Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          bOgJBzuJeOOEJhnH8URCrDICYG46Egv9qdIOQEFOXCU=
Subject key identifier:   30:13:F8:F9:EE:AD:A7:18:60:F2:70:AA:60:DD:4E:79:27:5F:49:D4
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       0196403034A1F98752F38DB85AE5A1C34309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1484
Signing time:             Wed 16 Apr 2025 20:00:23 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:23 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:23 +0000
Files and hashes:         1: OY4UYP6MQJjL7Sxg2gh9CE4T1RE.roa (hash: ZrfsE/pEoCJELDNN+z7XrdVrqnmY0w2a+56TbedDcbs=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: 8222MFZuneG1yJgxQU1TtpR0y8PNOPsKNoWVocNTmqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:34:a1:f9:87:52:f3:8d:b8:5a:e5:a1:c3:43:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Apr 16 20:00:23 2025 GMT
            Not After : Apr 17 20:00:23 2025 GMT
        Subject: CN=3013f8f9eeada71860f270aa60dd4e79275f49d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:80:c1:8b:60:da:d8:04:c6:65:71:49:b1:
                    5b:d8:09:39:71:b6:0b:6e:e2:0a:6f:ad:b1:2f:17:
                    c6:97:d3:00:d5:b2:75:56:5f:41:a1:aa:f7:01:24:
                    ae:dc:dd:d9:d0:b3:07:7f:17:20:d5:07:e1:00:13:
                    a1:b9:6b:ed:af:cb:b5:40:f3:1b:d0:e3:da:5d:53:
                    9d:2b:f0:ba:ee:a9:f1:31:a1:08:c1:05:c2:61:0c:
                    1d:80:c7:03:26:1b:84:8c:7b:45:ae:71:44:25:62:
                    2d:6c:11:43:aa:27:38:f3:7d:d5:4f:f4:93:ca:27:
                    80:95:b0:fe:cb:5b:49:ab:f9:a8:34:c8:38:0e:27:
                    23:50:e2:6b:dc:74:d4:a9:4b:a2:52:6b:0c:17:e6:
                    32:84:29:d0:75:75:23:f6:5c:78:43:64:96:72:d3:
                    21:f1:83:e0:61:51:d8:69:6d:f7:78:5d:9f:d4:82:
                    dc:34:89:bb:ef:70:ea:ca:06:3d:25:55:66:36:ab:
                    d6:86:5f:1d:0b:cf:60:da:cf:3a:7f:72:44:3a:6c:
                    80:92:d7:de:19:d9:8b:14:2c:5c:e5:d9:7b:e1:b0:
                    cc:77:90:94:2d:82:5b:ba:9c:57:9c:01:cb:9b:2b:
                    e7:50:7f:40:2e:a6:60:2c:b9:61:0e:9e:7f:48:59:
                    51:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:13:F8:F9:EE:AD:A7:18:60:F2:70:AA:60:DD:4E:79:27:5F:49:D4
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:db:d2:2f:c5:82:92:ca:dc:14:88:59:f9:ae:16:3e:85:b0:
         7e:df:ae:c7:a2:1b:03:5f:7d:05:24:22:b8:15:05:26:77:32:
         71:3c:b7:8b:cb:26:dd:37:dd:4d:5b:28:86:1c:5a:87:ea:b5:
         ea:3c:71:47:cc:00:f0:a7:e0:97:07:a3:24:c8:09:23:0f:93:
         4b:62:1b:e9:af:52:50:c9:bb:b9:6b:14:63:a6:a4:0f:fa:11:
         54:66:1f:ce:ca:88:43:6e:6b:2d:13:89:26:83:9b:42:6d:9c:
         dd:3f:95:aa:52:71:a2:fc:75:e7:fc:33:db:52:21:b5:83:52:
         08:a7:aa:bf:b2:87:7e:bd:3b:29:8a:1b:a7:7b:05:6b:92:5c:
         13:26:55:9d:24:5b:ec:37:c3:72:7a:7c:3a:ef:bb:9a:8b:e2:
         e9:09:62:14:d4:f6:c5:e5:bf:90:94:60:db:07:15:57:63:17:
         04:08:d8:e1:3f:64:20:6c:19:61:94:9e:a8:ef:54:40:96:e3:
         e8:d1:4c:d5:52:4d:d0:1c:71:4f:04:56:16:7e:d7:f0:62:7c:
         71:bd:c5:91:21:25:ee:7c:6e:67:c0:04:fc:c9:ef:49:1c:a8:
         ce:bc:a7:0e:d8:be:84:3d:35:62:3f:f1:1a:3c:6a:e9:93:a9:
         80:7b:9c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMDSh+YdS8424WuWhw0MJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0
NTc0YzAwHhcNMjUwNDE2MjAwMDIzWhcNMjUwNDE3MjAwMDIzWjAzMTEwLwYDVQQD
EygzMDEzZjhmOWVlYWRhNzE4NjBmMjcwYWE2MGRkNGU3OTI3NWY0OWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHKAwYtg2tgExmVxSbFb2Ak5cbYL
buIKb62xLxfGl9MA1bJ1Vl9Boar3ASSu3N3Z0LMHfxcg1QfhABOhuWvtr8u1QPMb
0OPaXVOdK/C67qnxMaEIwQXCYQwdgMcDJhuEjHtFrnFEJWItbBFDqic4833VT/ST
yieAlbD+y1tJq/moNMg4DicjUOJr3HTUqUuiUmsMF+YyhCnQdXUj9lx4Q2SWctMh
8YPgYVHYaW33eF2f1ILcNIm773DqygY9JVVmNqvWhl8dC89g2s86f3JEOmyAktfe
GdmLFCxc5dl74bDMd5CULYJbupxXnAHLmyvnUH9ALqZgLLlhDp5/SFlRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAT+PnuracYYPJwqmDdTnknX0nUMB8GA1UdIwQY
MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt
Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3
LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdvSL8WC
ksrcFIhZ+a4WPoWwft+ux6IbA199BSQiuBUFJncycTy3i8sm3TfdTVsohhxah+q1
6jxxR8wA8KfglwejJMgJIw+TS2Ib6a9SUMm7uWsUY6akD/oRVGYfzsqIQ25rLROJ
JoObQm2c3T+VqlJxovx15/wz21IhtYNSCKeqv7KHfr07KYobp3sFa5JcEyZVnSRb
7DfDcnp8Ou+7movi6QliFNT2xeW/kJRg2wcVV2MXBAjY4T9kIGwZYZSeqO9UQJbj
6NFM1VJN0BxxTwRWFn7X8GJ8cb3FkSEl7nxuZ8AE/MnvSRyozrynDti+hD01Yj/x
Gjxq6ZOpgHucRw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 23:54:07 2025 by rpki-client