Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File:                     vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier:          GN+eAp4SszU4nMsCFFuTIrJE00uJLbqaXnUusvUqLBs=
Subject key identifier:   27:1D:24:58:77:B4:A3:0F:59:11:E8:BF:B3:41:F0:ED:E1:05:10:3A
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer:       /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial:       01976DABE5D888F310EC201704DAAA188C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number:          129D
Signing time:             Sat 14 Jun 2025 09:01:11 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:11 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:11 +0000
Files and hashes:         1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
                          2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: YgXDE0h5wLg/bD2s1jVjza11Ko2ZjAIXWM0gJeXq6oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:e5:d8:88:f3:10:ec:20:17:04:da:aa:18:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
        Validity
            Not Before: Jun 14 09:01:11 2025 GMT
            Not After : Jun 15 09:01:11 2025 GMT
        Subject: CN=271d245877b4a30f5911e8bfb341f0ede105103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:4b:c8:fa:00:eb:4b:95:44:b7:37:13:04:
                    7e:bb:28:af:5c:9e:9a:7a:6b:76:a9:9d:73:48:82:
                    3e:d7:0c:3d:89:ac:57:db:49:fb:73:2e:33:68:3c:
                    52:f7:04:c5:d6:96:d3:6a:cd:50:be:de:58:1d:84:
                    b8:af:d3:1b:e7:b8:5c:f1:5b:6d:ef:26:d1:8d:4e:
                    d5:f7:ab:51:eb:c7:bb:6f:1c:0b:25:25:b4:ef:98:
                    f8:a9:ba:b2:fb:1c:a3:1a:24:d8:15:8e:f3:c8:6b:
                    19:c0:fc:cc:2e:aa:d2:04:23:ea:e5:e1:a2:72:81:
                    6d:ed:c4:a5:19:8b:38:56:48:1f:c3:87:4e:50:19:
                    49:e5:2b:53:58:ea:b2:7f:44:0a:b3:16:f3:86:89:
                    e8:99:71:1f:85:d0:c3:27:2a:b0:4e:a8:17:9a:7e:
                    63:a8:87:2e:04:e2:7d:ae:c8:8f:73:21:e9:de:3e:
                    8d:06:19:d0:8c:90:f0:c4:18:55:28:1d:c9:f8:02:
                    74:5e:df:00:27:05:94:8d:d7:21:ad:43:85:f1:dc:
                    35:af:48:d8:8f:b0:11:59:22:45:a6:99:b2:1d:a3:
                    73:b7:38:22:f4:2f:9b:f8:d3:be:81:5e:d4:56:92:
                    bb:f1:ff:3e:63:cb:f0:25:dd:89:00:a8:7f:11:9d:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1D:24:58:77:B4:A3:0F:59:11:E8:BF:B3:41:F0:ED:E1:05:10:3A
            X509v3 Authority Key Identifier:
                keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:46:a7:b5:e0:5d:f2:b5:94:38:7e:a4:58:92:58:6a:05:d9:
         6a:6a:fc:ab:d4:e3:db:22:a4:85:b4:1e:50:36:00:52:aa:78:
         01:0c:47:c9:e7:9e:bc:f0:8a:3c:06:14:1d:0b:5d:c6:75:b9:
         e6:80:30:2c:b7:d6:f2:04:ff:d5:27:67:d1:62:b1:14:02:cc:
         30:cd:22:32:ed:c0:6b:61:f2:e8:ae:6c:f1:e6:87:16:9b:dc:
         8e:5d:98:ee:19:68:69:7c:82:df:9a:be:08:74:ab:a7:36:ac:
         bb:6e:c3:05:19:10:28:d6:1c:40:a8:82:6a:10:1d:fa:69:38:
         98:86:ad:3e:5a:85:3a:f8:f0:9b:16:a7:e2:d0:90:44:b8:37:
         a9:49:21:46:97:78:a8:e6:cd:b5:f1:31:b1:42:5f:f7:cd:98:
         df:c0:db:ea:fa:95:96:3e:36:0f:6c:da:56:3b:cd:45:db:9e:
         49:90:5e:3b:37:c5:48:d9:32:f8:17:a0:1f:38:ce:0f:b4:f9:
         9d:06:a3:d4:ba:de:3a:2f:cd:5e:89:14:da:67:58:62:ca:77:
         20:8e:57:66:47:46:49:22:b8:ab:17:eb:19:4a:08:34:a7:d0:
         4c:1d:0d:1c:b9:f3:f2:9e:7e:51:dd:2d:99:d7:0c:a7:d3:32:
         6f:49:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:28:49 2025 by rpki-client