Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
File:                     VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json)
Hash identifier:          1MXYy0ChKKp4WFI/sRhe4emaJNP41GEhzoN1oUAUsEE=
Subject key identifier:   03:5E:A8:E8:F2:13:00:B7:3D:55:CC:F6:CA:44:00:94:1B:EA:A5:B1
Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00
Certificate issuer:       /CN=5448a5c5c577b53cc298af0443edd4352e1b1300
Certificate serial:       01975121FD1CA14E8EB30663AF7A6E52DCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
Manifest number:          93
Signing time:             Sun 08 Jun 2025 20:01:11 +0000
Manifest this update:     Sun 08 Jun 2025 20:01:11 +0000
Manifest next update:     Mon 09 Jun 2025 20:01:11 +0000
Files and hashes:         1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: lVMhH+RO744Zi4eoXuyyRdgiZlVJWgIH11sj50PdwpY=)
                          2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:fd:1c:a1:4e:8e:b3:06:63:af:7a:6e:52:dc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300
        Validity
            Not Before: Jun  8 20:01:11 2025 GMT
            Not After : Jun  9 20:01:11 2025 GMT
        Subject: CN=035ea8e8f21300b73d55ccf6ca4400941beaa5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:16:66:8d:f9:b9:3b:91:0f:42:4f:ce:bf:ee:
                    6f:69:34:ab:6d:09:c7:42:25:59:0f:17:7f:10:41:
                    14:7d:c7:59:93:10:98:40:ab:c3:16:81:34:33:07:
                    57:b2:bc:d3:de:75:91:ed:d4:32:d6:05:2f:68:fb:
                    d6:47:e9:f0:e0:fd:43:63:3f:1d:30:49:b7:fd:65:
                    e3:d6:88:49:03:d2:02:89:85:ab:b8:1a:57:2e:4f:
                    2e:89:33:ee:90:6c:99:ed:bc:2c:29:af:c0:e7:54:
                    0c:7a:48:ce:59:a2:e9:d2:42:59:38:71:cd:bf:3e:
                    7a:18:20:3b:9b:63:85:27:74:ff:30:d4:6a:f0:13:
                    d6:f8:8f:52:96:45:2b:4a:d3:d0:5e:d8:8c:36:89:
                    1e:a7:00:a4:84:26:88:5c:50:7b:15:9a:85:f1:fe:
                    79:04:da:84:25:68:59:44:98:a9:74:bb:a8:ff:ae:
                    bf:25:6a:df:10:bc:67:61:6b:34:b1:2a:e4:fd:91:
                    96:30:7d:0c:e4:df:88:cb:f6:f3:2d:88:db:9f:21:
                    3a:6b:41:72:3d:ad:08:ba:7a:5c:90:c7:73:00:5f:
                    ee:12:41:b0:50:6f:32:dd:75:b3:d6:8c:4d:f3:01:
                    bc:f6:b3:24:70:a4:8d:2a:fc:2c:9f:1e:3a:12:98:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:A8:E8:F2:13:00:B7:3D:55:CC:F6:CA:44:00:94:1B:EA:A5:B1
            X509v3 Authority Key Identifier:
                keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0a:f4:90:b1:c0:a8:86:85:85:04:0f:e9:d4:ec:6c:c9:71:
         d0:ba:8d:a9:dd:74:97:18:48:7e:63:2b:32:55:41:d8:0f:8f:
         16:8b:7a:b2:9b:a1:ac:26:9e:89:6d:d5:46:8a:74:1c:e3:f5:
         e1:e9:15:3b:a4:42:bb:14:3c:b9:9a:5d:23:a8:ce:20:03:04:
         69:af:45:6a:c2:4e:a8:78:e4:7d:db:08:bd:12:5e:df:78:7e:
         32:88:ac:60:59:c1:b6:2a:68:c8:2f:ae:53:fb:5a:ea:82:70:
         72:3f:87:91:31:7d:0e:f0:20:0f:dc:15:ba:a6:3a:37:e1:79:
         06:55:b7:b2:9b:60:04:c5:29:73:88:eb:ce:18:a7:ed:46:eb:
         94:69:d6:63:39:59:85:8e:3f:4b:7a:e0:3a:86:34:c6:f1:9d:
         47:a8:75:a6:3c:60:1f:f2:d1:64:48:5d:e7:5a:ee:19:55:60:
         3d:ea:1c:ac:06:55:49:4c:ec:10:2a:e9:4f:1a:8e:31:7e:2d:
         bf:69:b8:8c:94:f6:ba:0a:4b:8c:7a:32:f0:f2:9b:96:5d:19:
         22:5b:ad:76:34:d9:ca:f0:15:c9:7d:79:89:13:6b:c3:a0:19:
         7c:ec:26:fb:48:c6:6d:a3:0c:1a:86:a2:be:b7:0f:3c:65:65:
         a4:49:32:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:15:12 2025 by rpki-client