Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          tu/N349te+f5mFKVOz2obNClxHmvsO/UZx2DUqcegMM=
Subject key identifier:   30:C6:DB:08:AD:B0:02:2D:06:87:B5:EA:28:5C:56:01:78:10:C2:2F
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019604C126A81E52D7CE6768DA89050CBF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0AE3
Signing time:             Sat 05 Apr 2025 07:01:29 +0000
Manifest this update:     Sat 05 Apr 2025 07:01:29 +0000
Manifest next update:     Sun 06 Apr 2025 07:01:29 +0000
Files and hashes:         1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
                          2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
                          3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
                          4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: pzqIN4WVUwdyV8Z5TKE4Sr6TgEEYiSn72BUw92OIHTg=)
                          5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:04:c1:26:a8:1e:52:d7:ce:67:68:da:89:05:0c:bf:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Apr  5 07:01:29 2025 GMT
            Not After : Apr  6 07:01:29 2025 GMT
        Subject: CN=30c6db08adb0022d0687b5ea285c56017810c22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:8a:9f:5a:0d:16:27:2c:4c:e2:e3:07:2c:
                    33:1d:4d:14:72:c0:4b:e7:09:54:75:54:5b:50:24:
                    ed:58:f9:3e:0a:dc:0e:b6:1b:8a:d2:d6:ff:f1:6d:
                    07:c0:c8:77:5c:e4:78:43:f9:b4:f2:f6:fe:d2:53:
                    8c:df:44:1f:2d:f9:74:a9:fe:41:51:1d:27:6b:44:
                    13:bb:9a:f4:63:38:02:07:90:5b:ac:95:a0:d0:98:
                    53:03:cf:4d:4d:a9:f8:28:dd:fb:f9:50:57:1e:de:
                    d7:5b:49:12:f6:65:15:2f:8a:23:b4:a1:d0:1d:f6:
                    7c:2f:70:9b:11:62:74:68:40:4d:ac:41:cb:95:d8:
                    15:12:bb:58:4d:3c:16:69:d5:96:f8:c7:62:fc:7c:
                    02:64:91:b6:61:e3:2f:56:50:4b:f6:55:88:4b:59:
                    3e:e8:94:95:a0:71:11:27:e3:ba:d4:12:ad:a9:ac:
                    c7:0b:62:d8:9e:ad:14:28:3b:ba:01:49:48:48:18:
                    16:b8:d6:57:17:0b:58:8f:12:fa:46:8b:f2:1f:17:
                    4a:80:2f:aa:2e:66:6d:26:ad:45:70:50:73:92:2e:
                    6a:87:53:60:67:a5:d3:7d:77:9f:2f:92:19:83:42:
                    b2:dd:78:32:64:f8:69:ab:64:f5:f3:65:ce:a3:7a:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C6:DB:08:AD:B0:02:2D:06:87:B5:EA:28:5C:56:01:78:10:C2:2F
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:34:f9:ec:4f:01:83:2f:79:c8:2f:87:50:e3:78:3e:ec:5b:
         e3:a8:78:97:5f:86:3d:20:38:cf:20:bf:e3:35:13:87:cc:c0:
         f8:00:9f:39:7d:21:fb:0d:4d:53:88:a7:ab:9a:79:3c:8c:26:
         5c:d6:ea:bb:ad:97:14:c7:47:85:b2:9d:01:9e:23:78:01:2c:
         2a:7f:f7:a0:7d:be:8b:f9:51:59:57:4a:fe:25:47:fa:65:77:
         3a:5e:1c:86:da:5e:9a:ab:41:a4:f7:4d:36:47:41:db:e0:eb:
         8c:08:e1:84:94:44:f1:94:30:3a:dc:f5:10:b7:cc:e4:c4:bd:
         c5:51:b5:34:b4:a8:cf:27:8d:a0:b4:c9:5d:61:a4:90:6f:5c:
         6a:10:8e:4d:05:14:42:30:45:e2:c5:50:a7:e9:62:af:4a:4f:
         fe:e1:18:76:2d:b1:c2:fc:11:0c:ea:13:32:af:c3:b5:f5:a6:
         66:99:63:96:81:32:49:23:ff:7a:30:b9:5d:dd:da:09:f8:34:
         1a:dc:b6:d1:9e:d1:9b:fa:20:5b:58:1c:ae:89:39:ed:20:79:
         a3:a9:8a:ae:c8:87:95:83:f9:cb:90:49:f0:c5:c0:9e:6e:66:
         0d:0b:d3:1d:34:79:9e:ad:01:04:6f:d6:a9:e5:42:85:48:a2:
         ef:57:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:17 2025 by rpki-client