Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          +agdnpCmV54tdFTkbXKegAyrlFIwX8rylvU3Y9Luyag=
Subject key identifier:   8A:21:9F:C7:5A:C0:67:C9:F1:73:64:A2:0C:8D:9E:C3:F2:E0:E0:50
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       0197462FDBC12AD6BF79996F6B191F66E64E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          150E
Signing time:             Fri 06 Jun 2025 17:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:30 +0000
Files and hashes:         1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: thWaPhTHXfKU3Q6vyNNURn5l9yl79lCiUAAQgl/1maQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:db:c1:2a:d6:bf:79:99:6f:6b:19:1f:66:e6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: Jun  6 17:00:30 2025 GMT
            Not After : Jun  7 17:00:30 2025 GMT
        Subject: CN=8a219fc75ac067c9f17364a20c8d9ec3f2e0e050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:13:8b:b4:86:6c:3e:08:18:af:23:6e:ad:
                    aa:f8:a1:6b:0e:ec:4d:59:0f:46:07:0c:8d:9a:36:
                    f8:3e:1c:c4:7a:b8:5c:41:7e:e6:34:18:a5:db:eb:
                    21:45:72:85:8f:53:d2:52:a0:5f:40:78:08:6e:34:
                    a3:46:51:a8:d3:44:d4:fc:75:62:ab:7d:06:dc:ad:
                    9d:9e:2d:c8:ff:d0:68:ce:b6:93:bf:05:d0:1e:e6:
                    11:f1:a0:c4:bc:ea:c8:b0:4c:b5:a9:9a:3d:0d:b1:
                    13:6a:7f:7c:ec:12:45:db:3e:30:0e:0f:07:dc:c9:
                    45:15:5d:c5:3c:f3:5b:7b:ee:5c:93:90:04:32:16:
                    b8:6c:ae:83:aa:1b:81:c3:40:c8:48:3a:4b:28:fa:
                    9f:45:a9:e9:9a:ed:a4:64:c9:de:47:9d:42:cb:85:
                    54:c8:63:a9:7f:dc:9b:44:20:20:14:48:35:37:66:
                    13:55:ec:bc:79:c0:27:e0:37:8d:cd:4c:bd:ae:26:
                    ff:d2:3b:8e:c4:a9:f3:16:fc:df:ce:13:2f:cf:f6:
                    1f:95:77:e1:20:d8:ee:df:30:7d:85:4b:7b:f9:77:
                    dd:3a:64:6a:e9:57:74:a5:d5:26:d1:40:ac:84:cd:
                    49:af:b9:08:55:31:d9:ee:8c:db:b0:7d:8c:b6:04:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:21:9F:C7:5A:C0:67:C9:F1:73:64:A2:0C:8D:9E:C3:F2:E0:E0:50
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:29:16:45:95:96:66:81:69:04:74:4e:47:42:34:8a:50:
         a2:bd:8b:ea:8a:e2:2b:6f:0e:bd:c6:55:57:38:b1:f0:db:dd:
         01:65:86:e3:19:04:dc:7b:22:d4:68:1d:0b:67:5c:37:66:c8:
         66:53:21:75:8d:c0:2d:bc:b2:2d:7b:1f:1d:20:8f:d5:e3:3b:
         34:44:88:ba:5b:c7:3b:6d:87:3f:0b:bb:8b:da:d3:26:44:71:
         34:df:e5:82:67:d1:a9:c6:31:1c:92:6c:4f:50:3f:0b:8e:ce:
         51:4c:1b:3e:57:a7:a0:0d:27:c1:67:22:73:9e:e3:fb:3b:d3:
         b5:8e:05:29:8d:7c:43:6e:23:a4:cc:b5:48:c9:54:b8:a8:82:
         fd:2d:cc:be:42:dd:12:b6:41:2b:6d:3f:5f:be:37:73:b5:23:
         9d:bb:25:32:48:5f:5f:bf:82:18:57:47:be:7e:12:e9:83:62:
         95:32:4f:18:46:c6:c6:97:de:4a:7f:15:f6:ab:12:1d:7c:b1:
         9f:78:fa:82:1d:37:53:2d:ba:85:8c:e4:68:34:da:35:fa:32:
         5c:1c:75:0e:fa:2a:46:89:7e:0b:8f:cf:da:3e:5d:55:b7:6d:
         c3:04:a6:02:72:d0:8a:59:00:b6:e2:c3:c7:60:10:0b:fd:2d:
         09:34:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:17 2025 by rpki-client