Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File:                     vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier:          GfHV9pcnlhjWc0zm04cYyO28oJV30kA4EBIXJ/8tz4I=
Subject key identifier:   80:30:45:F5:B4:1B:88:BB:33:5A:A2:87:D7:D4:B0:56:33:77:7B:3F
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer:       /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial:       01974C31F54B1788F13149032AC2978CAB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number:          08A8
Signing time:             Sat 07 Jun 2025 21:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:31 +0000
Files and hashes:         1: qUq_q62qYu3qxVOMe_F0xihpmUw.roa (hash: SovqRJc4ePvthgrrsQXCalBtYnWMU+TdM7o0xgmwIiE=)
                          2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: /8kcqIwDzPwujwzEjhjHi3e9S4X0GeqxAwhKs6XniTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:f5:4b:17:88:f1:31:49:03:2a:c2:97:8c:ab:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
        Validity
            Not Before: Jun  7 21:00:31 2025 GMT
            Not After : Jun  8 21:00:31 2025 GMT
        Subject: CN=803045f5b41b88bb335aa287d7d4b05633777b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:f1:52:92:9a:6b:9f:22:bc:4a:f4:df:52:
                    23:87:58:b4:3c:89:67:bc:ef:5f:dc:a7:b2:2a:b4:
                    c9:fe:07:d1:75:d3:12:63:c3:84:10:43:aa:63:a2:
                    e8:9b:55:2d:51:d4:61:f5:3d:cd:df:52:bf:ed:8d:
                    48:9c:1b:df:83:43:c6:c3:20:43:2a:8a:17:ca:96:
                    9b:52:7d:17:58:ba:29:96:c9:c6:cb:a6:76:fd:73:
                    33:29:25:12:c7:47:4a:d6:de:5b:76:a3:65:04:44:
                    ee:d8:be:ce:ca:d6:f5:a5:5b:eb:a4:b7:44:8d:a5:
                    b6:91:27:8b:1d:27:0a:a0:29:88:e7:37:55:2d:01:
                    9d:68:37:4f:ad:f2:c0:8c:70:26:56:17:e4:70:ff:
                    86:d5:89:bf:7b:54:10:8c:41:c7:e2:6b:a6:dd:de:
                    f0:ea:b1:90:a5:d9:50:24:41:e8:e2:ae:28:0b:74:
                    c7:14:66:38:54:aa:c8:11:66:af:82:c4:16:88:bb:
                    b5:9f:81:0d:b3:8c:53:89:b2:0d:44:76:f8:0c:00:
                    af:6d:65:1e:cd:b9:fa:a7:e9:ea:0c:af:97:81:ba:
                    14:44:f2:f3:6b:09:eb:6e:0e:d2:56:2b:bf:fe:5f:
                    c9:fa:72:81:4d:53:50:85:df:94:95:07:f6:d2:b3:
                    92:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:30:45:F5:B4:1B:88:BB:33:5A:A2:87:D7:D4:B0:56:33:77:7B:3F
            X509v3 Authority Key Identifier:
                keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:41:9b:81:1e:2a:2b:3d:8d:78:ad:ba:7f:dc:0a:13:0b:
         4f:90:21:79:f5:65:a4:29:7d:06:f5:e7:13:fd:bc:da:fb:52:
         f0:94:63:b8:46:5a:7b:2c:3e:56:b0:27:65:3b:fc:0f:71:87:
         de:7a:8b:66:d7:38:7b:0b:98:7d:3f:ed:cf:0a:67:23:7c:a2:
         b7:9c:4a:2c:e7:3b:aa:34:61:d0:7b:ce:f4:4c:6e:66:f4:fb:
         0c:84:a2:32:ae:a5:69:ce:26:9b:09:50:ed:5c:1f:74:0d:3a:
         dc:ab:b8:13:f5:2c:0e:44:21:eb:cf:5d:6f:1c:a9:1a:39:0e:
         a0:a3:23:89:94:9b:6f:18:73:34:66:af:84:08:8e:f1:02:42:
         de:98:c3:b1:f0:e1:02:c0:11:71:e1:f3:8b:f2:38:6e:20:99:
         db:10:aa:b9:59:15:35:c8:99:7b:00:62:e1:1b:d7:82:ed:a9:
         97:68:fd:1d:a0:71:fe:f5:52:4a:85:c6:01:77:0e:13:5b:2d:
         ec:a9:6c:6d:e8:bd:be:17:8c:72:5e:92:9b:97:da:fd:9a:99:
         5c:76:78:73:0f:c1:0e:81:06:9e:85:10:35:bc:e5:e7:31:7a:
         00:b0:03:5e:11:87:64:78:db:bd:bb:64:b3:e0:90:83:bc:7b:
         8c:f3:17:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:40:08 2025 by rpki-client