Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          f27qXaB3iEW8Q/xazfa/nLPqeBUAbHBnDwsYUOQva8w=
Subject key identifier:   01:95:9E:07:C3:1A:DA:FC:95:8E:C0:A1:E4:F7:79:CC:82:4A:F4:87
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       0196575CFCD85E7A0379E5ABB4B2BB0389FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          0D27
Signing time:             Mon 21 Apr 2025 08:00:33 +0000
Manifest this update:     Mon 21 Apr 2025 08:00:33 +0000
Manifest next update:     Tue 22 Apr 2025 08:00:33 +0000
Files and hashes:         1: UTTH-IaK-KygVMC3443mlQMx1tE.roa (hash: KaccohMbQWCa0xUtmGU3VvPQYUMzJjUZd1bKqbI3gbU=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: tBLXMRIies9u9W2c0fIGvijEdYyql4k7Bxpqg74IKZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:5c:fc:d8:5e:7a:03:79:e5:ab:b4:b2:bb:03:89:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: Apr 21 08:00:33 2025 GMT
            Not After : Apr 22 08:00:33 2025 GMT
        Subject: CN=01959e07c31adafc958ec0a1e4f779cc824af487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f7:86:78:25:64:24:06:00:48:43:d4:ca:03:
                    a8:9b:6f:01:7f:28:d7:7e:23:00:22:2e:b4:6d:7d:
                    c2:cb:81:55:51:be:bb:52:b6:d2:69:85:e4:d4:06:
                    01:22:78:ba:64:0c:c5:c5:63:a1:1c:c3:d8:52:be:
                    0e:3b:d2:d6:b3:e3:a9:58:ab:19:56:68:a6:f7:85:
                    b6:4e:08:41:87:e8:76:20:38:b8:c6:1f:ff:51:d9:
                    0f:62:d0:83:d6:00:75:bc:a7:93:9d:d7:b7:e9:e9:
                    9d:d3:b8:e1:07:8f:d8:de:11:9f:99:ff:66:99:d5:
                    dc:2e:4b:59:77:7d:2e:e3:53:14:4c:93:15:f9:ba:
                    07:60:a6:99:37:8e:06:9a:8b:5e:0f:b3:c6:26:e7:
                    c9:c3:6f:36:03:00:d4:c3:d9:b8:44:5b:dc:82:87:
                    7a:86:03:10:b3:dc:18:07:90:b7:da:6b:5b:fc:62:
                    1d:1b:83:91:dc:cc:3c:1e:67:21:90:df:7b:71:c8:
                    6c:36:d4:74:42:14:e7:5b:bf:76:14:50:e1:85:c7:
                    97:13:d7:a6:ad:ae:7d:99:00:67:e7:b1:74:34:1f:
                    1a:1a:b7:05:9c:89:d1:5b:a8:6c:00:cf:0d:90:c1:
                    fb:ea:60:db:8b:ff:cc:15:59:e8:72:80:d9:39:3d:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:9E:07:C3:1A:DA:FC:95:8E:C0:A1:E4:F7:79:CC:82:4A:F4:87
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:45:68:b3:78:8e:be:38:ee:de:69:72:c5:3a:cc:83:1e:34:
         15:f3:4c:41:9d:3e:6f:d5:69:6a:15:85:2b:51:78:6d:d8:b6:
         03:84:e1:b0:b3:dd:46:05:96:b6:81:ef:59:ba:1c:3f:cc:0e:
         fd:cb:dc:03:03:c6:62:98:fd:dc:b8:98:e6:e9:1c:cd:02:4b:
         10:13:21:85:76:2c:7f:9d:01:11:bf:93:a9:f9:97:cd:30:c2:
         e0:67:93:13:4a:46:aa:3d:27:68:4f:6f:a7:26:56:64:d5:26:
         df:c2:c2:2c:11:30:33:7b:f1:9a:97:f4:fc:b6:68:f6:e3:1d:
         fe:d5:81:8b:a3:f4:10:57:76:dc:bb:12:80:4b:42:a7:f1:48:
         57:35:d1:f4:88:de:07:6e:65:15:7d:3e:f2:69:f0:c2:09:b7:
         7f:34:74:73:ab:c4:f7:b9:4b:96:c2:a4:a8:d6:cb:09:30:ee:
         ac:11:67:54:c6:7f:5d:f1:3a:c5:a5:e9:c5:5c:26:41:82:30:
         44:d4:e4:b2:ad:29:28:90:11:f7:3e:bf:d8:15:f5:d0:69:f5:
         6f:28:69:aa:bb:c0:8d:7e:32:d8:43:53:94:d7:8d:43:18:c2:
         8a:11:d5:d8:a4:e9:95:ca:14:a1:21:ec:95:d3:f8:f8:9f:67:
         05:f5:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:38 2025 by rpki-client