Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File:                     VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier:          xSxA5sXy4zzNJjgGbVqXreejLV7wpnfI4gpVqOODZ0Q=
Subject key identifier:   B5:44:7C:AE:86:D5:C6:B9:63:E7:DD:6E:FC:67:F0:D3:06:E2:5D:E2
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer:       /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial:       01974742D69F49BA70FADECBF9C3C5899876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number:          0D22
Signing time:             Fri 06 Jun 2025 22:00:52 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:52 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:52 +0000
Files and hashes:         1: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (hash: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=)
                          2: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
                          3: Ux9674M8NjPfocnrYudKeCUjMbo.roa (hash: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=)
                          4: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: hKNBzslpTErN6O7ztT1B1WohzBEVochYQWS3qGJi+X0=)
                          5: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
                          6: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:d6:9f:49:ba:70:fa:de:cb:f9:c3:c5:89:98:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
        Validity
            Not Before: Jun  6 22:00:52 2025 GMT
            Not After : Jun  7 22:00:52 2025 GMT
        Subject: CN=b5447cae86d5c6b963e7dd6efc67f0d306e25de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:da:89:00:c4:ef:fb:0d:99:08:05:ef:9f:
                    5e:6f:08:77:53:12:68:28:a7:65:3f:ac:ed:dc:e5:
                    e7:f6:f6:fb:fa:fa:1f:23:4a:25:59:9d:91:43:7a:
                    7c:4c:1f:c7:90:f8:32:f9:5d:d2:21:da:11:c4:4b:
                    99:e5:26:2b:b9:5c:ab:59:94:f4:cc:9f:41:41:fd:
                    ee:75:06:f3:60:09:32:80:ed:4f:81:a2:9d:da:a3:
                    ac:14:fe:50:d1:04:41:62:2c:55:87:bf:b0:4f:1d:
                    73:41:8c:6d:54:c0:1c:d6:97:81:9c:b5:5e:89:ce:
                    4c:2f:f7:24:4e:9f:ee:8a:c8:c7:ff:df:53:d8:df:
                    a7:9e:de:fa:16:fa:03:e5:b1:29:f6:7f:72:18:99:
                    44:17:85:36:03:e7:41:d2:44:8e:65:01:80:45:c3:
                    14:4d:49:62:97:6a:42:7d:0d:12:5f:da:60:c4:76:
                    de:29:5b:66:d0:f1:e5:83:d3:f5:c2:3f:1a:b9:6a:
                    7a:fc:fd:23:e5:d1:cc:94:41:8e:be:69:5b:63:35:
                    30:fc:bd:70:0b:4b:83:ec:a3:36:4e:14:d9:5c:ba:
                    09:d0:e5:da:fe:1e:64:be:19:62:0f:4e:69:d8:ca:
                    43:1b:0c:f2:66:56:42:b8:72:c4:69:3f:a0:73:8e:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:7C:AE:86:D5:C6:B9:63:E7:DD:6E:FC:67:F0:D3:06:E2:5D:E2
            X509v3 Authority Key Identifier:
                keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7b:c1:c8:6b:a1:8d:87:ee:de:08:d8:20:5b:a0:4a:6a:a8:
         32:29:a7:b9:c3:66:7c:b5:e5:9f:ce:15:44:6b:59:20:42:53:
         46:51:92:7d:95:3b:61:52:aa:9a:c8:ee:c5:d0:59:5a:9e:e9:
         4c:71:6c:f7:c4:02:1e:cd:fa:1e:f4:bd:95:a6:39:d9:b5:75:
         78:4d:0d:96:bc:2a:ee:45:cc:97:b8:f4:d9:7e:1b:80:34:76:
         4d:b0:4f:53:b0:c0:7b:a9:f1:7a:41:58:8f:ce:8e:f8:28:16:
         bd:b9:4a:84:fb:d4:af:a3:a5:67:22:49:28:74:4d:8c:d7:48:
         84:ec:6c:30:91:3d:2e:79:a9:ab:5a:ba:5e:0d:8e:1a:f2:72:
         b0:98:48:26:c4:71:5a:7a:a8:1c:b9:c3:2c:95:9b:d6:81:45:
         d7:da:6e:69:71:89:c1:48:65:30:db:19:6c:d6:43:75:3b:db:
         cb:aa:03:a4:a8:6b:9b:9b:45:25:3d:ee:6c:6b:c5:80:b4:0d:
         6d:b1:1b:a4:bf:58:ca:70:03:9d:8e:15:90:85:84:c6:96:67:
         be:43:6d:23:9b:1b:3a:ca:04:07:97:38:35:00:23:e0:90:57:
         46:4a:d6:37:96:03:92:3b:dc:a3:33:21:cf:e5:e8:e2:2d:f2:
         44:a6:3a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:54 2025 by rpki-client