Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File:                     VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier:          +Aqy59ysoEPH+zlWb2/le4Nm+ohUOZmE3Sinh9CyBXc=
Subject key identifier:   63:E7:D5:DB:A8:81:A0:E7:7C:84:07:D9:5F:2F:19:C2:18:3D:71:6D
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer:       /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial:       01976283517ED74E8296322EF0B1EC078902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number:          01F2
Signing time:             Thu 12 Jun 2025 05:01:02 +0000
Manifest this update:     Thu 12 Jun 2025 05:01:02 +0000
Manifest next update:     Fri 13 Jun 2025 05:01:02 +0000
Files and hashes:         1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
                          2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
                          3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: b6yAAQCWlBrltYb9lij3W1PxbBU5ObhmCkNvUqz2vUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:62:83:51:7e:d7:4e:82:96:32:2e:f0:b1:ec:07:89:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
        Validity
            Not Before: Jun 12 05:01:02 2025 GMT
            Not After : Jun 13 05:01:02 2025 GMT
        Subject: CN=63e7d5dba881a0e77c8407d95f2f19c2183d716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:2c:66:23:9c:f8:c9:2c:07:b2:d1:b0:ce:
                    ac:74:d8:48:6e:5b:8f:81:78:38:79:b5:39:c4:04:
                    f4:d3:cb:4e:fd:02:0d:31:e0:80:42:4d:74:20:f2:
                    ad:02:5f:d0:7d:ff:ab:78:59:d5:d5:0c:ad:a0:47:
                    39:cf:d8:ef:8c:ad:36:ec:58:5b:71:fa:30:e0:4c:
                    9d:8b:82:9e:f5:66:1e:09:18:2f:11:55:88:75:c8:
                    9c:6e:58:a8:7f:9d:5f:b5:38:80:7a:c9:05:b6:a2:
                    5d:14:cd:2f:d0:30:79:f4:33:4c:74:5a:49:c7:db:
                    28:f0:cb:87:8c:6a:9e:42:50:01:b6:b3:f7:79:72:
                    32:54:04:db:20:82:a3:24:76:b4:b4:99:54:ea:34:
                    84:37:49:ea:44:bc:e7:f2:11:40:97:06:af:ef:f8:
                    fe:fa:5c:f8:22:c1:8e:bd:a2:5a:8a:9b:b3:e1:13:
                    01:0a:28:33:7d:9c:10:34:93:b8:b3:93:4c:67:6a:
                    be:7c:9f:89:1c:0e:f9:c3:db:57:9d:de:63:0c:f6:
                    f8:12:30:36:05:ca:d1:a1:41:6d:f8:f5:9d:10:31:
                    b6:42:03:3b:bb:df:99:93:d5:1b:e4:29:51:df:61:
                    db:bb:2e:95:31:86:15:e4:46:60:c8:bf:ba:13:46:
                    0b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E7:D5:DB:A8:81:A0:E7:7C:84:07:D9:5F:2F:19:C2:18:3D:71:6D
            X509v3 Authority Key Identifier:
                keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:49:9c:b7:31:3c:d0:79:55:e8:15:2b:5c:78:e9:0a:a0:3a:
         b3:d1:74:33:c4:a6:b1:11:5f:b6:58:94:b6:0a:08:92:33:b7:
         c3:08:b3:06:a2:0c:15:d0:6b:60:63:ee:6a:ba:bd:fc:ce:2f:
         cc:12:d0:45:99:4d:c2:d2:4d:75:da:c4:79:cf:58:79:3c:d1:
         67:8a:45:08:f3:de:5e:f1:26:c6:68:53:8f:b7:ef:52:2d:03:
         f1:44:bb:5f:6c:a2:e7:9f:48:f0:36:36:c7:bc:aa:dd:16:d7:
         93:57:ab:ed:30:5c:9c:0f:f6:3d:c6:b4:b7:c8:5d:e0:2a:6c:
         af:dd:a0:52:f9:81:5d:42:88:5e:dd:a2:80:6a:dd:76:68:ff:
         f7:1d:e8:b1:3d:43:17:23:fd:2c:9a:5d:33:09:0f:2f:90:01:
         d8:91:0d:aa:9c:57:55:d9:ee:90:6a:41:21:f2:a5:f5:17:aa:
         d2:ef:77:e2:b7:1c:e2:3a:57:7a:32:6f:2a:50:1f:83:40:d2:
         5c:c1:97:29:83:d2:12:bd:88:38:8e:39:13:11:f5:c3:0f:65:
         e9:68:27:62:d4:c3:be:70:fe:89:ce:83:89:32:50:fd:d4:52:
         3d:70:22:b1:2c:62:63:8c:f5:06:77:3c:b7:8e:72:b6:fb:7c:
         e0:77:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:49:48 2025 by rpki-client