Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          S8k1dnD8AkULjBQInE3aDwycY5rAeDYz+9CrtwIHX5I=
Subject key identifier:   F5:CB:DC:41:D4:8D:0F:62:FE:15:F3:E3:33:DF:35:1C:3A:CD:31:FC
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019749D63233E82C4725146F4A8E93E4919C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          0F4F
Signing time:             Sat 07 Jun 2025 10:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 10:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 10:01:03 +0000
Files and hashes:         1: J61W22rNG-zDQHqba8KpMVr9eOQ.roa (hash: egaR8HryPVOatJDhc71F1yZLfEpoS66sYQjBb1aN/QU=)
                          2: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: rcViGHL0ebIWDwF4EuYlIQ+Rdc3u5FHyARFxSTeE/Qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d6:32:33:e8:2c:47:25:14:6f:4a:8e:93:e4:91:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: Jun  7 10:01:03 2025 GMT
            Not After : Jun  8 10:01:03 2025 GMT
        Subject: CN=f5cbdc41d48d0f62fe15f3e333df351c3acd31fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:8d:84:03:f2:b2:4e:1e:0f:56:1b:8a:3a:
                    40:7e:eb:6c:ec:38:4f:61:e2:be:a0:13:b6:85:5e:
                    09:9b:e6:4f:62:95:a5:e3:be:e0:3b:c4:7e:f9:f0:
                    f8:87:e3:f5:83:cb:0f:63:78:ec:53:33:34:ad:95:
                    12:0b:0f:93:11:b0:89:6f:2e:96:e6:a6:be:88:6c:
                    3d:3a:34:ec:8e:bc:29:6a:f1:ac:ff:6e:f9:cb:99:
                    9d:a8:71:32:f4:7d:f2:77:97:c0:59:cc:49:f4:b5:
                    ff:d0:4e:06:b3:26:cb:55:b3:08:70:34:8a:ea:5d:
                    d5:1f:d4:4b:bb:05:50:71:90:d2:56:ca:ff:aa:8f:
                    4d:aa:11:1a:e2:b7:99:c5:da:ff:85:96:46:55:f8:
                    fc:81:cc:37:82:e8:bf:37:60:45:0a:12:77:c6:2f:
                    5a:8a:79:93:07:0c:13:6a:cb:4d:71:ba:21:c6:3c:
                    af:61:35:61:56:68:e0:46:57:44:94:0d:37:91:45:
                    c0:27:92:25:06:c7:3c:6b:f6:57:7b:d5:c0:39:c5:
                    92:03:36:1e:61:11:b6:6d:82:48:91:3e:64:bb:4f:
                    d8:7e:ac:e7:6c:49:55:ac:91:0e:31:4b:9c:ef:83:
                    48:84:c4:f9:23:ab:d5:76:3e:2f:f4:55:d6:d8:91:
                    62:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CB:DC:41:D4:8D:0F:62:FE:15:F3:E3:33:DF:35:1C:3A:CD:31:FC
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:63:09:97:bb:a4:67:0e:3f:a0:ad:d0:fc:10:36:db:e2:96:
         5b:60:55:7f:b2:a1:52:65:71:eb:98:6e:cc:86:9a:69:95:01:
         55:53:18:d1:82:2e:61:d4:5c:85:31:e9:e8:3d:f4:91:86:5e:
         26:16:ae:29:71:c1:85:e1:f7:1c:3f:ab:f6:94:08:90:53:0e:
         4e:da:c5:98:3d:13:7f:b0:a9:b4:1f:b1:87:2a:78:05:79:29:
         f9:b9:10:a5:0d:c9:2d:dd:19:34:2d:b4:81:42:74:2e:9c:bf:
         72:b7:51:b5:e8:83:34:84:86:cc:b4:d5:40:04:a3:71:ed:12:
         1c:82:3b:1c:ee:86:51:9e:f7:c6:9a:b1:b6:b6:bf:13:90:6a:
         e1:0f:e5:d9:d4:e7:55:bf:e8:da:37:b8:27:d5:bd:6b:5a:e6:
         85:65:12:9d:b9:23:f7:95:16:cf:84:5f:c9:2b:10:65:6b:25:
         c4:9b:d6:93:b7:72:ce:8a:cd:a3:4f:5c:ad:2f:d4:a4:f1:39:
         cc:c7:9a:63:ac:3e:79:b0:35:9c:e8:1d:bd:1d:e1:73:6c:d0:
         ec:b6:49:80:33:30:b0:b7:d0:cb:ae:fb:97:24:61:ea:20:07:
         7c:10:b4:b3:e5:85:c1:df:2b:7c:6e:ce:4b:45:8a:42:45:ee:
         ac:5e:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:04 2025 by rpki-client