Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          WWR5tc5R4iSU5FLHF3aGt/gXp1hjBIqR2mEXc0CPwTQ=
Subject key identifier:   80:53:F9:91:92:04:C9:5E:9A:E6:8D:50:5A:D1:36:69:78:2C:23:C6
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019610572579B913BA9751A4D18C0BFB0CF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          07BB
Signing time:             Mon 07 Apr 2025 13:01:08 +0000
Manifest this update:     Mon 07 Apr 2025 13:01:08 +0000
Manifest next update:     Tue 08 Apr 2025 13:01:08 +0000
Files and hashes:         1: Lh0KUJ3V35wYz2i99gYTrV6dktc.roa (hash: Svr4T1ZPQxakxnAH0s4zkcIB6ko9R8TkXB+xdSHMUeE=)
                          2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: KiPtnvnJSLI2CYOq3rkr99LRobikWEL4AJZkhCW3oHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:57:25:79:b9:13:ba:97:51:a4:d1:8c:0b:fb:0c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Apr  7 13:01:08 2025 GMT
            Not After : Apr  8 13:01:08 2025 GMT
        Subject: CN=8053f9919204c95e9ae68d505ad13669782c23c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:21:d4:3c:58:49:f0:19:4e:58:47:16:d2:a8:
                    27:bc:d4:08:d0:4a:8a:d3:37:22:4a:99:cb:ed:36:
                    34:cc:05:19:9c:1f:c6:a5:55:29:1c:bd:09:66:ae:
                    17:1c:fb:29:90:79:3e:bf:03:a3:a9:bb:5e:1a:3e:
                    69:26:32:31:81:32:d3:5f:d1:02:a8:ce:31:bb:8d:
                    d7:17:f2:2a:e9:85:c5:d6:84:87:ce:45:8a:a7:e5:
                    72:40:dd:51:0a:f5:48:d5:95:58:c7:c5:cf:f7:83:
                    a1:f7:56:5a:73:c9:18:0d:46:1b:bd:d2:49:8f:9d:
                    e7:64:ec:87:c2:94:2d:73:66:63:60:ca:f9:a5:ea:
                    75:e3:08:c3:8f:3e:6b:a7:af:e0:5c:29:b8:a4:62:
                    5a:bb:49:68:c7:b9:dc:58:d8:7f:28:96:2e:8d:b2:
                    19:9b:be:03:19:03:29:bb:a2:88:39:1b:9d:59:b6:
                    75:2e:2d:cd:ab:b1:a4:96:85:11:bb:03:bb:cd:39:
                    a1:e7:44:5a:96:ac:af:cd:b4:29:a6:12:af:7c:02:
                    90:4d:43:fd:8a:a0:84:c1:d1:05:bb:9d:87:7a:91:
                    df:6e:43:6d:8a:f2:27:1b:d7:51:ef:21:b9:08:96:
                    75:24:c8:da:55:68:d4:bf:2a:7a:6b:1e:35:96:9e:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:F9:91:92:04:C9:5E:9A:E6:8D:50:5A:D1:36:69:78:2C:23:C6
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:f6:b7:4b:69:38:64:20:f2:76:99:17:b3:ad:40:92:16:4f:
         ab:3a:90:e3:d3:66:2e:14:9b:69:6c:a7:fd:33:6c:38:2d:6a:
         79:89:61:85:e9:93:e7:ce:eb:c4:1d:90:a1:31:95:32:35:cc:
         96:7e:6e:4b:2d:c4:c3:65:03:e1:d2:7e:36:3c:ec:7e:ae:fb:
         fa:76:a1:fa:88:49:d3:e0:99:7a:38:9a:fc:6f:be:43:9f:48:
         50:dd:08:b2:4a:18:86:9b:3e:e7:1e:b7:7c:9d:a8:11:9b:6b:
         76:a8:1c:8a:49:32:09:36:2e:3d:b0:4b:07:7d:19:6c:28:26:
         63:7b:7c:73:17:59:2f:1b:21:04:42:26:d9:6b:92:9f:43:18:
         65:19:1e:5c:fe:ba:6a:e5:31:44:25:0c:f0:8a:80:7e:57:2a:
         71:cc:50:59:19:45:78:9c:94:02:cc:dc:17:86:50:e3:34:9b:
         c7:c7:34:ff:24:39:5a:98:43:73:44:4a:b2:82:0e:50:54:fd:
         81:19:d4:2a:0d:9b:aa:ba:ec:ca:ed:7b:70:24:85:cc:b7:ae:
         08:d3:dd:5c:5e:e7:36:62:b1:a3:6e:ed:8e:01:a6:d0:6a:28:
         67:04:82:37:d0:a4:c1:81:8d:47:e7:62:0b:d7:a9:5c:95:1d:
         29:7d:a4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:47:44 2025 by rpki-client