Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File:                     VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier:          hSJlelRZG9Cc0UKk1kJno7yf3Ify8UNJmvtCFKx7bSw=
Subject key identifier:   27:CA:CD:24:64:71:2E:FC:A1:92:C2:F0:B7:D0:63:4E:27:7B:F5:66
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer:       /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial:       0197488C364C2076F65398D4893D917F79AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number:          0DF7
Signing time:             Sat 07 Jun 2025 04:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:37 +0000
Files and hashes:         1: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: v+3qcvo8K9KeZ0iqUb3tw9TI/KyU2eOnAcok3gdNXaA=)
                          2: t0KxoFR4-v-aF7ApZp5a51UCPdE.roa (hash: wDmBNX7FNw1Byb+j/pduuukElypr1eZvZiRjB9AwIB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:36:4c:20:76:f6:53:98:d4:89:3d:91:7f:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
        Validity
            Not Before: Jun  7 04:00:37 2025 GMT
            Not After : Jun  8 04:00:37 2025 GMT
        Subject: CN=27cacd2464712efca192c2f0b7d0634e277bf566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:98:e0:e4:d4:57:88:1a:54:72:d0:9a:26:
                    c3:d4:48:73:ca:1b:35:c1:60:48:01:16:56:e1:fe:
                    dd:ea:95:99:ec:e1:e5:97:86:af:d0:6e:5d:e0:ef:
                    fb:05:c8:65:ec:2d:b8:cd:c9:b8:17:cd:2a:27:2f:
                    b5:14:0b:0e:c5:cd:56:e0:c3:b8:f3:34:12:fc:2e:
                    1b:a9:d4:4c:14:25:6b:f4:08:43:89:06:f5:fa:0d:
                    d2:f3:78:44:33:e7:b9:a7:93:d7:d2:09:31:02:dc:
                    ed:ce:ba:b2:c2:86:1e:01:64:72:53:38:70:08:8f:
                    5c:f7:12:9d:01:1a:3b:63:ec:4d:29:6f:d9:6b:7b:
                    ca:83:f6:4c:35:83:32:1a:a5:a6:4c:17:3c:7c:9b:
                    a9:88:64:ee:35:88:c3:ec:e4:8b:97:d2:24:58:19:
                    83:0a:41:04:d0:11:42:22:6d:d6:a4:4f:b0:6b:64:
                    40:47:92:31:04:80:2a:43:0f:bf:47:9f:d0:c4:73:
                    57:e5:e0:15:16:ed:ff:0f:82:07:55:49:c6:71:58:
                    16:59:90:d7:25:fc:45:0f:84:1f:5a:b5:c4:6e:3a:
                    44:a5:39:80:45:d2:b7:2c:24:89:12:02:e0:2d:76:
                    e5:2a:11:6f:34:be:f9:5b:a8:0f:27:a5:38:16:89:
                    23:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:CD:24:64:71:2E:FC:A1:92:C2:F0:B7:D0:63:4E:27:7B:F5:66
            X509v3 Authority Key Identifier:
                keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:1b:35:e4:60:6b:68:41:b1:b8:18:ce:8d:c4:38:7a:75:05:
         04:c2:5f:b2:cc:6e:ab:ca:9a:52:be:d8:41:ab:9c:df:b3:fc:
         be:70:0d:e9:ef:63:14:f2:51:72:79:3c:d7:6e:d2:a5:d1:a5:
         45:50:0d:c2:e3:ce:7b:2e:dc:46:9d:18:f4:a0:38:9f:f1:2c:
         79:f7:62:7d:78:f9:7e:15:bf:b1:64:fd:72:07:ce:87:97:c0:
         07:5f:9e:14:f0:2f:ab:c2:76:6d:52:67:5a:d9:55:62:0f:09:
         bf:c0:ca:f5:85:80:1c:80:47:23:0f:b3:a5:76:d6:63:a6:88:
         41:86:df:a0:9a:02:f5:e7:7c:31:33:77:35:e9:2a:b9:2e:35:
         eb:01:cd:83:af:17:9a:94:a0:46:64:7c:62:a2:46:e5:d5:7a:
         e1:a1:81:6f:21:0b:f1:f7:4e:99:97:3b:f6:78:e0:27:a0:a6:
         06:a8:9d:e6:d3:80:8c:e7:65:6b:f6:a7:4e:bf:e9:3c:bb:69:
         27:e2:7f:78:80:51:fc:19:07:d6:83:8c:8b:ed:ee:52:c5:8b:
         ca:64:c9:4b:c4:7e:a0:c2:df:d3:75:92:59:b0:f6:fe:f5:e2:
         24:c9:9b:24:0b:e1:8f:94:12:8f:19:5e:68:7e:f2:41:03:c9:
         8b:69:61:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:35:44 2025 by rpki-client