Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
File:                     Vk6tOAljA7xLah8rAuG5G-SEkUY.mft (raw, json)
Hash identifier:          rD5hmMAclL94xVbhfEEpKuN8Sf7Fz/MjbKIKDoerhdM=
Subject key identifier:   8C:71:1F:53:CB:30:39:5F:8A:48:99:63:3F:46:8F:A8:FB:EB:B5:1F
Authority key identifier: 56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46
Certificate issuer:       /CN=564ead38096303bc4b6a1f2b02e1b91be4849146
Certificate serial:       0197586D60B79C29DE17F20CBCB5A51E50DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
Manifest number:          0ACB
Signing time:             Tue 10 Jun 2025 06:00:52 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:52 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:52 +0000
Files and hashes:         1: Q1FzunJJgm72n4cjnOFriVc18KU.roa (hash: 9QqXBfYauaWBi+EvcV0793mlb9DkJUiHomWOWZ5zJGk=)
                          2: Vk6tOAljA7xLah8rAuG5G-SEkUY.crl (hash: 4ErmXoLhDhpK4pF1PwcbrOAv2sEpr3HIMMZxJYwnrbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:60:b7:9c:29:de:17:f2:0c:bc:b5:a5:1e:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564ead38096303bc4b6a1f2b02e1b91be4849146
        Validity
            Not Before: Jun 10 06:00:52 2025 GMT
            Not After : Jun 11 06:00:52 2025 GMT
        Subject: CN=8c711f53cb30395f8a4899633f468fa8fbebb51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:6b:95:22:19:ee:40:17:3c:22:54:00:76:
                    2d:8b:d0:3a:68:78:47:c3:1e:ad:b3:9e:4f:cd:f4:
                    a2:1e:6c:dd:58:4d:78:c2:f8:99:08:a5:d0:f7:bf:
                    c4:a7:7b:63:14:24:c6:ce:92:c7:4e:c8:84:bc:e0:
                    ed:58:b0:4f:dc:1c:1d:6c:f1:a2:9c:7c:71:1e:c1:
                    32:96:1c:67:56:6a:58:40:a0:79:27:82:a1:c6:f9:
                    a5:e4:c0:c9:3e:21:44:d3:cb:34:8a:02:10:e9:40:
                    ab:c9:9c:78:3d:27:b9:8c:c6:b8:cb:5e:70:31:b4:
                    1e:d8:c7:55:ab:56:69:44:52:9c:7c:bc:7e:7a:fb:
                    37:ce:9b:06:2a:f4:fb:73:c9:97:30:5f:2e:fc:75:
                    b9:eb:91:01:fd:36:64:62:3a:78:9f:11:61:b8:ba:
                    8e:30:ef:d4:9b:a8:7f:92:b4:13:d2:fc:4b:77:19:
                    a1:e8:ba:04:6b:bd:a4:00:1d:b7:29:d3:73:ff:1b:
                    8c:4c:71:f2:dc:21:d6:bd:de:ec:cc:aa:e1:c0:22:
                    ca:d0:b0:39:5e:d8:fd:4c:ec:70:d3:2b:e3:43:9a:
                    4a:ab:56:a4:26:bc:25:a6:73:51:27:97:8b:2d:59:
                    a6:ab:f4:fe:d4:5e:64:ae:58:b4:08:ba:f6:87:33:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:71:1F:53:CB:30:39:5F:8A:48:99:63:3F:46:8F:A8:FB:EB:B5:1F
            X509v3 Authority Key Identifier:
                keyid:56:4E:AD:38:09:63:03:BC:4B:6A:1F:2B:02:E1:B9:1B:E4:84:91:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vk6tOAljA7xLah8rAuG5G-SEkUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1425a6-1863-42a0-8323-3c72967ff7c1/1/Vk6tOAljA7xLah8rAuG5G-SEkUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b1:8d:a7:ff:b0:62:c8:0b:c8:4f:f2:d2:12:08:28:4a:a2:
         19:0c:b8:c3:7a:c7:3b:80:88:60:15:d3:a2:58:fc:01:02:57:
         43:36:e5:4e:78:50:c1:f2:be:ed:c6:cf:2e:48:91:0e:e8:e8:
         f8:6a:a6:af:51:f2:7b:2b:3d:90:e1:d0:20:22:4e:6b:5b:e9:
         cd:1f:9b:b4:34:da:d9:0a:3a:41:a3:52:eb:e5:ba:54:08:a7:
         82:db:a7:9f:17:27:eb:d4:9d:0d:48:3c:fd:14:8c:64:13:0a:
         fb:a1:20:6d:a7:da:05:a9:dd:c1:7d:bc:df:34:89:76:4b:24:
         ac:2b:cc:95:a5:3f:e1:ca:25:11:5b:db:21:e9:41:f6:cb:5b:
         88:96:41:32:34:d4:a8:9a:b0:ea:8b:ee:cc:a7:23:bc:33:5c:
         82:c4:12:5e:d2:49:d4:c1:f0:f6:0b:ef:74:8d:fa:e9:7c:e1:
         34:56:13:f8:49:02:54:40:da:56:eb:46:d7:cf:5d:17:80:68:
         ac:a6:12:e8:f8:00:1a:0a:31:77:f6:a3:81:60:ef:98:13:0c:
         85:65:48:24:82:e5:36:3a:9d:a8:e1:4e:de:53:35:bf:cd:5d:
         22:75:70:b9:92:11:fb:45:67:c9:4a:47:16:a6:c4:86:73:95:
         46:87:a6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:00:38 2025 by rpki-client