Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          8NDZ9eMLm+/7mYJjm0FknvV4f1zwvlQu9l9PxOlnbbc=
Subject key identifier:   83:1C:41:B9:A1:C6:6D:45:78:F4:1B:ED:04:C5:F0:4F:7F:E0:DE:33
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       01974666B80F5758AD1A09B3D0659FAA6140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          30
Signing time:             Fri 06 Jun 2025 18:00:26 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:26 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:26 +0000
Files and hashes:         1: SbG-TfF_crHX7bjktc6Jm6Mw08k.roa (hash: cILCavbni7VMAY2NB/vg63OOb75/V8DMaIDv6gy9of0=)
                          2: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: 6/RNaK3bM8QVpqcMSycUWlAAlIhLRwS+Y508M7M04A4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:b8:0f:57:58:ad:1a:09:b3:d0:65:9f:aa:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Jun  6 18:00:26 2025 GMT
            Not After : Jun  7 18:00:26 2025 GMT
        Subject: CN=831c41b9a1c66d4578f41bed04c5f04f7fe0de33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:4c:fa:e5:1b:d6:4c:29:ee:a4:0d:15:3c:
                    01:61:93:9c:26:10:a0:a0:74:d8:1a:ec:42:fc:53:
                    29:d4:5e:e7:a2:11:bf:f3:c2:8e:a6:00:8a:86:89:
                    a6:01:6f:65:57:89:1d:cc:70:70:6d:e0:00:c8:76:
                    ae:72:a1:e0:f3:ad:a9:5f:65:44:cd:b0:c0:dd:71:
                    06:be:cc:84:57:c8:29:9a:8c:6c:a5:5d:c3:64:14:
                    64:ac:4c:08:ec:17:44:a8:e3:e7:62:b3:97:6c:1c:
                    fb:86:14:b0:9c:1a:9a:9a:f8:71:58:97:d7:11:96:
                    c5:38:13:c0:40:06:51:20:6b:f2:2b:49:bf:59:1e:
                    e7:9c:2e:65:e7:59:db:35:7a:eb:6c:ef:9f:15:51:
                    ab:ed:0e:ec:e9:0a:31:3b:a9:c9:19:b2:a0:db:34:
                    f7:dc:8d:c8:63:65:b4:b3:ed:b3:70:c5:14:a1:2d:
                    7a:57:55:93:ac:20:a2:9f:79:38:17:22:c1:76:19:
                    fa:3e:03:50:4c:01:e0:58:2c:c4:39:e5:0d:81:c6:
                    6f:30:55:89:6c:0e:96:fe:f8:23:4f:c8:35:9c:04:
                    4f:ba:bf:32:76:ef:9e:0f:8a:e8:62:04:eb:b3:2a:
                    05:ea:06:bd:4e:aa:c4:e7:32:74:ef:28:00:ed:a0:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1C:41:B9:A1:C6:6D:45:78:F4:1B:ED:04:C5:F0:4F:7F:E0:DE:33
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:57:ac:cd:94:35:28:10:95:83:fb:b2:25:ee:0c:ed:dc:d9:
         99:6c:d2:d1:b9:b1:1f:4f:5f:8d:b4:7f:b7:9b:e3:b6:99:0c:
         f3:7f:1a:ce:f3:d2:4e:81:1d:cb:ce:8d:41:34:be:f0:af:5f:
         3d:e7:5a:30:c8:1a:56:ee:62:c4:b7:4e:4b:22:55:e4:60:e4:
         f8:6e:17:4e:69:57:13:9e:45:41:c1:4c:9d:7b:51:10:a5:f0:
         87:10:b2:4f:b9:68:64:c9:cf:a1:fb:28:5c:50:36:f9:cc:03:
         dc:79:c2:bc:40:e5:07:a3:63:41:32:b0:9e:e7:bc:0d:a2:87:
         48:66:5d:bf:fd:a7:bb:ae:b6:76:f8:b7:5e:f1:6b:8d:e0:95:
         76:1a:73:43:5d:a5:d1:90:56:42:92:2a:b5:4a:3f:50:e0:88:
         ba:52:77:7f:ba:4c:0c:7a:dd:56:27:cf:34:2a:63:3a:2d:32:
         f0:bc:21:ad:df:dd:02:e2:d4:40:4d:4d:2b:a6:71:e2:26:c4:
         cb:cd:ea:e4:90:59:4b:40:90:8c:d6:92:fc:a3:14:ee:86:20:
         0d:a7:51:13:ab:d9:94:1e:1e:2c:50:a8:24:34:a1:14:82:ab:
         69:45:cd:cd:f7:54:5e:48:ad:b8:01:0f:2d:0d:9a:db:fb:e8:
         6f:c7:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:02:19 2025 by rpki-client