Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
File:                     VY3MXX5oh8lBrjsozjy_L7TyBgM.mft (raw, json)
Hash identifier:          aZ9r3nZqhFLyV0/K0fMgxj86UyblqKqXdyDeV2qSNMo=
Subject key identifier:   6F:31:D8:15:00:CD:76:62:DA:55:3A:61:8F:CF:A1:FD:34:A0:10:AC
Authority key identifier: 55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03
Certificate issuer:       /CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
Certificate serial:       01958B4D6AC1AF1697900EB7D9C0933C4C7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
Manifest number:          13E5
Signing time:             Wed 12 Mar 2025 17:01:01 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:01 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:01 +0000
Files and hashes:         1: O6XxnBxdjAHrB6cqnybF-q5zhEI.roa (hash: I3o5BuOlE43DLGmjrJZTKVLwzcox6qkRQGzuUzhTBPQ=)
                          2: VY3MXX5oh8lBrjsozjy_L7TyBgM.crl (hash: qwChKjRT9PvSW6Bl25XIjfKDPwbdgNidafpo93GlPAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4d:6a:c1:af:16:97:90:0e:b7:d9:c0:93:3c:4c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558dcc5d7e6887c941ae3b28ce3cbf2fb4f20603
        Validity
            Not Before: Mar 12 17:01:01 2025 GMT
            Not After : Mar 13 17:01:01 2025 GMT
        Subject: CN=6f31d81500cd7662da553a618fcfa1fd34a010ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:38:c2:e2:6e:16:fd:f2:d1:7c:00:28:97:
                    1f:3d:11:6e:b6:ae:39:35:1d:47:ca:11:cc:cf:0f:
                    88:56:11:54:11:a1:1d:2d:8d:4a:d3:ec:8d:b6:73:
                    bf:c3:86:22:81:e1:db:76:60:5c:f2:fa:34:1a:6c:
                    60:49:06:01:77:38:a1:b0:46:aa:a2:7b:cf:4c:c4:
                    00:08:bf:0a:67:39:87:55:16:2d:a7:c5:4a:bc:3c:
                    d3:3f:b5:a8:e4:dc:cc:7e:a0:5f:2f:7c:1a:43:8f:
                    54:52:28:c5:fb:bc:b3:8f:b9:69:f4:75:fb:1c:6d:
                    6e:bb:21:9e:41:7f:f4:b4:12:ea:ef:0e:6e:56:a1:
                    c5:f5:91:f9:20:b8:bf:f9:1f:56:7e:ee:b0:62:45:
                    ed:92:98:31:06:14:5c:a7:29:04:0f:07:95:5a:99:
                    7b:96:48:ee:dc:84:fc:30:01:c6:6b:af:ea:da:f4:
                    ba:2a:09:66:83:c6:55:ce:a9:ce:f1:34:5d:b7:f7:
                    85:d0:fa:62:d3:a9:59:ea:50:6a:67:da:25:08:10:
                    38:1f:46:07:93:df:4f:1f:a1:c1:24:2b:23:b2:83:
                    e4:3b:b0:49:2b:af:c9:2a:03:b4:46:90:0d:27:be:
                    27:a6:9e:81:13:e0:a0:f1:0e:28:d0:3a:df:e7:13:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:D8:15:00:CD:76:62:DA:55:3A:61:8F:CF:A1:FD:34:A0:10:AC
            X509v3 Authority Key Identifier:
                keyid:55:8D:CC:5D:7E:68:87:C9:41:AE:3B:28:CE:3C:BF:2F:B4:F2:06:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VY3MXX5oh8lBrjsozjy_L7TyBgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f04a57-5ee9-4b6a-9da2-bd9a3b55f125/1/VY3MXX5oh8lBrjsozjy_L7TyBgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:eb:03:f6:c0:0f:df:c0:f6:13:6a:29:b1:f8:fe:61:03:
         d6:3a:93:6a:bd:1c:05:87:bc:5e:20:b0:61:54:41:07:f4:fc:
         ca:fe:6e:12:56:69:d3:1f:a9:cf:aa:74:c4:d1:ae:3c:70:92:
         7d:64:38:54:d5:b9:58:ff:c6:9d:74:dc:6c:84:e7:87:ab:a4:
         f2:2e:46:4e:a1:a5:07:27:01:f9:4b:19:bd:7a:b1:3e:30:e9:
         3e:39:c2:73:1e:29:0c:0e:7c:cb:c8:f9:d0:af:25:c8:05:02:
         41:d3:79:0a:74:62:0d:8f:f9:18:b4:4b:f6:a2:90:d8:99:39:
         07:5d:04:03:2b:69:a7:97:a6:68:ee:34:43:15:ca:78:b6:f6:
         1b:c2:4d:2f:9f:23:eb:a1:2d:d6:16:ac:df:82:5a:de:5a:e6:
         61:8b:8e:3d:b5:a0:6a:c3:a2:6e:3d:d1:78:ef:54:d3:0c:f3:
         90:41:13:69:69:02:ef:c0:2e:31:e8:74:ab:85:dc:c3:21:6d:
         b0:52:59:59:b2:d8:cf:5c:7d:7a:88:a9:00:5b:78:08:2a:bc:
         1e:2b:c5:7f:a7:c6:2f:65:5d:74:9f:83:c3:6c:1f:46:0a:11:
         3b:f6:fa:e1:e2:19:d0:87:a0:94:d8:be:bc:0b:0c:a7:37:27:
         97:43:95:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:51 2025 by rpki-client