Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
File:                     VZe006Zk2swkk01I3RiOoY6PJ8E.mft (raw, json)
Hash identifier:          yKSgxg1OCHM4AopyeFePQD/2TqXvtdGdAfNP5b075to=
Subject key identifier:   C8:1E:27:8B:2E:99:75:60:E9:EA:0E:C1:10:91:4E:61:C5:B5:AC:CA
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       01963C1D905D37422058173211B959890720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
Manifest number:          0BD8
Signing time:             Wed 16 Apr 2025 01:01:32 +0000
Manifest this update:     Wed 16 Apr 2025 01:01:32 +0000
Manifest next update:     Thu 17 Apr 2025 01:01:32 +0000
Files and hashes:         1: 8kfnwOtBgq_5_lkL_XTWGS_DW2A.roa (hash: R1ovdHUKN/hPy17oklKDPDEJOp9Mxs/OWbcQb2xo5Ek=)
                          2: VZe006Zk2swkk01I3RiOoY6PJ8E.crl (hash: 6xekVEvpWT5T5UZLia6sZtRPQfPkqcZqGUL6wfAZLkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:1d:90:5d:37:42:20:58:17:32:11:b9:59:89:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Apr 16 01:01:32 2025 GMT
            Not After : Apr 17 01:01:32 2025 GMT
        Subject: CN=c81e278b2e997560e9ea0ec110914e61c5b5acca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:95:01:73:03:07:10:dd:29:96:00:60:da:ee:
                    25:78:21:cc:19:c2:55:4f:01:83:86:4b:9c:af:99:
                    90:2c:af:a5:f3:92:1d:a1:33:bc:65:07:a1:1b:5c:
                    6a:ed:11:3c:4c:10:14:50:60:64:0c:9b:ad:e2:9f:
                    97:4f:e8:65:9a:5a:04:9d:a7:8a:3b:1b:f9:52:fe:
                    60:74:35:8d:a1:22:54:aa:e3:59:ed:97:b5:c8:07:
                    8f:db:6a:e6:c3:2e:94:41:c3:16:76:94:15:2c:cc:
                    34:a2:a8:b1:48:e2:d0:2e:54:a6:b0:10:db:c9:4c:
                    91:2e:4f:e4:51:b4:0d:32:0a:b9:6b:32:cf:3b:39:
                    64:b2:b8:eb:cf:54:26:1d:6b:44:14:c1:a7:f0:a0:
                    aa:83:74:00:ee:81:ac:c0:99:28:81:b1:4a:54:46:
                    9d:34:7f:e1:a9:a6:83:9f:d1:7a:24:ca:ba:e9:bf:
                    26:79:97:9f:40:15:9f:54:47:31:1d:4d:d5:c6:88:
                    e8:66:97:39:ff:30:32:2b:54:f1:58:fa:c0:e7:a6:
                    e4:24:9c:45:60:ca:8a:65:b0:d9:2c:6c:7a:53:1d:
                    5e:1d:2d:c1:1b:82:82:1c:86:09:77:d4:ff:cd:53:
                    40:c6:2f:88:eb:1a:a9:ca:d7:8d:d6:d8:cb:1c:45:
                    9a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1E:27:8B:2E:99:75:60:E9:EA:0E:C1:10:91:4E:61:C5:B5:AC:CA
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5d:13:bd:40:c5:9f:d7:c1:fa:3b:e4:f7:76:89:41:99:c8:
         33:f7:3e:2d:2d:ee:3f:fb:a4:60:8b:ab:a5:a1:8c:2a:6d:0d:
         9a:ae:7f:95:92:e7:97:e0:8c:e9:c9:6c:16:9c:d8:76:46:d4:
         70:ca:44:ff:83:52:41:29:b9:10:44:49:1e:04:a5:ae:36:00:
         38:14:38:b9:0b:9b:70:05:c2:ca:6c:19:78:e7:b7:d6:b8:07:
         95:0e:fd:8d:1a:0d:02:77:1e:9f:50:40:c3:00:c7:63:46:f0:
         76:d8:c0:d7:6f:a9:0b:d5:2a:36:97:98:60:e7:28:bf:ee:da:
         97:d2:4b:0f:bb:c8:70:50:6b:4a:88:97:da:71:68:19:fb:6b:
         f2:83:87:33:54:75:02:a7:52:af:d8:40:85:ec:8d:27:a9:b4:
         27:ec:52:82:98:b5:48:76:37:28:0e:bf:69:f8:5f:20:a6:07:
         a5:37:af:85:57:2e:97:d1:0c:b4:bc:34:01:52:38:3b:98:42:
         bb:e8:22:6a:2f:7d:eb:f9:b4:b5:22:53:59:47:b1:f5:50:a2:
         23:e3:70:23:3a:0e:e7:ab:59:85:65:00:9c:04:37:e6:54:8c:
         d7:df:51:35:e8:13:c0:22:5f:75:68:21:bd:0d:0b:97:57:73:
         38:2e:67:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:42:44 2025 by rpki-client