Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
File:                     vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json)
Hash identifier:          yzPrQty+T8bfCVSVqH8N4AikH+j94yOkgOirm4k+PFA=
Subject key identifier:   E7:20:16:5E:A2:23:D8:3E:8B:E9:5B:76:E2:CB:9F:6D:54:41:1F:4B
Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63
Certificate issuer:       /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
Certificate serial:       019760CB6D16AB16DBB4D2F2A7F3996FDE1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
Manifest number:          0804
Signing time:             Wed 11 Jun 2025 21:00:33 +0000
Manifest this update:     Wed 11 Jun 2025 21:00:33 +0000
Manifest next update:     Thu 12 Jun 2025 21:00:33 +0000
Files and hashes:         1: 2ea_Ght-OBVvtgKuaEhUjFGnCIo.roa (hash: dArjpyisxrgvkT5h9NbQ4Zg16ShXRNvAx7t0mMervEs=)
                          2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: gDtWAHKdDgwh6nZkCf9TAQRIA8IQvqCu1FrDqFnNYFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:cb:6d:16:ab:16:db:b4:d2:f2:a7:f3:99:6f:de:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63
        Validity
            Not Before: Jun 11 21:00:33 2025 GMT
            Not After : Jun 12 21:00:33 2025 GMT
        Subject: CN=e720165ea223d83e8be95b76e2cb9f6d54411f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:b1:f0:8f:da:8d:ea:16:da:1c:2f:5f:4d:
                    ac:4b:04:5e:e4:ca:42:8e:5b:0a:0c:e6:b0:a6:27:
                    f1:d8:1d:3c:6a:38:ca:e5:d6:d0:f2:6f:ac:e6:41:
                    26:32:5e:73:9a:99:74:9e:03:8a:46:74:9a:a6:9f:
                    f5:2f:1a:b7:01:9f:23:7b:c3:e4:d0:a0:11:23:bb:
                    41:fc:67:88:5a:5d:24:ea:60:a4:56:fc:ba:86:7a:
                    b2:9f:cf:3f:17:7b:30:98:01:b5:f2:3d:5b:fb:32:
                    54:9f:37:cf:2d:86:aa:d7:88:71:fb:02:eb:c7:04:
                    54:86:0b:cb:f9:56:91:05:d3:0a:77:b2:5c:ed:36:
                    ca:de:3c:50:f8:c0:4c:39:b3:99:e6:37:2a:56:8e:
                    0e:aa:a7:99:3d:79:bd:bb:eb:78:86:38:af:91:b9:
                    83:ce:0e:dd:df:ae:59:24:84:53:8c:28:a7:52:b6:
                    c6:93:60:ca:fe:f0:1c:41:bf:3d:e1:e6:38:d6:39:
                    b6:a1:6e:d5:80:9c:ce:10:6e:c9:ef:e0:8a:fb:89:
                    56:96:9e:53:3f:62:45:3a:c9:6d:0c:cd:a0:67:59:
                    db:43:dc:9e:57:f5:e8:16:fb:a0:43:ca:51:d8:8b:
                    62:48:72:7c:fa:27:e8:74:af:69:7a:68:eb:a4:fa:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:20:16:5E:A2:23:D8:3E:8B:E9:5B:76:E2:CB:9F:6D:54:41:1F:4B
            X509v3 Authority Key Identifier:
                keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0e:f6:85:df:5c:2f:54:b7:5b:fa:22:ea:27:bd:7c:bb:70:
         be:d3:e3:d6:ab:09:19:5e:8e:ee:5f:62:85:c3:dc:a5:47:31:
         18:23:c2:da:cd:4c:af:2b:e2:c3:27:91:d3:e5:bc:25:63:59:
         69:fb:c7:14:df:67:79:e2:43:b1:59:54:9b:da:b8:4c:23:a5:
         79:ca:73:4b:e3:48:d0:c4:3f:7f:e2:49:3b:53:9c:11:ee:08:
         ff:c8:b5:79:ec:11:8e:eb:34:52:0f:a3:ea:d5:56:6a:5e:4f:
         02:5a:d3:fa:12:73:a3:76:5e:df:99:a6:2b:6a:9f:73:71:c5:
         e0:00:91:90:10:42:c2:4b:fd:ab:1a:2a:16:9a:07:ae:9b:d6:
         5b:23:24:de:39:13:15:81:24:5c:ab:dd:cb:c2:4b:5d:a2:a1:
         f4:80:8e:ab:d5:aa:89:fd:29:8e:56:15:fb:d0:22:7a:06:51:
         41:35:12:f8:86:21:96:bd:c1:88:72:e3:ab:64:7c:4d:6d:23:
         96:c3:40:e2:00:ea:56:50:68:39:4b:35:b7:9e:e6:0c:ff:df:
         2e:cf:0a:3c:a1:24:3c:14:9c:b8:a7:d4:ab:3f:f0:96:2d:cc:
         2e:ec:02:52:6b:6f:b9:a8:6d:3a:fa:fd:80:a3:52:f3:c6:c9:
         6b:19:a3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:17:48 2025 by rpki-client