Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          cFu6OqzZ/+FYbcyd6Nz28MrCEnLBlF3T+N2uG+gKHro=
Subject key identifier:   7C:B0:87:A4:8D:2D:19:21:DE:69:ED:9F:E2:A5:92:FE:02:F0:C3:04
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       0197C56F13385D3B42437C06544CD869F4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          13DA
Signing time:             Tue 01 Jul 2025 10:01:20 +0000
Manifest this update:     Tue 01 Jul 2025 10:01:20 +0000
Manifest next update:     Wed 02 Jul 2025 10:01:20 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: KL9GRXon1fSt60OdbbOgAhukmT/3W5ZTRxWPf3BVA7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c5:6f:13:38:5d:3b:42:43:7c:06:54:4c:d8:69:f4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jul  1 10:01:20 2025 GMT
            Not After : Jul  2 10:01:20 2025 GMT
        Subject: CN=7cb087a48d2d1921de69ed9fe2a592fe02f0c304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:65:21:73:95:06:9b:82:3d:ea:86:8b:3b:
                    15:48:e2:84:b5:87:73:ff:ea:18:44:0d:1f:4d:1d:
                    8f:84:19:fc:1f:71:30:95:55:f7:b9:7e:7a:bc:1c:
                    44:8d:de:9b:9f:0d:d6:e7:f9:0a:d4:ae:d2:85:b3:
                    f8:69:9b:d2:bc:76:23:9d:1f:e0:e2:b4:5d:b3:b5:
                    6f:91:51:ef:fb:d6:d5:4c:3e:de:d8:ee:2d:25:ee:
                    b3:2f:83:04:20:9f:25:96:27:55:98:98:5a:90:a8:
                    ae:4a:0c:e5:b6:a1:f8:a1:4c:4d:16:e1:47:54:cc:
                    a1:0f:fc:f4:c6:bd:61:e8:f7:ee:a0:3c:b1:8e:dd:
                    5a:f1:22:b3:37:7c:d1:88:d6:f0:97:20:a3:d2:3a:
                    f2:f8:ed:a7:e2:73:dd:27:94:64:0d:59:26:e9:99:
                    91:cf:28:3a:26:85:8e:1e:25:6c:ed:e6:17:2c:40:
                    b3:5b:f5:2a:6f:4b:16:db:cf:0a:9e:b6:2a:3e:24:
                    1e:f8:c6:66:bd:98:03:ab:50:96:e4:09:a5:ca:6e:
                    7c:cc:4f:c0:e9:52:1a:5e:2e:73:30:3d:55:60:54:
                    03:94:5e:03:c6:2f:c2:c3:13:d8:80:06:29:16:14:
                    76:0a:ce:13:a6:1c:9f:ae:2b:33:f7:94:01:5b:58:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B0:87:A4:8D:2D:19:21:DE:69:ED:9F:E2:A5:92:FE:02:F0:C3:04
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:f0:18:5b:05:e7:84:90:86:ed:94:37:43:36:e1:f9:43:03:
         33:ad:a1:d8:24:7f:bf:74:04:61:ab:e3:97:e7:80:89:9e:a1:
         f8:96:83:4a:2a:c0:68:85:53:d5:6e:7c:24:24:55:c2:f6:8c:
         3d:24:be:7d:f1:c7:45:1a:f1:55:93:80:76:d6:45:92:c1:c7:
         74:c9:59:68:d9:4d:d7:62:a8:62:8f:8c:e1:59:52:34:11:44:
         dc:98:75:48:19:87:d4:c5:5d:55:bd:1c:bc:30:81:50:48:f6:
         cd:ec:ad:54:51:2e:27:35:b3:46:98:2f:35:74:dc:da:80:96:
         42:04:e7:99:7a:09:cb:d8:78:12:dc:68:3e:9d:d7:ef:69:df:
         d2:ee:9f:06:d0:02:86:93:5f:7c:e8:e4:6d:5c:4e:ff:55:2e:
         65:d8:37:83:05:c9:18:42:00:e7:4f:94:a1:b9:48:05:a9:b0:
         c0:db:2b:70:a0:2b:64:39:75:0d:03:f6:19:f6:3d:29:1a:44:
         3c:4b:35:57:0b:2f:69:c1:55:b6:5c:b0:af:97:f7:32:74:38:
         43:a6:87:d0:3f:4e:d2:7b:fb:d5:3b:b8:4f:7e:bb:f3:d4:31:
         5b:e0:ed:4c:78:56:e0:11:3a:1e:31:de:1f:c5:5f:0e:da:01:
         5d:35:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:07:25 2025 by rpki-client