Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          Rfx4l1oy1ciX8o4qXdkuypTn38tXi5gnxDdt5LIFdu8=
Subject key identifier:   2F:F7:A2:B2:FD:8D:F2:AC:5C:38:C0:B2:A9:B2:A3:EA:39:58:8B:93
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       019748F9ECBA1EDCA79D7A3D7EF5D91761FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          091F
Signing time:             Sat 07 Jun 2025 06:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:27 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: MbF9IKKpNPxqmw4kj4jUTF2Om8UpuN8rFY6y01gjPZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:ec:ba:1e:dc:a7:9d:7a:3d:7e:f5:d9:17:61:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Jun  7 06:00:27 2025 GMT
            Not After : Jun  8 06:00:27 2025 GMT
        Subject: CN=2ff7a2b2fd8df2ac5c38c0b2a9b2a3ea39588b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:83:8f:54:0d:d8:01:74:9a:e0:21:d4:f9:
                    66:8e:49:ad:19:aa:3a:06:fe:b5:8a:74:ce:ee:ee:
                    7d:a1:bd:54:2d:8d:55:0c:e9:ba:a8:85:ba:62:43:
                    fa:59:c9:13:5e:31:81:a6:03:a4:9b:58:6f:68:8b:
                    10:ef:e6:2e:ec:eb:47:70:db:49:3c:a4:69:b3:96:
                    3d:8c:b6:15:86:1d:e0:f3:2b:4b:3e:2a:27:4e:7c:
                    56:c4:1e:7e:6d:4d:7a:c0:63:41:ca:a9:d3:5f:3e:
                    e0:dd:fc:74:53:68:6a:2d:de:fa:66:8b:8e:3a:97:
                    c4:dd:e4:f8:4c:fe:a5:0b:62:1d:45:d7:88:2d:74:
                    33:f3:b3:45:97:08:e9:37:58:f4:29:d2:92:3d:88:
                    3b:81:d4:69:89:d5:37:90:f8:2a:7f:c2:db:e9:16:
                    ef:70:c0:97:9f:d7:a2:0d:e4:62:fd:2e:e3:08:0e:
                    17:63:fc:da:a1:ee:4a:5e:7b:71:92:24:62:fb:9f:
                    42:d0:a0:cd:fa:d7:99:36:7e:45:ba:c9:3d:e5:b7:
                    dc:61:fd:60:11:b3:2c:f5:e1:8d:22:d5:56:e6:16:
                    8a:dd:5d:8b:20:41:1c:80:91:2b:a3:77:b5:df:e4:
                    bf:c8:91:a1:dc:62:54:39:df:5d:41:06:0c:5d:6b:
                    14:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F7:A2:B2:FD:8D:F2:AC:5C:38:C0:B2:A9:B2:A3:EA:39:58:8B:93
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:fb:e3:34:77:4c:7a:a4:d3:a6:23:c7:70:19:93:9f:96:34:
         59:ac:8d:8b:92:81:7f:dd:e2:b3:db:11:42:d5:c0:75:27:15:
         b4:29:0e:50:b0:85:d2:55:cc:35:b7:c8:ca:b7:58:32:3f:f8:
         f0:75:b1:bb:b3:df:70:3f:32:65:be:fe:0c:09:95:0d:67:c7:
         bf:13:35:48:5f:97:86:dd:68:e4:8a:c0:5c:83:e1:8c:fd:ea:
         26:19:be:27:a2:9e:74:16:95:37:4f:c1:fa:32:91:ff:97:94:
         33:b1:c0:db:61:92:83:c8:b5:9e:c5:b2:65:eb:87:0b:c6:23:
         63:9a:7a:94:36:61:91:c3:cd:65:1e:42:bc:9b:f2:03:53:e1:
         4c:b9:2f:a3:0f:a4:c7:f4:d3:32:6b:bd:66:2d:07:9c:2b:05:
         91:a8:7d:a0:d2:38:1b:47:88:f3:18:d5:7f:be:27:84:fc:89:
         51:04:5b:5e:56:71:1b:2e:25:a8:c3:84:cf:1b:a3:7f:e8:4b:
         db:03:9e:04:f5:f3:31:61:60:5a:a0:c7:d2:23:a3:ad:a1:4e:
         ec:e5:ea:a9:50:0a:4b:1f:f6:8f:d2:3c:6d:5e:42:b7:c2:16:
         a1:7a:2c:7e:21:c9:5c:2a:d1:1a:15:d1:cb:18:e2:54:11:d2:
         01:64:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:30 2025 by rpki-client