Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File:                     VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier:          bpnPaWHTe1TEUmuvNeDTKTh6SvSIdU9W6SNnbYQTXDU=
Subject key identifier:   7C:08:56:6E:E8:3C:F4:B5:88:77:51:F1:67:49:45:AB:ED:93:8F:03
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer:       /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial:       01964DEC20077F44149891BC48E3BDFF58C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number:          7B
Signing time:             Sat 19 Apr 2025 12:00:42 +0000
Manifest this update:     Sat 19 Apr 2025 12:00:42 +0000
Manifest next update:     Sun 20 Apr 2025 12:00:42 +0000
Files and hashes:         1: UfsWVLXlKS-YeedBQ6KLEcHVpj4.roa (hash: boZrSX+IxVlQdGAIp3Em+CvprqHqmfbsNvAMqDk06S4=)
                          2: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: T6pkDAohlajDuNUMAOuGod7owRtJ+Ffj3kGbhuFKbJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:ec:20:07:7f:44:14:98:91:bc:48:e3:bd:ff:58:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
        Validity
            Not Before: Apr 19 12:00:42 2025 GMT
            Not After : Apr 20 12:00:42 2025 GMT
        Subject: CN=7c08566ee83cf4b5887751f1674945abed938f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:54:76:36:f3:6c:e9:02:a5:88:2a:08:23:
                    03:f7:13:c6:08:a3:76:7b:77:cd:f8:f0:d3:02:74:
                    40:07:5d:8e:3a:f0:47:8a:fe:aa:e2:38:61:08:da:
                    d9:20:d7:70:34:b1:7f:76:ce:c2:5b:0d:c8:35:38:
                    33:ee:08:19:8a:f6:81:48:d2:17:48:13:05:9a:10:
                    27:2e:02:28:bb:e8:9e:11:8a:38:24:54:44:bc:f6:
                    c7:70:41:f4:3d:bf:e1:fd:4f:27:3f:a9:05:95:ff:
                    64:c6:5f:5e:cf:e6:e0:3b:bb:a4:ff:7b:f2:23:41:
                    7f:49:bc:5a:ce:56:a5:c1:d7:95:80:cb:03:82:13:
                    59:f5:b5:5e:7d:1c:fc:a3:e8:e9:bb:c1:99:e2:11:
                    d5:ee:1a:0c:7f:2c:9b:e0:36:2e:19:f9:c4:fb:7b:
                    9e:d8:2a:94:c4:a9:12:ae:47:f2:ec:ff:17:ea:d1:
                    54:4f:ce:59:07:e5:40:c2:a5:d2:54:4d:ce:49:d5:
                    9e:af:bd:54:1e:bd:ff:e5:af:3b:dd:57:94:7a:f0:
                    c9:4f:31:cb:48:67:8b:1c:fb:f3:7f:2f:17:4c:74:
                    ca:1c:76:e3:05:f7:a4:8c:07:af:da:37:7e:dd:5e:
                    31:d9:24:af:47:4f:54:75:37:f7:dc:79:4a:5a:a7:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:56:6E:E8:3C:F4:B5:88:77:51:F1:67:49:45:AB:ED:93:8F:03
            X509v3 Authority Key Identifier:
                keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d4:15:90:ee:ee:68:3a:6f:e6:20:4c:8e:26:bb:e8:8d:7f:
         4a:0e:a3:3b:78:16:8a:2a:4d:80:81:7d:ed:5a:42:6f:ed:8b:
         93:81:9b:c9:5d:5c:da:03:71:51:e1:ba:c1:d8:d5:0d:26:9b:
         2a:7e:05:44:ed:26:76:a4:ae:9b:66:20:3e:cf:04:c8:92:56:
         60:e9:c1:62:ff:67:79:e4:d5:5e:49:12:a0:41:81:df:9c:e7:
         38:e2:f0:de:ef:4c:e9:7e:f5:77:21:a6:85:41:5b:ca:b2:4a:
         e4:b4:cd:2e:ec:b5:36:0c:f7:f0:b1:15:f3:ff:0f:02:0f:f0:
         f1:3b:54:e0:88:e9:b0:cb:be:7b:f6:c1:3b:b9:58:6c:ea:8f:
         88:4d:ac:36:17:d9:4e:6b:73:81:d3:e8:18:b1:b6:62:ec:8d:
         8f:dc:0c:1e:fa:4d:f6:6f:21:b2:65:c7:1c:78:58:cb:a2:ac:
         14:5a:ba:53:fa:45:94:13:99:72:5c:08:c8:85:74:55:71:b5:
         71:6e:0d:a4:48:7e:3c:fa:22:c5:4c:5b:6c:65:c0:e4:5d:58:
         af:7f:ac:7f:a6:d4:6a:ce:b0:53:b7:ef:e5:1d:d8:43:f8:78:
         04:51:0d:ea:f6:4d:9c:b0:8d:ad:8c:f4:e9:05:89:2a:69:7b:
         37:11:08:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:14 2025 by rpki-client