Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          7L/M4fMB3gId0AEBYtFsjQUwYiw8jvStgJvEbLEZ7W8=
Subject key identifier:   30:D5:20:D9:B5:7B:4B:47:D7:4D:C9:96:59:D9:06:13:46:DC:46:18
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       01975A5C4C8109A48F7F890A01E93FE5527A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          1293
Signing time:             Tue 10 Jun 2025 15:01:27 +0000
Manifest this update:     Tue 10 Jun 2025 15:01:27 +0000
Manifest next update:     Wed 11 Jun 2025 15:01:27 +0000
Files and hashes:         1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: xjdYKKoh4egY7i2QOyUir/E8+/jVojuNlPvJhz5l1OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5c:4c:81:09:a4:8f:7f:89:0a:01:e9:3f:e5:52:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: Jun 10 15:01:27 2025 GMT
            Not After : Jun 11 15:01:27 2025 GMT
        Subject: CN=30d520d9b57b4b47d74dc99659d9061346dc4618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:b8:3b:5b:74:7a:20:f3:5b:65:ad:0b:23:
                    9a:45:14:dd:06:54:aa:14:3f:d3:eb:8c:c7:97:93:
                    5a:70:cf:e3:08:71:dd:08:99:ba:db:7d:3e:d9:c6:
                    d2:1b:0c:5f:29:e5:79:a3:87:ef:ef:58:4d:79:a0:
                    ca:8d:31:bb:3c:29:55:0b:91:9e:1f:ed:4f:20:ad:
                    3f:2e:31:e9:79:ba:b9:ca:65:93:cc:e4:0d:d9:f9:
                    a1:a8:c7:16:95:73:2c:11:b9:ce:f4:4e:eb:b3:19:
                    3c:c5:ab:87:98:9a:d9:90:c6:ba:7d:fe:d8:b3:05:
                    10:ff:93:a0:74:68:3f:ab:b8:09:da:3c:ec:fa:e0:
                    62:01:07:38:42:ae:04:87:dd:34:f8:b8:de:12:c7:
                    58:27:60:82:87:48:9f:ca:ab:1d:27:a4:f2:79:70:
                    03:c0:c9:1b:95:01:8a:4d:da:b2:49:e3:66:a7:74:
                    bf:cc:b4:2a:2a:14:54:49:81:6a:d8:cc:df:18:33:
                    ae:36:34:83:12:78:b0:ba:b5:44:00:05:68:51:e5:
                    4b:95:00:a0:ca:34:53:0f:56:27:a5:28:ed:fc:2f:
                    eb:f1:d5:2c:df:19:48:20:46:ce:02:a4:42:2f:35:
                    55:df:7b:f6:ea:92:f1:27:1d:0e:88:2a:67:c9:1f:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D5:20:D9:B5:7B:4B:47:D7:4D:C9:96:59:D9:06:13:46:DC:46:18
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:33:6e:49:15:24:93:36:60:11:5c:5e:aa:81:7b:27:e3:e1:
         ee:05:87:94:eb:5c:74:8a:d7:d4:d1:a9:af:f8:70:a1:d5:fa:
         55:da:74:4f:13:fb:a6:28:82:b9:a3:e5:4b:7c:98:f5:ee:3c:
         fc:c1:fe:a0:02:57:34:ff:3d:85:96:75:6e:87:05:ef:7a:2c:
         7b:80:60:0f:3e:29:fe:fc:bf:25:35:17:b1:9a:2f:81:23:74:
         0a:a8:bf:57:78:01:40:76:4f:02:98:73:75:ef:a3:da:4a:37:
         de:44:fb:e8:23:f6:e4:88:80:8e:dd:8e:35:b9:fa:c5:bd:5c:
         ba:c0:19:b5:0b:dd:1d:94:ce:c2:60:3c:dc:fb:54:68:34:3a:
         74:d5:cc:8f:e1:81:6c:db:99:66:55:41:aa:fc:dc:3c:11:b4:
         08:16:d9:55:fc:7e:6d:6f:9f:c9:84:0e:9f:3f:62:57:5f:5b:
         22:93:8f:05:d3:b0:b2:98:a9:cb:72:04:b1:f1:8e:d1:0b:c3:
         a3:ff:b9:c0:e0:cc:49:50:cb:23:12:38:fc:a5:86:2e:21:91:
         24:48:ea:c5:45:27:e1:ae:eb:51:fb:a5:5d:7b:59:c9:6f:94:
         1a:0d:26:72:94:b9:ed:b9:a8:95:e6:a7:42:5e:3a:ce:41:51:
         0e:e3:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 22:51:15 2025 by rpki-client