Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          jGvox+V60kN62kWiE8Kvf+uZDIXThWSlitg8yeAttlo=
Subject key identifier:   5D:9A:8D:AF:98:9B:29:93:B1:6D:5A:F4:3D:E3:51:02:4B:31:64:AB
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       0197B5FBF2369520761B81D59148B8834615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          0F87
Signing time:             Sat 28 Jun 2025 10:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:16 +0000
Files and hashes:         1: J61W22rNG-zDQHqba8KpMVr9eOQ.roa (hash: egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=)
                          2: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: 0jlRC98tEmBAJdKSUvLNvcjrB1EkJGGUDKAvpnbRxwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:f2:36:95:20:76:1b:81:d5:91:48:b8:83:46:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Jun 28 10:01:16 2025 GMT
            Not After : Jun 29 10:01:16 2025 GMT
        Subject: CN=5d9a8daf989b2993b16d5af43de351024b3164ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:7c:38:b6:9c:fc:91:90:f6:71:7c:fe:2c:
                    0a:92:53:05:d3:9b:53:97:14:cb:4e:de:74:f3:32:
                    d3:0f:60:8b:c1:1b:01:50:af:48:56:a9:43:74:6c:
                    d2:89:0a:b1:9d:7f:8b:1e:d6:7f:9e:30:48:58:db:
                    00:54:22:42:e9:1a:08:d8:57:3a:ab:94:1d:e0:95:
                    eb:23:2f:c3:1c:3a:5c:f1:82:c1:f9:cf:ec:26:4b:
                    43:9f:d3:5d:ee:4d:23:d5:c7:aa:41:44:71:bd:43:
                    06:d1:85:38:d6:30:7d:a0:93:1c:db:4a:41:38:0f:
                    37:a8:b0:a5:34:3f:92:d5:15:be:8a:a2:e2:cd:28:
                    8b:64:c4:50:73:4b:37:1c:cf:6e:8c:a6:f9:8f:af:
                    b3:e9:24:3d:c6:5c:b3:da:16:1b:28:96:b4:1f:14:
                    db:c9:be:fa:b8:7b:e8:18:73:42:79:3d:83:2c:a7:
                    f2:72:0f:7f:a6:6e:72:f1:1f:b5:71:31:e8:c5:7e:
                    12:59:62:29:43:f2:9f:d0:f7:90:66:98:e6:83:18:
                    ed:8f:4f:e9:53:7e:8c:f8:ef:80:e7:6b:61:62:8b:
                    cb:d3:ea:76:f3:be:91:73:e3:45:a5:70:4a:dd:8f:
                    b0:57:83:5a:ea:e4:f9:22:cd:d6:2a:cd:86:04:b4:
                    b2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:8D:AF:98:9B:29:93:B1:6D:5A:F4:3D:E3:51:02:4B:31:64:AB
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bf:f7:e0:93:79:09:70:0f:5a:d0:6b:cc:78:bb:26:8c:b5:
         90:c3:54:1f:6a:be:85:55:b6:7f:86:b4:8b:3e:7f:6d:39:2e:
         61:a8:b8:95:14:77:de:cd:41:58:77:98:c4:90:89:d2:f1:c5:
         52:d2:b8:10:7a:76:9a:19:5a:53:a2:61:0d:db:a3:6e:38:20:
         69:0f:92:9d:af:04:12:68:d5:95:4b:54:87:d5:84:8c:dd:d2:
         e5:f8:24:18:ac:b9:07:c0:f8:95:a3:66:93:da:b2:29:86:37:
         14:35:95:49:e3:4d:47:fb:36:98:03:3f:b6:54:1d:47:4f:86:
         91:c2:9d:cb:02:49:d7:3e:45:fd:19:b5:da:e1:08:cf:fb:89:
         b6:65:c9:11:3e:00:ad:c9:2e:01:9d:9c:3a:ad:da:21:97:1c:
         d0:77:51:e1:c8:3b:e8:dc:52:b2:f8:7a:10:44:40:ff:d4:26:
         51:0d:19:aa:98:75:91:fe:1a:60:30:48:e1:45:ec:ce:11:f2:
         bd:8e:7f:4a:f8:f2:a1:27:2d:34:86:75:da:64:af:8c:6f:21:
         bd:a8:56:88:aa:a2:b4:82:00:55:07:e4:4d:35:c5:67:f1:0e:
         a3:ba:93:34:5c:af:99:c3:15:3e:1d:10:ce:93:91:1b:be:5d:
         f4:ac:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:43 2025 by rpki-client