Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
File:                     VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json)
Hash identifier:          csDk0k9eBJm3YmKgzoB19X/OP6TLPlYt1osxp40sACg=
Subject key identifier:   D1:54:0B:C6:0B:7A:90:6D:87:61:2B:1E:F2:BA:4A:04:B6:D5:E3:B2
Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Certificate issuer:       /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Certificate serial:       0197B5FBE2E48CCC89C80CC3BEEF68B0B439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
Manifest number:          27
Signing time:             Sat 28 Jun 2025 10:01:13 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:13 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:13 +0000
Files and hashes:         1: 0KZX05rL8h9xkUYSwRaJ35ZtOBw.roa (hash: 0p1i5WbBLqVZcu2ejejVhnVH/tBsiXUpsUEhbMpG3eU=)
                          2: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: E1jqwNN5exgc7xobfaIg68Rvd+ZRQwcOXN2Fo7v7QvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:e2:e4:8c:cc:89:c8:0c:c3:be:ef:68:b0:b4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
        Validity
            Not Before: Jun 28 10:01:13 2025 GMT
            Not After : Jun 29 10:01:13 2025 GMT
        Subject: CN=d1540bc60b7a906d87612b1ef2ba4a04b6d5e3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:c8:b1:4f:d1:be:62:c8:3e:df:99:10:34:
                    9c:11:38:4e:c9:26:9b:73:61:85:10:8c:da:e9:50:
                    49:d3:2c:6b:5b:d4:81:07:26:36:13:b3:ed:c9:b8:
                    1b:58:72:f1:82:2f:5e:c4:6f:43:dd:d7:53:f9:7c:
                    35:8f:6d:80:c4:c5:f2:f2:56:c7:54:ff:a8:3c:66:
                    cb:cd:bf:3f:50:42:fa:1b:8f:2a:02:a3:6d:86:fa:
                    12:d9:93:3d:2a:15:e9:77:09:4e:5b:85:d2:20:8f:
                    d4:62:a0:4b:0d:44:6b:70:34:30:0e:98:40:13:84:
                    b9:fb:03:ae:50:a6:66:1d:51:89:99:2a:4a:bc:f1:
                    1d:7c:5a:00:36:2e:8b:aa:af:86:fc:77:d2:39:0f:
                    43:28:9e:5c:e0:1f:6c:1b:ee:46:34:21:19:3c:88:
                    53:d1:ad:d6:1b:09:82:35:a3:3f:de:6a:5f:b5:11:
                    03:61:ed:e6:c8:9a:e4:16:26:1d:ec:05:19:5a:a3:
                    69:97:30:a9:71:ea:43:7f:f0:d8:cd:3e:69:82:cf:
                    fd:ea:b3:20:be:d6:34:0d:05:4b:35:d5:fa:33:5e:
                    5e:29:67:2e:8f:67:04:ba:27:ab:81:e3:16:79:df:
                    32:ca:ec:95:18:d5:34:18:f1:f0:41:80:68:ff:99:
                    48:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:54:0B:C6:0B:7A:90:6D:87:61:2B:1E:F2:BA:4A:04:B6:D5:E3:B2
            X509v3 Authority Key Identifier:
                keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a4:40:8b:aa:ea:2d:9e:ff:4c:09:be:b1:c6:23:78:2d:4c:
         f1:6f:50:c4:ab:88:39:0d:8e:7d:fb:83:61:28:c2:e9:41:48:
         7e:a7:b5:02:ba:53:31:c5:5d:eb:1b:94:42:6d:53:99:07:40:
         60:1a:90:60:a5:a5:b7:7d:95:b9:fa:0a:28:14:57:68:0b:63:
         2d:88:28:3e:35:b2:bd:25:39:16:a5:96:77:c5:4a:bf:5e:eb:
         4c:d1:74:48:71:0f:aa:7e:aa:be:b9:2c:c2:e0:5e:75:9f:a6:
         b6:7a:38:71:e5:ca:72:22:87:d4:77:ef:a8:2d:0f:df:c5:53:
         3d:5d:50:46:71:82:5b:51:a0:16:73:2b:ce:62:85:fd:67:74:
         4f:2c:23:46:f2:55:b6:b7:09:f5:8e:6f:73:c5:e2:29:42:55:
         14:bf:2f:4a:68:56:6f:f9:29:95:78:7d:be:a7:14:fc:5b:f8:
         92:2f:06:28:fb:15:36:28:fd:c6:ee:b3:5d:80:fa:91:e1:df:
         c3:1b:af:19:73:da:f5:2a:bb:db:59:88:db:0e:48:16:8c:7b:
         f6:b5:0d:b3:0e:1c:16:6f:25:34:06:8c:ab:9e:10:e3:b9:62:
         2b:e2:c8:13:26:95:b0:c4:ce:ad:b7:90:3f:89:b4:53:a7:5c:
         d7:2a:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:44 2025 by rpki-client