Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier:          HoGjrVxcYuJ7UTJ/AtgbB/8rJwr9vGmy/wtKF8Y0aZs=
Subject key identifier:   F8:DE:66:B1:1A:D6:70:35:11:40:17:01:C4:E8:3E:AC:94:5B:22:A9
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       0197B70F3DF9E44125D668B16ADECB4F6E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number:          0A94
Signing time:             Sat 28 Jun 2025 15:01:58 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:58 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:58 +0000
Files and hashes:         1: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: 0sCbcOwevVDVBkS9ysKH+hjOD+zvvfRnAU/py3FIdqA=)
                          2: yzHNRQN_LLYnv0tR5UiHfwPC7uw.roa (hash: xz6DLj2fmkfFVGM6LYkLVTKbdiAh+qRJd+w+TzRoaH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:3d:f9:e4:41:25:d6:68:b1:6a:de:cb:4f:6e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Jun 28 15:01:58 2025 GMT
            Not After : Jun 29 15:01:58 2025 GMT
        Subject: CN=f8de66b11ad6703511401701c4e83eac945b22a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:54:45:86:6c:ea:d6:24:84:e1:65:e7:76:17:
                    5a:ca:c0:92:0b:50:f3:3b:d4:31:bb:ee:a0:87:2c:
                    ab:df:fa:09:8e:ce:1b:31:ec:23:b9:f8:91:18:46:
                    3c:d1:e7:53:16:fd:7e:b9:7f:4b:51:77:1e:32:6e:
                    93:83:a3:03:cd:4f:fb:1b:ac:09:0d:74:65:41:b1:
                    bf:a1:32:f5:be:0f:bd:18:44:fb:fd:f6:43:57:50:
                    ee:00:65:8e:e3:e1:7f:33:f9:9d:70:78:85:20:de:
                    76:bf:bf:04:56:da:8a:a1:4e:e9:c7:a6:da:b1:aa:
                    cb:4c:37:da:8c:d6:70:c9:bc:ec:0d:46:c0:b9:a6:
                    dc:1b:70:b9:de:68:9a:71:94:99:68:7d:a1:39:28:
                    32:02:3d:c6:ca:02:96:3c:43:e2:c7:2c:11:5a:3a:
                    dc:b3:5e:8f:05:9c:1c:0f:b2:62:ba:f0:db:99:32:
                    3d:92:da:5c:7f:e4:28:35:6a:35:60:dd:7e:4b:01:
                    80:6f:ba:54:f4:e0:5f:ca:22:99:27:fa:be:63:6e:
                    5e:e2:26:98:dd:4d:f4:8d:cd:0a:ef:a8:10:83:39:
                    02:c8:37:77:35:e2:f1:1e:06:ba:0e:43:09:75:e9:
                    d3:e0:b6:3a:14:b5:7b:ff:e0:d8:bd:61:a4:42:1b:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DE:66:B1:1A:D6:70:35:11:40:17:01:C4:E8:3E:AC:94:5B:22:A9
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:6b:7f:c1:4c:50:34:d9:4d:69:8f:01:e2:9b:0f:86:50:
         c3:20:47:9e:ee:64:9d:06:be:eb:3a:33:04:3a:06:ea:19:66:
         16:e4:f8:97:c3:f6:0d:e6:5f:38:7a:ce:b8:96:af:e8:2b:27:
         0b:e1:cf:5e:2b:9d:56:43:a2:ed:a0:37:20:3d:ae:58:8c:c4:
         40:e8:3a:55:67:80:dd:c5:50:23:70:d4:05:ab:e4:68:65:c3:
         5f:12:ba:49:98:80:40:4e:92:90:91:e5:85:5e:37:4c:46:92:
         2a:90:00:cd:e9:6e:ae:8a:b1:ce:b3:af:48:d1:a2:66:65:fc:
         f0:37:1d:2e:59:17:3e:4c:c8:d5:c5:ad:cc:97:2b:5a:d6:43:
         49:cf:c1:c3:1d:b7:3b:88:1c:fb:25:56:b2:0f:6c:95:b0:75:
         e8:65:f3:2d:12:71:2a:13:eb:36:e2:b6:53:3a:03:a4:eb:07:
         40:fb:9f:2e:6a:d1:d6:2c:66:62:5d:f4:19:fa:95:44:38:fa:
         be:26:80:13:49:16:40:94:fd:26:43:25:b2:7e:d4:c3:37:13:
         69:5b:88:ed:cd:9c:a5:66:ab:83:c7:db:8a:43:2a:d7:80:9a:
         b5:54:8e:2b:75:95:8a:a9:85:65:95:04:28:48:66:1e:f0:60:
         45:b9:b6:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dz355EEl1mixat7LT26ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NmVjMjE3ZTliMTI5MzE2YzIzYTZmYTlmOWE3MjFmMTBj
MmQ5NWQwHhcNMjUwNjI4MTUwMTU4WhcNMjUwNjI5MTUwMTU4WjAzMTEwLwYDVQQD
EyhmOGRlNjZiMTFhZDY3MDM1MTE0MDE3MDFjNGU4M2VhYzk0NWIyMmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVRFhmzq1iSE4WXndhdaysCSC1Dz
O9Qxu+6ghyyr3/oJjs4bMewjufiRGEY80edTFv1+uX9LUXceMm6Tg6MDzU/7G6wJ
DXRlQbG/oTL1vg+9GET7/fZDV1DuAGWO4+F/M/mdcHiFIN52v78EVtqKoU7px6ba
sarLTDfajNZwybzsDUbAuabcG3C53miacZSZaH2hOSgyAj3GygKWPEPixywRWjrc
s16PBZwcD7JiuvDbmTI9ktpcf+QoNWo1YN1+SwGAb7pU9OBfyiKZJ/q+Y25e4iaY
3U30jc0K76gQgzkCyDd3NeLxHga6DkMJdenT4LY6FLV7/+DYvWGkQhtvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjeZrEa1nA1EUAXAcToPqyUWyKpMB8GA1UdIwQY
MBaAFFRuwhfpsSkxbCOm+p+ach8QwtldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQt
YzQ3YzI2ZmE2OGFmLzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85YmI3ZDYtN2Y3YS00ODZjLThhMGQtYzQ3YzI2ZmE2OGFm
LzEvVkc3Q0YtbXhLVEZzSTZiNm41cHlIeERDMlYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOFrf8FM
UDTZTWmPAeKbD4ZQwyBHnu5knQa+6zozBDoG6hlmFuT4l8P2DeZfOHrOuJav6Csn
C+HPXiudVkOi7aA3ID2uWIzEQOg6VWeA3cVQI3DUBavkaGXDXxK6SZiAQE6SkJHl
hV43TEaSKpAAzeluroqxzrOvSNGiZmX88DcdLlkXPkzI1cWtzJcrWtZDSc/Bwx23
O4gc+yVWsg9slbB16GXzLRJxKhPrNuK2UzoDpOsHQPufLmrR1ixmYl30GfqVRDj6
viaAE0kWQJT9JkMlsn7UwzcTaVuI7c2cpWarg8fbikMq14CatVSOK3WViqmFZZUE
KEhmHvBgRbm2jQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:20 2025 by rpki-client