Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
File:                     2Vvf164gaHHjgmf0V3hiERhk2C8.mft (raw, json)
Hash identifier:          rgf6YtOvjq5F2cMLnIhThFZc97C2vrpYrYmqVhb/BhY=
Subject key identifier:   4B:C7:87:F4:F2:A9:0E:C6:6F:CF:2F:6C:FC:DE:26:25:1E:A1:BB:EB
Authority key identifier: D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F
Certificate issuer:       /CN=d95bdfd7ae206871e38267f4577862111864d82f
Certificate serial:       0197B7B2E93F920EC0F21B693459AFB466B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
Manifest number:          0199
Signing time:             Sat 28 Jun 2025 18:00:44 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:44 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:44 +0000
Files and hashes:         1: 2Vvf164gaHHjgmf0V3hiERhk2C8.crl (hash: 08iHEqnVbYDmK3R1iUIdJPfmNDppdRPxt9W7mnlpqpg=)
                          2: yYyiNsgvxodzcWtsJth3gtqP74s.roa (hash: h9GU418V8HLDeWxchLf1ERx3rIBgo7WWOa5d5upmucg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b2:e9:3f:92:0e:c0:f2:1b:69:34:59:af:b4:66:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d95bdfd7ae206871e38267f4577862111864d82f
        Validity
            Not Before: Jun 28 18:00:44 2025 GMT
            Not After : Jun 29 18:00:44 2025 GMT
        Subject: CN=4bc787f4f2a90ec66fcf2f6cfcde26251ea1bbeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:03:fb:87:94:e7:16:e4:dc:60:f8:29:82:86:
                    b6:50:1b:3c:bd:8f:bd:0a:8c:69:fa:ff:bb:72:46:
                    46:5d:24:c6:95:f6:85:9d:bb:19:7a:40:3c:47:59:
                    f1:9e:79:25:1c:52:71:93:60:e5:02:37:4d:25:fc:
                    c2:2d:3e:7e:b5:74:68:8d:c9:2c:50:d4:38:fa:47:
                    a8:a2:cf:56:46:ae:98:1b:9e:b0:fd:cb:13:4d:1e:
                    1e:2c:52:93:e2:38:72:e9:c6:eb:7a:4f:47:a2:8d:
                    2c:6c:94:89:a9:39:3f:64:04:00:db:02:c4:94:94:
                    9c:6c:1b:87:cd:93:1c:d9:82:da:db:e1:8d:0e:8b:
                    82:26:74:18:d7:74:d5:84:7c:f6:34:43:1f:09:55:
                    43:c9:76:da:8a:cf:94:01:91:37:94:63:e5:8f:a8:
                    48:05:0b:4e:7b:9e:3b:59:8e:41:49:8b:94:ef:ab:
                    66:c5:bf:ff:d5:c2:82:e5:6d:21:64:b3:56:2d:f4:
                    32:05:e5:f8:95:ee:1c:3c:34:d9:5a:38:ec:80:f1:
                    fd:5e:99:36:3e:a8:03:30:eb:a8:9b:44:44:66:9e:
                    45:f3:06:6d:22:b6:80:73:f5:7b:1c:0a:ae:de:1d:
                    23:5b:d0:da:72:d9:f8:26:b4:99:35:4f:fb:18:a6:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C7:87:F4:F2:A9:0E:C6:6F:CF:2F:6C:FC:DE:26:25:1E:A1:BB:EB
            X509v3 Authority Key Identifier:
                keyid:D9:5B:DF:D7:AE:20:68:71:E3:82:67:F4:57:78:62:11:18:64:D8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vvf164gaHHjgmf0V3hiERhk2C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a7ee99-6161-49da-87eb-a8bf8357079f/1/2Vvf164gaHHjgmf0V3hiERhk2C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:26:68:96:7c:cd:d2:49:4e:35:47:94:fd:49:4d:52:19:af:
         4b:97:52:a5:35:6b:8f:31:56:33:8c:13:e9:25:14:6c:03:95:
         03:66:7d:49:57:03:ee:68:42:95:20:dd:eb:e2:af:75:ca:f2:
         6a:9b:77:ac:aa:22:bb:42:3e:90:de:e6:f9:13:d5:e8:e4:ba:
         d2:c7:ae:d7:ad:77:ca:55:ec:55:2f:b7:0a:20:8e:f0:ab:cd:
         22:c6:44:87:e9:3d:50:5f:bf:b0:cc:ef:0f:79:7f:fc:cf:68:
         c6:99:ac:56:5f:43:85:91:9c:1a:31:eb:84:15:a2:35:53:c3:
         76:05:53:45:7d:72:b1:04:33:89:5c:46:bb:26:86:93:33:11:
         de:f1:5f:f5:4b:0c:28:0b:6a:ac:bb:b9:55:d2:3b:6b:50:8b:
         01:93:26:f4:b7:45:11:b0:66:c1:cb:9c:58:1e:86:c8:41:d3:
         34:ea:de:94:8a:8a:a5:37:95:b5:ba:b6:ee:46:e3:e4:66:2d:
         25:fc:ea:c4:34:a4:16:d8:4f:36:b0:64:0a:af:32:75:7f:7c:
         7a:de:78:72:1f:b6:ac:1e:53:87:6c:7e:f4:59:f1:36:41:5d:
         33:3a:7b:3e:9a:09:c8:79:80:ab:22:77:6e:1f:3d:58:1e:f1:
         15:8d:c3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:37 2025 by rpki-client