Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          qymKrquHtjzZsUZRav64vuvN381UbBLLBbYnU57/OxQ=
Subject key identifier:   2E:23:E7:E9:FA:B8:01:FA:BA:F4:D1:A1:26:85:DD:23:8D:21:8F:2D
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       01974A0C95943A09F20D5B4E578DBCDCF7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          1582
Signing time:             Sat 07 Jun 2025 11:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:27 +0000
Files and hashes:         1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
                          2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
                          3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
                          4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
                          5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: wo7lcvw4QwwjPWnjUFi5eGcKQ8H1HbQsj680KwMqQrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:95:94:3a:09:f2:0d:5b:4e:57:8d:bc:dc:f7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Jun  7 11:00:27 2025 GMT
            Not After : Jun  8 11:00:27 2025 GMT
        Subject: CN=2e23e7e9fab801fabaf4d1a12685dd238d218f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:f2:ba:1e:ff:c9:17:5a:ba:f4:38:b4:6c:
                    8b:b9:f4:55:86:9d:9c:55:80:a8:62:c7:28:b5:ab:
                    60:b9:6b:ef:3e:69:14:07:68:c1:9a:e8:0f:ff:d8:
                    e2:07:14:24:5b:73:69:aa:f9:df:43:28:67:5f:f3:
                    ee:e6:23:3c:d3:58:fb:9c:17:eb:b9:64:57:79:4b:
                    54:ab:12:eb:b4:ff:aa:8a:7c:7c:5b:50:79:91:ac:
                    01:9a:7a:0a:36:04:5f:c8:e4:21:4e:a3:c1:82:4e:
                    83:a6:06:33:90:55:d6:11:3c:85:ff:d2:0b:5e:cd:
                    d7:1e:64:7f:b1:bc:1e:e4:4d:7f:b5:45:6a:7e:69:
                    fd:dd:29:62:bb:d1:1c:db:61:ae:62:a3:f1:a4:7e:
                    17:25:f1:40:3a:3d:54:21:d5:36:4e:e7:2e:2a:c2:
                    f1:64:f5:8f:ff:11:69:ed:53:5f:64:72:54:29:23:
                    b6:62:57:8a:42:93:7b:e7:d9:99:fa:f7:5c:28:28:
                    6c:88:86:7c:7b:2f:79:6a:24:3e:af:47:4e:51:a1:
                    32:36:fb:96:97:8a:75:11:4e:4d:d1:10:a2:66:dc:
                    ed:83:f3:cc:b4:f0:76:0e:72:f9:d3:5a:93:db:bd:
                    e6:3e:71:60:de:96:d2:57:df:eb:b3:26:65:fc:cc:
                    64:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:23:E7:E9:FA:B8:01:FA:BA:F4:D1:A1:26:85:DD:23:8D:21:8F:2D
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c4:e0:5d:04:d8:dc:89:8e:e4:ed:22:ca:10:7b:4f:c7:b5:
         7c:73:3d:fe:9c:dd:8d:71:98:da:f7:ee:45:7b:c3:f5:73:4b:
         ac:68:2c:5a:ef:a0:5f:12:a8:fd:84:db:5c:85:49:33:3e:d1:
         55:b0:8d:46:1b:21:10:bb:c0:de:74:b1:03:2b:87:40:de:ca:
         00:bd:7a:10:af:67:4b:e4:cb:ed:ea:03:54:4e:7a:97:43:2f:
         a9:df:16:ca:11:bf:d8:e6:cf:27:34:7c:7a:8e:69:2e:ef:45:
         8f:bc:19:e9:6a:4a:e5:8f:1a:f5:42:25:ce:1c:9d:8f:b6:6d:
         36:a5:2a:91:10:1a:74:9a:20:64:3f:2b:b9:2d:39:1a:84:55:
         37:46:2d:c4:c8:34:94:6a:fb:03:8e:47:35:ec:4b:87:a8:be:
         11:01:ab:20:b8:e2:06:ae:6b:e9:42:63:f8:54:8f:99:8a:91:
         f8:31:e4:2c:44:de:1b:40:ab:87:45:3e:72:a4:2b:25:1d:31:
         1a:0b:45:78:ba:62:dc:12:85:e8:67:9d:e4:4a:1f:33:79:62:
         e1:ea:c0:d1:65:60:d6:aa:9b:e2:09:1e:e4:e5:9c:5e:ab:92:
         4c:08:fd:b4:a0:58:fb:43:a5:09:bb:ea:1c:c1:c6:1b:57:ae:
         78:a5:03:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:15:29 2025 by rpki-client