Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          cIw4KGITAj17BBqGvyxwaRgwmuiYqj2cfh1DP54MYQE=
Subject key identifier:   DA:4A:85:95:31:9C:89:F3:01:4A:03:74:77:98:77:85:BE:BF:DF:1A
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       01974D0E10AF058AA2006A21141356889663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          128B
Signing time:             Sun 08 Jun 2025 01:00:56 +0000
Manifest this update:     Sun 08 Jun 2025 01:00:56 +0000
Manifest next update:     Mon 09 Jun 2025 01:00:56 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: 7ame6c0ceH69AP/vzPDJEKUpQtmtPUzuCL2yQ/1vekM=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:0e:10:af:05:8a:a2:00:6a:21:14:13:56:88:96:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: Jun  8 01:00:56 2025 GMT
            Not After : Jun  9 01:00:56 2025 GMT
        Subject: CN=da4a8595319c89f3014a037477987785bebfdf1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f9:1f:3d:1d:75:92:30:d4:e4:4c:f1:f4:23:
                    5a:fe:25:c3:74:3b:69:ec:64:c0:f1:83:0a:a7:ed:
                    e8:a3:b0:de:ec:61:8a:c3:bd:57:15:5a:ba:bc:0d:
                    c1:12:5b:c8:eb:8b:7b:9c:ba:6f:71:d5:03:8f:ac:
                    84:3d:d1:a5:49:bf:4c:13:51:4b:fd:8d:18:22:8b:
                    62:da:cc:e4:69:da:19:ad:d8:b2:47:36:b0:77:4a:
                    66:22:38:fc:73:45:f3:98:6c:a9:e9:65:91:e9:72:
                    12:11:30:4c:6d:8b:98:46:8b:54:f1:5a:2d:52:84:
                    33:fe:70:9d:23:3d:2f:eb:90:63:28:a7:96:f0:51:
                    74:40:57:36:75:95:78:07:1e:45:ed:53:85:d7:e9:
                    e4:0a:83:9a:e8:1d:df:a5:91:53:b3:68:fe:35:18:
                    b2:a1:67:a8:00:0a:8b:26:ba:75:88:b5:13:9a:a5:
                    0f:ed:99:82:3f:6d:e8:d3:8f:28:46:15:5b:50:69:
                    23:74:c5:d3:1c:39:ce:7d:02:61:5a:d7:8e:05:9b:
                    1a:4c:1b:52:ea:bf:02:e0:8c:52:35:b0:c3:9f:f9:
                    8b:53:a9:75:70:dd:67:6d:25:f1:83:ca:3f:63:3e:
                    87:ca:2b:18:f1:bf:0a:61:25:4d:b9:2d:a9:97:23:
                    85:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:85:95:31:9C:89:F3:01:4A:03:74:77:98:77:85:BE:BF:DF:1A
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c9:f7:86:07:c1:62:98:a3:83:7c:f4:bd:d5:a8:38:79:97:
         85:94:c4:28:06:5b:ee:d6:7b:12:b4:91:58:71:66:db:bf:3f:
         86:6b:cf:9c:43:06:c5:89:c7:7e:fc:5b:0c:a1:45:1b:4f:f4:
         19:e1:7a:46:d2:2d:7c:bc:95:bb:36:1d:b7:49:b3:84:3b:5b:
         6b:72:9c:bf:7d:d6:5b:08:7d:4b:ab:e7:a2:ed:6b:56:90:9a:
         8d:b5:7f:84:62:35:03:3c:37:b9:36:77:85:73:e0:a7:c4:56:
         6a:f2:b2:24:99:72:23:f1:65:15:df:85:6e:00:c8:d7:0d:8f:
         9c:73:e2:07:c2:7b:22:9f:49:d2:bf:75:81:88:19:52:6b:1e:
         38:a8:03:d8:03:43:aa:f1:04:d6:e1:60:9d:57:96:84:17:bd:
         95:0e:be:43:e6:4e:eb:73:dd:4a:aa:0f:1b:58:11:f2:17:bc:
         71:0f:1f:cd:62:c3:86:72:c5:e4:f1:8e:86:aa:e9:d7:7c:2f:
         4d:08:43:73:e1:f9:85:9b:72:28:40:27:62:58:36:f5:a4:3a:
         a8:5e:4b:c2:31:f6:5b:70:b1:16:96:f2:85:c0:b3:97:75:87:
         ec:09:1e:a7:93:24:71:ff:ae:b1:62:37:53:b4:4e:8a:d5:44:
         4d:3b:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:40 2025 by rpki-client