Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          xEcQeSaZ01Zbxy6coTICE64mHry8qhyx2KitNb3PHzo=
Subject key identifier:   96:01:9F:5E:0D:CC:BB:C0:5B:91:3B:95:94:CE:6B:5D:CD:96:96:FD
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       01974D7BE3C4744EA5E50F28C0964700126A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          0A8E
Signing time:             Sun 08 Jun 2025 03:00:54 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:54 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:54 +0000
Files and hashes:         1: SrhfJHBsfsA2F03iSkeDj0KkWBo.roa (hash: ZCmzC7jbJzsmmMmzK1x2r8LBwOtdciNv7TVckprjztk=)
                          2: UrYvXCcNXNPJ1RmX3YCpR8Tvkgo.roa (hash: pwVMcZbHdXZg2qukPDU7fxmUV6llG0xJyz4E+P0eq2M=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: y7EqY9ybSFySl6CIl1lqEjnZ9TfJgtasHk8bs5UzhqQ=)
                          4: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (hash: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=)
                          5: mNn5LpVTCSjn9tD6DcUxUYANi8s.roa (hash: i8iUt+y8/V9rk9/tLWfRKWS3nKaGL/INp2MDB2FQUH0=)
                          6: qr8IfMG0wXnoWKRjtAOxxAQXvEs.roa (hash: bOTEz5nNebdBWsTazVLtMusncdYOFE+J5o3RrpW6dgk=)
                          7: vkcH5EuwGj_ZFASLeHfVBft18NM.roa (hash: SL2s+xmOtEQcpk6DrcetNgDtQEsEIxB4oiJALQlr+dU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:e3:c4:74:4e:a5:e5:0f:28:c0:96:47:00:12:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Jun  8 03:00:54 2025 GMT
            Not After : Jun  9 03:00:54 2025 GMT
        Subject: CN=96019f5e0dccbbc05b913b9594ce6b5dcd9696fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:0e:9e:20:e5:a0:10:17:d9:60:dc:13:f0:
                    8b:e7:e5:2a:f0:a3:4d:e4:59:eb:b9:e7:14:82:c0:
                    ae:5d:1f:46:0f:ce:3a:2a:d5:6e:1a:d1:09:60:6d:
                    45:5a:39:df:48:20:bc:10:c2:9e:f0:0e:de:4d:56:
                    9d:c7:63:5b:eb:36:74:c0:b8:7c:9f:39:13:ca:6c:
                    56:24:6c:ca:d9:51:41:98:aa:9f:f0:c1:6a:c0:d7:
                    49:5a:d5:ec:22:3f:fc:91:4b:c0:ab:70:50:2d:8d:
                    74:fc:b9:87:d3:d9:2b:93:23:3c:e5:aa:47:4d:8d:
                    99:dc:b1:81:23:13:69:9c:e1:46:71:dc:e4:32:9b:
                    c3:cb:2b:27:e2:0b:be:f7:dc:d9:6c:8c:2b:6a:52:
                    e3:1b:21:cf:29:26:17:35:c3:d0:ae:e5:78:90:9e:
                    79:92:cd:c7:57:01:0b:af:d6:8e:49:f9:d9:3c:10:
                    ac:45:1c:ea:0f:ee:3f:75:0a:d1:dc:d1:6f:48:51:
                    26:a9:c3:8b:12:f0:25:fe:72:fc:f6:0e:58:e9:23:
                    e9:b0:fa:de:9b:ba:9c:05:a0:ff:0f:85:36:af:45:
                    5d:e4:ca:a5:15:93:f6:f0:f8:b8:3b:ca:df:f2:15:
                    67:5b:cd:52:14:eb:dc:49:aa:e1:30:43:61:cb:fc:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:01:9F:5E:0D:CC:BB:C0:5B:91:3B:95:94:CE:6B:5D:CD:96:96:FD
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:34:69:ac:8f:e8:f2:22:f5:2e:92:81:0c:83:d5:9e:df:73:
         d9:c6:cf:7b:68:91:c4:aa:07:95:32:b0:12:ed:17:18:90:69:
         b1:13:a8:ca:02:71:32:77:bd:11:5b:f8:75:fe:0d:ed:68:6b:
         67:8c:a8:5f:84:c7:e4:11:da:3d:20:bf:50:30:67:cf:d2:19:
         09:4b:af:2a:53:da:78:39:86:a7:22:2d:67:29:86:86:c7:98:
         23:c6:0a:57:de:08:bf:a4:8d:cc:0c:05:5e:cd:65:45:3d:f7:
         54:eb:d2:00:c0:e6:b4:ef:2b:84:86:b8:bd:8e:76:83:28:2b:
         09:b3:0d:38:c9:29:05:bd:13:1d:12:49:5e:08:62:81:2d:c3:
         1e:c7:3d:ff:30:76:3a:f3:0c:8a:96:ec:d5:60:6e:5a:fc:c4:
         07:bd:01:f9:1c:ef:0f:aa:f9:c1:ce:fd:9e:cf:d4:63:ea:d0:
         05:bc:96:40:e5:14:25:d9:ef:76:66:61:93:9a:ff:93:ce:55:
         9e:e5:6a:71:dc:75:25:d8:d6:4c:62:39:7a:18:e2:6b:79:5b:
         8f:63:99:b6:cd:a3:c8:11:a9:5b:21:64:1a:af:39:1a:b8:7c:
         65:43:f4:fa:3e:1a:05:05:6e:41:b3:10:11:a0:17:d8:86:65:
         57:fb:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:33:37 2025 by rpki-client