Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          pVuoY6aqp/FJmnwdz9lJjR1Ljm/qap2t35ucwsTzm98=
Subject key identifier:   96:F6:20:D4:5A:F5:FD:03:8A:06:24:E4:4E:FA:8E:06:BB:AA:23:E4
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       01974C69E52D1853789F58FBBFB6D80DAA4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          0179
Signing time:             Sat 07 Jun 2025 22:01:37 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:37 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:37 +0000
Files and hashes:         1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: jAhGMwo1/sv20aJyhOSMzZdTnSHV87Zl6pI5K4mGyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:e5:2d:18:53:78:9f:58:fb:bf:b6:d8:0d:aa:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Jun  7 22:01:37 2025 GMT
            Not After : Jun  8 22:01:37 2025 GMT
        Subject: CN=96f620d45af5fd038a0624e44efa8e06bbaa23e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:c3:93:a1:40:2e:44:32:a2:b2:a7:0f:dc:
                    3c:75:ab:25:b1:42:d2:2f:03:db:63:63:b9:75:ba:
                    d9:da:00:36:a5:7f:75:bf:2e:16:3c:77:4d:0d:3c:
                    a0:24:4e:98:5f:3e:41:98:29:7d:16:47:cb:73:30:
                    09:b1:5f:68:05:27:c4:a6:8a:0f:39:01:71:0b:01:
                    cc:ef:7f:f6:af:b9:09:8c:63:72:aa:0f:5a:9b:97:
                    40:06:2a:81:2a:22:36:cd:26:b8:78:1b:19:80:9d:
                    ea:f3:31:f5:04:fe:b9:00:7f:6c:94:01:bb:65:b3:
                    a7:df:59:9d:08:4d:af:e9:c3:50:25:5b:28:83:e5:
                    64:54:fe:f6:a2:6e:82:cd:e1:19:ac:de:63:23:23:
                    7a:11:03:cd:fa:7f:94:2d:72:a8:8c:cb:c3:51:bb:
                    d6:9d:7e:c3:66:99:aa:05:6f:07:e1:ab:e8:0d:1a:
                    04:49:4b:ae:dd:15:eb:3f:c9:15:3a:e4:42:51:e8:
                    04:1f:cc:f3:77:50:c4:62:53:5d:3c:ca:84:4a:5d:
                    41:98:69:9e:67:cb:c0:ff:3d:1e:7a:9d:b8:43:5d:
                    dc:36:7a:53:62:12:67:4f:3e:42:e8:90:1b:2a:84:
                    81:49:2b:a6:f4:43:19:df:07:e9:c9:41:c6:7c:99:
                    f9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F6:20:D4:5A:F5:FD:03:8A:06:24:E4:4E:FA:8E:06:BB:AA:23:E4
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:87:9a:1a:d7:ed:1a:6f:94:0d:c1:01:b9:60:dd:19:94:
         9f:1b:d4:73:7f:2f:4b:eb:ad:54:87:0a:eb:52:50:c2:1a:34:
         bb:79:6f:54:06:84:66:62:a5:6a:45:d2:25:c0:68:54:cc:7a:
         e2:ed:62:00:84:b6:be:93:2d:79:d5:b6:4f:9e:79:99:cc:32:
         35:31:c3:3d:dc:0a:f9:82:bc:5d:6e:9d:f5:f9:3c:c2:4b:53:
         0a:a2:83:51:57:27:35:e0:5f:55:e9:13:b2:bb:0e:a4:8f:9d:
         39:e3:3f:30:48:f3:3d:30:76:3d:41:26:bd:69:8a:a0:4b:4c:
         39:79:c9:eb:a4:5a:59:dc:f4:28:34:c4:e9:89:9e:92:72:dd:
         b1:49:42:ff:b9:77:00:75:5c:2b:b4:d2:ff:8e:fd:d1:b4:6e:
         40:b9:c2:fd:36:13:77:28:50:46:e8:5e:f6:48:6b:84:54:0f:
         6f:d5:6b:36:56:9d:0c:c8:75:8e:c1:bc:02:38:5a:1b:7e:7f:
         2c:a4:11:1b:6b:1f:e2:70:3b:a3:aa:8b:05:b0:2b:3f:e3:24:
         4a:13:6f:a1:65:d2:df:d8:86:b9:17:1c:a8:47:25:7a:55:71:
         8a:fe:7a:4d:e7:33:16:13:e2:99:83:ac:58:ef:1d:a0:a0:cd:
         ca:34:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:05:13 2025 by rpki-client