Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File:                     vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier:          1sINie7va81wBE+xa1mrs+0//G7YTDzyxt+OweHiy7E=
Subject key identifier:   42:F0:9F:95:BF:0B:BD:1C:13:23:DA:79:2A:A7:14:46:96:11:E7:7B
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer:       /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial:       01974E8E33CB3F1B1018B214BF13132DCBB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number:          1452
Signing time:             Sun 08 Jun 2025 08:00:31 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:31 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:31 +0000
Files and hashes:         1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
                          2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: 5Vg8N/fH3joU187ILLReKZJ9rWUKDXDHDf+P7l7IKZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:33:cb:3f:1b:10:18:b2:14:bf:13:13:2d:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
        Validity
            Not Before: Jun  8 08:00:31 2025 GMT
            Not After : Jun  9 08:00:31 2025 GMT
        Subject: CN=42f09f95bf0bbd1c1323da792aa714469611e77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:d7:5a:cd:d2:6b:f2:50:c3:96:24:b6:3e:
                    eb:09:4b:56:d7:c4:b9:62:e2:f1:d3:55:71:bc:28:
                    37:c5:d6:c4:18:f7:81:5b:ec:72:1f:f1:f3:8b:0d:
                    f9:c9:ca:a0:0a:98:0f:13:76:94:ba:00:38:61:03:
                    cd:e1:4a:b5:a2:c1:63:09:22:13:19:12:0f:33:34:
                    0a:f9:19:7a:36:07:78:28:5d:4f:e5:ad:5b:6c:3f:
                    44:a3:72:79:fe:21:38:64:79:98:70:74:09:ac:00:
                    31:73:af:25:5d:04:f3:1e:44:3d:f3:7a:f1:9c:be:
                    72:29:8c:35:bf:fa:88:30:7c:a1:74:7e:d4:8c:05:
                    5c:a6:06:34:bb:73:b6:14:7b:d3:b8:84:5a:5d:1e:
                    40:fe:55:1c:f0:f4:ec:d9:7f:e2:10:45:62:46:21:
                    ed:26:90:d9:39:28:1f:ea:e5:92:21:01:60:67:45:
                    99:4e:e3:35:98:82:67:bb:1d:fa:12:ea:a8:d9:a3:
                    a6:8a:15:45:60:1c:5b:4b:7b:44:60:fa:31:81:d2:
                    6c:f9:a0:49:96:f9:76:1d:38:af:7d:ac:4d:e9:7c:
                    92:a4:21:7f:f4:6d:c3:b3:79:d4:be:1a:c1:2e:41:
                    c2:7b:c9:93:64:58:fc:0e:12:b8:af:e0:19:2e:fa:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F0:9F:95:BF:0B:BD:1C:13:23:DA:79:2A:A7:14:46:96:11:E7:7B
            X509v3 Authority Key Identifier:
                keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:88:5c:ed:ac:56:8b:bb:2b:cf:e1:89:c7:65:0d:78:5e:ed:
         ec:43:2f:44:0f:0b:25:89:67:bd:dd:91:0d:36:f5:1e:91:b7:
         3c:6e:9c:14:12:bc:f8:89:4d:6b:be:ca:52:d5:02:23:32:74:
         49:dc:e0:1d:e1:76:e1:58:41:b9:67:40:0f:4e:95:f2:95:a1:
         b3:bc:d6:ff:9c:b8:13:0f:c6:18:cd:a7:b9:f3:b0:58:6b:d6:
         b8:99:28:6b:c3:ff:2d:19:72:cd:aa:bd:1e:d0:d5:df:3b:95:
         82:53:a6:77:f3:e8:c6:8d:26:da:0c:fd:87:f7:d7:e6:9a:b4:
         ee:c2:3d:f2:92:b6:f5:ff:16:58:80:7b:03:c8:27:56:75:c4:
         60:ea:14:4d:b2:91:8a:c8:21:14:2e:31:14:89:77:23:19:84:
         d6:cd:2c:4d:39:79:17:04:9f:1e:70:f7:d8:4e:d9:9b:1a:6b:
         4a:f1:29:e7:46:dc:98:db:bd:2a:d9:6a:67:8b:01:e0:ab:81:
         6f:53:7c:a0:01:8a:5a:ea:30:68:43:0e:7c:19:48:db:2a:43:
         36:ef:6a:f4:a4:d2:2f:62:63:27:b1:73:b6:8b:9e:fc:49:d6:
         31:ff:e5:7c:d5:db:27:bf:07:a8:5a:a9:1f:67:bf:84:8c:a8:
         1a:72:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:05:43 2025 by rpki-client