Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
File:                     V4BBFS34D25TE0JmPdADEJkFCE8.mft (raw, json)
Hash identifier:          tokUOonhZM0YmLdwokgkcE929bVUZHS2/y7vVJm+UUo=
Subject key identifier:   7A:43:A0:11:B6:B4:05:78:FF:8C:41:BF:9F:DB:D8:E9:79:58:9B:42
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Certificate issuer:       /CN=578041152df80f6e531342663dd003109905084f
Certificate serial:       019748C2E843E05739B72C06621475EA35A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
Manifest number:          079E
Signing time:             Sat 07 Jun 2025 05:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:22 +0000
Files and hashes:         1: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (hash: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=)
                          2: V4BBFS34D25TE0JmPdADEJkFCE8.crl (hash: ulhEXonP/SRGS9iFOXXSSiP6+X7a1fy8aljgf27pwSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c2:e8:43:e0:57:39:b7:2c:06:62:14:75:ea:35:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578041152df80f6e531342663dd003109905084f
        Validity
            Not Before: Jun  7 05:00:22 2025 GMT
            Not After : Jun  8 05:00:22 2025 GMT
        Subject: CN=7a43a011b6b40578ff8c41bf9fdbd8e979589b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f7:05:a5:6b:8d:b7:61:70:26:17:24:7f:ae:
                    fb:fd:5f:8d:58:ed:19:3e:20:c4:54:7f:81:57:b6:
                    c3:3d:cc:63:90:04:f8:be:64:fb:7d:a8:02:ad:d1:
                    c7:97:3d:f6:c1:84:ce:c4:5b:42:5e:4c:76:d3:80:
                    4e:d1:81:e0:b5:94:d0:a5:81:96:05:65:ab:72:5a:
                    de:26:78:43:80:ba:57:27:2d:11:cf:34:0d:10:75:
                    e2:19:db:22:f2:30:c7:9b:16:d3:9f:ca:0d:e1:01:
                    b6:8b:8a:45:0f:a9:40:bc:ff:23:e5:12:36:dd:1f:
                    05:16:c3:75:b2:83:23:0b:2a:eb:3b:3e:d5:ce:78:
                    c4:f3:23:43:63:25:69:a2:44:46:e8:f1:be:aa:d5:
                    5f:ca:89:1a:5c:05:c2:7c:33:11:69:98:17:f6:53:
                    8c:d2:af:31:f6:86:94:13:31:83:cd:47:68:62:ff:
                    8c:09:85:39:a6:4f:ec:45:45:5a:99:20:52:2e:61:
                    4c:36:06:4b:b4:ee:c8:96:d6:a2:10:a1:79:1c:f5:
                    b2:24:da:b2:3d:7c:9b:55:93:46:11:33:14:52:26:
                    8d:73:3f:34:e1:f5:90:87:6b:a5:9e:17:a2:a1:9a:
                    26:1a:0d:d6:d4:75:ad:93:91:98:60:ef:0d:15:01:
                    3c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:43:A0:11:B6:B4:05:78:FF:8C:41:BF:9F:DB:D8:E9:79:58:9B:42
            X509v3 Authority Key Identifier:
                keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:42:08:36:46:15:5d:29:a1:9c:e9:ab:42:4c:41:b1:73:
         4b:b2:66:cd:11:d6:ee:f1:c9:12:6e:19:b0:e8:08:d0:54:5b:
         4d:43:aa:76:8f:4d:17:1f:13:cc:05:2a:32:2d:25:85:96:8a:
         43:d4:7a:62:8a:61:99:f3:8d:40:74:8e:2a:85:9b:1b:ae:52:
         7f:78:56:14:57:c8:e0:de:7a:6e:40:3a:38:48:23:83:51:18:
         b5:03:99:da:c4:59:fd:7b:48:e3:cf:e5:87:8e:99:ec:ba:03:
         c2:fa:5f:8c:19:0a:38:8f:9b:b6:0e:30:0b:b7:c6:94:b0:6a:
         3a:f2:26:8c:7a:81:6a:f4:13:e9:15:02:4d:51:be:27:52:91:
         a7:a3:b8:21:55:1a:14:f5:d8:58:0e:44:22:da:23:47:f0:9e:
         9a:8f:e3:bd:06:16:46:65:d0:c0:46:98:44:ba:8c:31:bf:e8:
         2c:1e:ca:b3:c2:7a:ff:70:cf:4e:f7:ed:ad:4d:ed:f6:fe:5c:
         99:f6:c4:aa:94:2d:83:ec:65:2e:e5:f5:a8:d4:41:94:6e:f5:
         f7:d5:ab:95:7a:ce:28:75:24:87:e8:d8:9b:97:f4:61:a0:98:
         1f:80:cd:f0:74:e5:a7:8f:db:34:2e:94:f1:bd:e7:07:fd:e4:
         09:d8:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:11 2025 by rpki-client