Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          v9f+PqHGkJd4O6Vdv69RmNSyyDri3JFYSt4stGh6QdQ=
Subject key identifier:   BE:40:71:DE:61:78:6E:39:11:57:20:7F:68:76:CA:E4:E7:7E:93:4B
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       0197B6A1DDAC67CC83248FEA08E1B87B576E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          0534
Signing time:             Sat 28 Jun 2025 13:02:30 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:30 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:30 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: lJoSeBq8CaFVh8mjqu3RwpsqAbgjvLOgihrFol2DwIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:dd:ac:67:cc:83:24:8f:ea:08:e1:b8:7b:57:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: Jun 28 13:02:30 2025 GMT
            Not After : Jun 29 13:02:30 2025 GMT
        Subject: CN=be4071de61786e391157207f6876cae4e77e934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:b1:f1:05:57:31:5e:b4:09:62:de:0f:c8:
                    ed:f6:ea:bc:c7:a1:c0:ba:e2:92:ef:47:20:4e:70:
                    e2:61:c4:cd:76:dc:b9:91:aa:8c:94:4a:f6:2f:69:
                    6d:c2:08:51:46:f5:11:d9:79:96:10:31:b5:38:c5:
                    f0:61:5f:44:15:22:74:2e:11:c3:23:be:1c:79:41:
                    ca:49:02:d9:a0:c2:dd:4e:93:ae:c9:76:aa:0b:c6:
                    3d:57:4f:ca:be:0c:f7:22:70:a4:87:62:81:28:e4:
                    69:ec:bc:e5:f3:a1:06:fe:8e:d1:d1:6b:c0:26:36:
                    21:0c:e0:96:7d:4f:a7:47:37:3d:b9:21:c1:f0:30:
                    8b:88:e8:cc:ff:94:c3:99:1f:6f:37:60:1b:4b:62:
                    6e:4c:0b:3b:e5:e1:31:08:03:33:70:be:76:c9:e5:
                    db:28:73:7a:1e:df:52:4f:10:e1:dd:f5:eb:2a:ce:
                    d4:86:d8:32:20:49:96:ed:bd:ad:05:3d:8c:3b:63:
                    68:66:9e:81:94:c5:3c:ea:52:37:9b:38:64:86:51:
                    6b:d0:29:fa:a1:98:e9:f2:53:d9:e8:86:64:0d:c8:
                    42:ee:e3:fc:a1:97:2e:75:55:fc:0d:50:9b:ec:5e:
                    84:4c:2f:ba:a8:e5:48:2e:85:5f:ab:c4:e6:f2:7f:
                    51:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:71:DE:61:78:6E:39:11:57:20:7F:68:76:CA:E4:E7:7E:93:4B
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:c2:a8:5f:ac:18:36:dd:0c:7c:05:97:d0:48:b8:95:d3:
         fb:14:c7:c3:d5:65:0e:80:8b:39:dc:3b:3b:1e:f6:76:f3:07:
         83:ef:17:e3:6d:21:2a:7a:8b:a4:db:7d:ed:6e:bb:7e:dd:0d:
         2f:1f:5f:27:c2:ac:e5:b1:07:ed:a0:53:26:f7:37:81:fd:f8:
         39:05:ae:72:59:ef:54:2f:d1:e9:bc:3e:34:15:df:3b:c1:4b:
         77:04:28:a0:5c:9b:b8:13:3a:85:84:0b:6d:d0:69:0d:eb:74:
         c8:7a:9b:04:cc:ac:7a:81:09:00:36:51:f7:e2:e9:db:b2:27:
         7d:78:71:43:49:a3:39:3e:6d:d2:ca:17:d3:0d:a4:07:0d:02:
         c3:d9:e0:2f:a4:af:68:fc:fa:45:c9:ba:e3:73:32:21:e0:20:
         c3:25:46:47:b0:0f:4b:9a:a5:62:60:70:06:57:83:a9:a4:e4:
         8d:db:95:5b:33:28:02:20:77:97:eb:2d:7e:1e:85:db:ea:c4:
         f9:b4:d8:fa:c2:9f:2b:92:e0:68:24:e2:76:1e:1a:8d:3a:66:
         6b:49:ad:5c:aa:61:eb:f8:d2:f1:ca:62:49:ad:5c:80:f2:a0:
         d1:4a:c1:d5:fa:e8:4f:41:12:f0:54:5e:a4:4d:fa:45:33:38:
         45:a8:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:04 2025 by rpki-client