Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File:                     vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier:          XiSVvzUU24fy0wLXM4Q/Ge6esJDvBNdrtphr9tXlt0I=
Subject key identifier:   0F:C7:63:4A:AC:CA:B8:76:79:95:3F:94:69:DF:39:6C:C0:B0:6A:8C
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer:       /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial:       01974AE82D403C7079A6C1E1DCBE6024DFC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number:          0C62
Signing time:             Sat 07 Jun 2025 15:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:19 +0000
Files and hashes:         1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: +8rNaXm2SjXLK0cpSusHuzrdFOlFyzCaRxbF2569Fxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:2d:40:3c:70:79:a6:c1:e1:dc:be:60:24:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
        Validity
            Not Before: Jun  7 15:00:19 2025 GMT
            Not After : Jun  8 15:00:19 2025 GMT
        Subject: CN=0fc7634aaccab87679953f9469df396cc0b06a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:c0:5f:f0:ce:de:7d:57:74:d5:f1:25:42:
                    d7:c2:57:e7:c3:e9:40:9a:71:23:b6:eb:21:7c:74:
                    2e:e8:dc:17:d5:f1:64:57:1a:1c:ce:24:bc:67:46:
                    09:d8:64:fd:f2:61:4c:3d:30:f4:56:bb:e8:c1:bd:
                    54:1f:99:0c:35:95:20:6e:eb:ae:c2:7e:3c:18:e9:
                    ec:6f:42:53:49:c0:a3:71:88:ab:35:b2:64:85:e5:
                    55:55:e2:51:4c:9e:50:89:34:b6:e1:25:4a:fa:b6:
                    de:78:e5:6f:7c:c3:e5:1b:c2:e6:da:40:bb:8f:a6:
                    2c:3c:56:67:5f:ea:44:4e:d4:a2:ee:f9:ec:8e:80:
                    10:f4:66:1c:aa:28:c6:7f:e7:48:6e:29:b7:bb:2f:
                    29:52:ad:26:6e:72:48:f5:06:d1:ae:4c:83:0b:33:
                    bb:06:73:fa:7d:df:c6:f6:a3:ba:24:7e:b4:05:6b:
                    fe:d6:57:d9:22:f4:5f:7a:ed:43:e9:83:bc:7c:f5:
                    da:80:21:6d:1c:75:c1:f1:57:cd:6d:9d:48:81:dd:
                    64:97:43:52:96:5f:23:fd:28:e6:95:04:b0:82:5c:
                    1d:cd:6f:04:53:e1:e6:dd:6b:b7:6a:c0:de:7c:c7:
                    cb:00:36:ec:a7:3b:26:0e:6f:bb:86:4f:24:18:77:
                    b4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C7:63:4A:AC:CA:B8:76:79:95:3F:94:69:DF:39:6C:C0:B0:6A:8C
            X509v3 Authority Key Identifier:
                keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:e6:e7:89:14:ae:60:d4:71:9b:22:51:81:26:66:6e:a0:
         71:ed:18:e3:e4:fe:d8:d1:80:d0:55:33:d8:44:29:60:99:85:
         63:42:46:cc:88:21:14:5b:4d:d3:80:17:48:5c:1e:cf:e2:f5:
         cb:da:9d:32:1e:72:58:3e:b6:25:61:22:fd:b1:bd:22:b8:1c:
         07:2f:1d:bd:15:bf:1f:86:f6:14:e5:97:53:dc:ab:dd:f1:cf:
         9b:f0:cc:7d:68:fd:b2:95:4d:3e:16:fe:95:e2:e9:3e:2c:3d:
         69:f6:35:75:23:7e:03:ff:9a:19:a0:21:c8:9d:f6:fb:dc:09:
         53:53:47:32:6c:32:d5:b8:c9:d5:fd:fb:e5:f9:1e:d2:82:b3:
         67:9a:02:63:62:8e:9c:d8:04:10:0f:fb:95:72:16:c9:42:65:
         ef:9f:ba:8e:0d:37:fe:8c:1c:3a:01:92:f1:cc:75:bf:17:e3:
         03:4a:4e:d6:64:10:58:47:40:7f:2e:87:74:f8:16:15:ed:11:
         37:c8:20:f5:9c:41:7d:95:6e:5e:c5:66:8e:99:c4:00:6b:5e:
         1a:ff:a1:61:48:05:fd:a1:90:0e:87:87:ec:8a:94:d8:84:9c:
         70:e0:ea:8f:e2:f1:85:a5:ab:1c:d5:a0:ff:b9:b9:6d:4f:97:
         55:e9:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:32:47 2025 by rpki-client