Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
File:                     VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft (raw, json)
Hash identifier:          BsvKCqauBH2ILlbFMW1QIwWUffJJUwC1x5h+CugH/MQ=
Subject key identifier:   E8:76:1E:07:5F:A7:AD:93:16:19:80:E9:52:6E:2C:35:F5:8D:CC:F2
Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42
Certificate issuer:       /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
Certificate serial:       0197B70E7039A072A0637DC9D7810D5857E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
Manifest number:          0AB1
Signing time:             Sat 28 Jun 2025 15:01:05 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:05 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:05 +0000
Files and hashes:         1: Hgi_WtigQe-4a9mBK4OJ2dE5DEg.roa (hash: glvgmho6qzikqxgDEl6Npj+ieTiLH+pi39kY0pjWHaY=)
                          2: VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl (hash: riInUCx/1HHaprgbpWP4tzLTL7n5dVpWbhBcPllrj4c=)
                          3: YHJMwPpMbGI_zFjgbXnZP4EWLRA.roa (hash: PbBfFMHu68bzOncJDtOs1K4e5CV47wx0OGKsJihA0w8=)
                          4: zQrSyIjUHwJboP1xxZbE_ExqSB4.roa (hash: BdysfnABpVK+6w8shMYkAFX35eeb6edXdvxWPmnVvoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:70:39:a0:72:a0:63:7d:c9:d7:81:0d:58:57:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642
        Validity
            Not Before: Jun 28 15:01:05 2025 GMT
            Not After : Jun 29 15:01:05 2025 GMT
        Subject: CN=e8761e075fa7ad93161980e9526e2c35f58dccf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:cb:06:e3:2e:76:c8:e9:37:d1:73:fa:e1:
                    29:ce:2f:7f:7d:af:38:cb:fd:07:61:08:ac:29:07:
                    a8:5f:1c:e9:21:d5:3e:ec:6b:4f:04:74:2f:e4:85:
                    27:5f:18:fe:e1:78:da:5c:a1:61:4c:cc:b4:f2:f5:
                    13:2e:80:53:c4:67:e8:fc:9e:58:e3:66:99:d4:7e:
                    68:33:d1:df:9d:69:a2:5a:8d:bf:67:ef:62:e3:aa:
                    59:d3:52:fd:f6:a1:e2:ea:01:29:e0:1c:87:d2:9b:
                    ef:e7:7f:97:4e:46:35:f0:06:71:41:a3:d2:29:1e:
                    08:92:4c:89:86:83:c1:11:46:9c:83:49:fd:82:9f:
                    cb:29:76:1d:58:fe:08:6e:e5:86:53:68:32:2a:74:
                    28:dc:49:68:60:6d:ba:29:76:03:e4:6f:5e:94:2d:
                    9d:3f:9a:5f:a9:b5:92:64:1e:a3:d9:67:83:44:29:
                    5b:bf:79:b1:a6:cf:71:af:d8:44:7e:1b:eb:64:f6:
                    41:d3:d7:28:2c:8b:8a:c2:d4:b3:c2:db:d7:76:6f:
                    75:4e:ad:2c:fc:2a:77:44:7c:47:61:29:2e:6b:eb:
                    93:3f:82:c5:15:9c:5a:aa:01:93:4e:00:95:41:b8:
                    ee:95:6e:51:e1:5f:fe:e9:49:af:ac:3d:6a:8e:3b:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:76:1E:07:5F:A7:AD:93:16:19:80:E9:52:6E:2C:35:F5:8D:CC:F2
            X509v3 Authority Key Identifier:
                keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:87:bd:9e:aa:f9:b1:cc:9f:6f:d6:25:58:bf:96:ec:0e:
         b8:1c:d8:66:f0:5c:dd:9b:d6:76:f9:e3:b4:05:7e:93:fd:f2:
         02:7d:dd:32:96:20:bc:00:78:bf:2f:ec:05:15:63:00:eb:fc:
         02:fc:52:8f:f2:42:2a:de:5d:a8:b0:1a:f6:ac:13:48:cb:05:
         db:dc:8e:89:c1:c5:98:d0:d3:7d:7b:e0:cf:62:a1:ac:76:ce:
         13:d9:78:16:53:00:8e:62:3d:60:5e:f3:1f:ee:d3:98:70:5d:
         9b:da:fa:e7:ff:ad:e3:ec:90:ff:5b:7b:5a:82:05:14:40:5d:
         91:5a:c6:f4:3e:0e:f5:f4:2c:6a:09:6e:2c:79:07:ed:55:ea:
         36:a9:bc:e2:9e:8d:d9:33:82:2e:1d:7b:69:a8:32:48:81:25:
         ee:68:65:13:75:99:b7:7a:40:61:57:e5:71:e3:4a:45:06:ac:
         72:7d:12:c6:c0:ec:81:5c:74:5d:43:a7:c6:00:63:a9:10:49:
         61:43:87:b7:5c:70:40:84:9d:12:51:04:5b:0d:f0:15:a4:ff:
         bb:53:03:83:2a:28:3f:56:5b:44:21:cf:28:12:70:e3:e1:bf:
         40:35:25:6e:7f:2b:e2:6b:7a:48:e2:67:cc:3f:ac:43:bc:c0:
         ca:52:8e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:14 2025 by rpki-client