Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File:                     vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier:          uFyZFPbjX9e96W7ZYvpYDsMVxM8IDyWFh/dnb2H3d4w=
Subject key identifier:   7F:D5:0E:A8:86:DB:11:17:37:7B:91:24:0B:60:A6:4C:8C:3C:40:22
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer:       /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial:       0196545C5678CE7FFFBCECF2F0695397E886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number:          0439
Signing time:             Sun 20 Apr 2025 18:00:59 +0000
Manifest this update:     Sun 20 Apr 2025 18:00:59 +0000
Manifest next update:     Mon 21 Apr 2025 18:00:59 +0000
Files and hashes:         1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
                          2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: 7mSF1sbBMDmNB+ffPBsNntZt0pJWjj4bUNRyL1DLMx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 18:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:5c:56:78:ce:7f:ff:bc:ec:f2:f0:69:53:97:e8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
        Validity
            Not Before: Apr 20 18:00:59 2025 GMT
            Not After : Apr 21 18:00:59 2025 GMT
        Subject: CN=7fd50ea886db1117377b91240b60a64c8c3c4022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b1:9b:b0:24:1f:f1:7f:40:e1:5c:e3:ce:11:
                    3c:ac:46:72:9e:66:41:f9:78:c4:69:ec:06:ef:b5:
                    fc:f9:b6:73:5b:ad:fe:60:63:37:b6:55:6b:4a:b8:
                    2c:ac:39:62:a2:a7:b1:49:74:99:d1:83:6a:50:33:
                    6c:9e:b9:05:42:9f:c9:d3:82:a1:81:59:1c:ba:0a:
                    60:bf:92:3b:ea:bb:c6:90:27:5b:0c:79:5c:df:d3:
                    9b:69:48:51:a7:15:c9:99:39:48:28:b6:cc:16:ef:
                    b2:8d:43:d0:72:9a:5f:98:53:ed:73:cb:a7:5c:27:
                    7d:96:06:3c:c3:bd:5e:79:25:00:db:33:66:75:5e:
                    79:8b:af:45:de:23:ba:7a:54:85:c0:0e:8b:5e:af:
                    64:00:df:bd:97:81:8e:c8:f0:7c:cb:28:69:74:92:
                    69:6b:c1:4b:63:08:05:ee:35:6c:27:af:a6:c5:f2:
                    51:4d:cf:80:60:50:7e:e8:ec:2d:ea:ca:42:9f:00:
                    be:cf:3e:a5:fd:35:55:d7:d3:67:e4:3f:84:91:33:
                    7d:3c:24:e2:17:94:2c:68:f3:46:e6:fe:d3:98:47:
                    82:da:d6:ab:0c:8c:60:a9:18:16:7d:0f:68:f5:ef:
                    36:2e:54:18:81:d8:eb:b0:89:f8:07:55:52:b8:a9:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:0E:A8:86:DB:11:17:37:7B:91:24:0B:60:A6:4C:8C:3C:40:22
            X509v3 Authority Key Identifier:
                keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8c:9b:b8:67:05:cb:60:31:4e:36:91:1d:11:cb:a4:cc:c2:
         39:4d:30:ff:64:e2:df:9b:13:9a:2e:1b:9c:36:2c:92:8f:40:
         fe:d2:c9:36:ba:ec:c0:ca:b7:23:b0:20:70:51:5f:81:b3:6b:
         31:ee:8c:3d:f7:4a:b7:ee:fa:18:b6:38:a6:d6:0a:f9:ce:2e:
         58:e9:32:ef:ef:ff:c3:82:0a:27:72:f0:df:db:40:15:e1:32:
         4d:a6:d2:15:a5:3c:a5:23:12:2e:4c:38:0e:69:cc:19:16:a8:
         de:59:d9:f9:33:ae:6e:0c:0b:d0:18:0a:2f:0c:fd:17:91:7e:
         17:d7:2c:6c:0b:3a:f5:38:aa:ec:6b:ca:44:7f:35:d3:9b:f1:
         b3:bc:ca:0b:fe:42:af:7e:c6:5d:8b:74:b0:a6:26:9c:77:94:
         46:4e:7e:1e:67:d3:34:e6:ec:ae:b5:63:c7:07:32:aa:c8:57:
         d2:9b:45:05:8e:b4:31:29:0e:c6:06:2f:c9:ce:25:a7:a8:95:
         08:39:ed:c6:ee:f6:1e:3e:8e:fe:88:ed:3e:31:0e:eb:9b:1c:
         55:d7:a9:bf:5c:0a:38:62:0c:87:79:49:82:fc:65:98:0e:f8:
         70:c2:65:9b:17:21:4f:20:62:29:b6:10:92:a0:05:8e:32:49:
         1d:96:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:14:28 2025 by rpki-client