Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          m9b9qsL24NmXY1RKJQWFkPDbJ90fmz1ysYr6Ha8Gtgw=
Subject key identifier:   A3:7C:8F:22:EE:27:9F:31:E1:48:7B:5E:5E:A8:22:95:99:F9:D3:C9
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       0197654CD7871F216E967C32A48E7ADCDCBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          098C
Signing time:             Thu 12 Jun 2025 18:00:24 +0000
Manifest this update:     Thu 12 Jun 2025 18:00:24 +0000
Manifest next update:     Fri 13 Jun 2025 18:00:24 +0000
Files and hashes:         1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
                          2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
                          3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: h55WEkTFrlRD61H0WrsWfol8dO2d88v+rVGeQJXqVUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:4c:d7:87:1f:21:6e:96:7c:32:a4:8e:7a:dc:dc:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Jun 12 18:00:24 2025 GMT
            Not After : Jun 13 18:00:24 2025 GMT
        Subject: CN=a37c8f22ee279f31e1487b5e5ea8229599f9d3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:8c:d1:22:e8:57:f0:6c:fb:0f:5d:30:d5:
                    cc:f3:d7:1a:ce:b5:f7:cb:fa:94:86:c4:45:1e:c7:
                    f3:a9:51:ca:cf:58:91:70:ed:38:d0:0f:2c:23:97:
                    79:ea:63:f9:20:ef:81:2d:90:89:7c:82:43:8d:b6:
                    72:c4:51:fb:e9:b1:66:b9:51:2d:31:73:eb:0f:1d:
                    85:86:51:64:29:d4:63:ac:f8:74:51:41:f4:77:66:
                    ec:f1:9a:83:e3:4f:66:8d:1b:c2:97:75:aa:27:c9:
                    e9:ab:a0:04:d6:b2:f7:ac:bf:4f:58:69:8e:83:16:
                    87:55:e5:76:34:c2:57:f8:e2:0f:95:52:68:db:57:
                    a2:5a:3e:bb:81:34:02:23:62:92:92:4d:96:65:89:
                    41:a5:4a:d8:78:40:c7:18:fa:fa:4a:1a:66:bc:57:
                    c6:36:a7:3d:20:63:14:ed:81:67:df:10:cd:89:fa:
                    e0:5e:dd:93:11:64:e4:13:81:67:1c:69:0d:f0:4c:
                    68:64:05:42:0e:b3:9d:d0:ab:88:b0:fe:e9:72:46:
                    41:82:48:67:d4:a9:de:ae:0a:64:fa:e9:a4:e6:4e:
                    72:41:11:53:c7:4a:a6:20:a2:db:62:59:62:28:5e:
                    53:56:5b:40:ed:3e:87:cf:71:04:88:ac:45:dc:cd:
                    95:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7C:8F:22:EE:27:9F:31:E1:48:7B:5E:5E:A8:22:95:99:F9:D3:C9
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:54:33:cf:78:57:1b:cf:93:16:13:08:ce:7b:29:e8:91:8a:
         09:f4:5a:be:f4:aa:4a:ec:7a:12:61:55:6e:68:bc:c1:36:b0:
         8e:69:2e:7f:b6:44:14:5a:63:c2:f1:b5:02:29:a7:2c:b7:22:
         93:08:a4:2f:30:a7:90:d7:4b:bc:20:6c:83:0c:d2:3a:33:b5:
         91:ad:42:87:5a:ac:d9:a8:84:fc:50:0e:cd:66:4d:f5:ef:18:
         61:d6:03:d5:51:22:83:99:c1:d1:26:ac:ba:47:b2:4d:aa:af:
         47:2f:09:a9:0d:16:fc:13:af:62:10:50:ea:08:21:0c:08:fb:
         c6:27:93:9e:4e:5e:10:07:b9:7b:77:fc:db:b4:d7:bc:93:ba:
         1e:84:c3:4c:d7:4d:2e:8f:5b:6d:00:c9:8a:b5:c2:fc:27:1b:
         89:13:c1:3e:40:40:bd:c8:b4:fa:9e:e1:70:ba:cb:7a:2c:a8:
         d4:fd:47:8d:ec:fe:4b:67:4c:d1:20:12:5a:09:ab:e1:21:da:
         f3:6a:5d:17:31:df:44:0b:56:e4:b0:3b:3f:a2:3b:d2:ad:43:
         96:bd:ed:b3:e6:d3:31:7c:fc:31:9b:55:ec:2d:21:78:0d:57:
         2b:95:f3:dd:93:0d:70:0d:b1:4e:a5:8d:34:2f:a2:65:dc:20:
         02:45:84:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:32:50 2025 by rpki-client