1:07:52:86:10:b7:00:e2:81:c7:
                    97:3b:f6:ef:07:c3:9a:cd:44:bc:5e:4b:eb:90:13:
                    4c:6a:26:04:fa:bf:fb:94:2a:fd:2b:fe:09:1c:e8:
                    6c:ce:74:dd:ed:f5:ae:5c:03:d8:59:66:19:7f:ee:
                    04:38:5b:b7:af:fa:ba:46:7f:cf:ce:76:be:5b:dd:
                    36:47:37:77:58:5e:9e:0f:c7:e5:5b:f4:fb:16:a2:
                    13:fa:b8:f0:5e:46:45:d7:c7:83:75:ed:5f:03:23:
                    31:39:ad:82:cc:75:71:19:3f:09:d8:ed:e2:fe:be:
                    f2:be:5a:30:fe:c6:4d:3f:b4:f2:dc:ea:e4:a3:ac:
                    59:a0:1c:5d:e8:4f:5c:b4:14:04:0a:fe:db:f9:06:
                    8b:a9:ae:29:87:a6:32:de:7d:ad:76:e6:dd:82:df:
                    59:ed:aa:0f:ea:96:24:35:bf:3b:48:ce:07:ab:54:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:98:93:15:44:5C:90:7C:A4:D4:EA:71:BE:48:64:1A:E6:C6:5E:FF
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:de:1f:35:18:d1:32:bf:83:7a:52:a9:63:05:c6:9d:14:c6:
         eb:8e:f8:de:f4:37:cd:3d:a7:0f:5f:6a:0f:2b:ba:8d:7e:b5:
         0a:86:c6:70:13:52:8b:e6:91:fd:d9:92:52:ea:45:dc:02:5a:
         99:c3:8b:d7:45:22:ff:05:ad:49:e8:56:ef:e8:77:5d:9a:ef:
         24:35:b4:56:2c:56:34:5a:0e:f6:b4:28:51:85:39:04:01:b8:
         45:93:64:2e:f3:4a:24:c6:9a:be:fd:08:f7:63:50:59:15:a5:
         f4:09:6d:db:a7:0c:a0:3d:1b:4d:a4:ab:55:fb:60:0e:34:20:
         d7:39:90:5f:88:ca:f4:e3:c0:76:ae:2c:11:d7:fd:79:d5:52:
         62:50:94:09:8e:38:ef:f5:82:5e:01:2d:ee:0e:5a:98:c5:e6:
         f4:2e:0a:f1:73:3d:e3:7e:47:f8:44:c8:27:28:31:37:03:b6:
         d3:2f:7c:ee:be:49:dd:cf:fb:00:eb:29:00:0a:e5:9f:71:d4:
         37:ac:44:3e:8a:a6:96:5f:46:54:5f:8c:3a:fd:95:fa:30:2e:
         00:bc:0a:23:e2:4c:9b:87:7e:14:70:6f:6d:47:af:f1:2b:74:
         56:2c:7b:5a:26:48:63:2b:5f:27:98:4d:28:b9:dd:a9:eb:0b:
         f9:71:61:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:40 2025 by rpki-client