Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File:                     VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier:          ahMF56oD8qelu+WpFnuDwksWvYjQ81putJ/5TFr9V/g=
Subject key identifier:   8A:41:70:D3:32:E4:02:15:01:8D:E7:47:0D:FF:8E:3E:DA:EC:1D:E0
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer:       /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial:       0196520034A2F091C0ECE6D8125CAE5539C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number:          0381
Signing time:             Sun 20 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 20 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 21 Apr 2025 07:01:07 +0000
Files and hashes:         1: RlHwhR54JFo3eiYjQ0HNmngGq1c.roa (hash: Zd+He0y/cu8f6yOcHa/4lo5/3/FYNL3U25I+7MQxDIs=)
                          2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: pz82aILmLHw0A0R19WKdrak7jM7k1gFT5aCKgO7M3a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:52:00:34:a2:f0:91:c0:ec:e6:d8:12:5c:ae:55:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
        Validity
            Not Before: Apr 20 07:01:07 2025 GMT
            Not After : Apr 21 07:01:07 2025 GMT
        Subject: CN=8a4170d332e40215018de7470dff8e3edaec1de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5f:45:f3:40:76:e2:63:53:9d:f5:5a:f4:32:
                    bf:f8:5d:69:7c:10:28:c0:b4:0f:2c:25:fb:1b:f6:
                    14:71:e9:c4:d2:88:d9:6f:29:32:f0:ea:8e:b3:c7:
                    ee:36:0c:16:3c:dd:a3:65:6d:30:3e:dd:52:3e:7c:
                    3c:a2:4c:00:4e:ca:60:bd:c4:e4:40:bc:85:df:bf:
                    6e:4d:ea:ad:09:94:df:79:d1:b1:08:60:87:9d:1f:
                    e2:3f:96:89:65:26:9c:2d:b6:a3:1a:1a:f6:b3:b9:
                    dc:18:17:c9:b8:d1:2e:63:94:8c:0b:d2:5e:d8:cf:
                    7a:6e:ad:9b:f7:d9:d7:0f:71:39:91:1d:60:04:1b:
                    23:7f:1e:b5:4f:7b:78:c6:94:82:c0:53:f5:84:eb:
                    8e:0c:ab:c6:c0:1d:3f:71:75:9e:e2:ab:49:1c:84:
                    66:d0:d8:22:05:a7:26:88:cd:66:9e:8e:72:a0:12:
                    f3:21:e0:24:74:e2:ff:1f:6b:a2:60:cf:5e:24:d0:
                    f5:2c:da:0a:ce:74:13:e4:f5:5f:13:48:21:53:6a:
                    91:ab:32:65:07:ec:0b:be:1c:6a:ed:dd:c9:7b:22:
                    9d:88:5d:1d:33:1f:e5:c4:55:6b:db:bc:0d:4b:02:
                    61:e9:30:a9:8b:e8:27:01:1f:c7:72:1f:9f:79:37:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:41:70:D3:32:E4:02:15:01:8D:E7:47:0D:FF:8E:3E:DA:EC:1D:E0
            X509v3 Authority Key Identifier:
                keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:11:5b:32:96:77:cc:78:91:07:25:19:b7:16:b4:c5:fe:
         23:0e:a4:56:cc:64:aa:95:77:e6:fd:f3:02:fa:6b:90:7a:7d:
         2d:4b:0b:55:ae:05:f1:a0:e7:5a:b6:06:05:ec:78:83:df:f3:
         71:82:3c:16:14:0a:34:87:8d:79:6a:00:ad:4a:d4:c1:e8:06:
         a6:d5:db:d5:24:78:4a:fd:95:00:18:97:eb:3d:ef:d2:32:2a:
         63:9d:be:20:a6:ed:e7:68:e4:f6:66:75:98:3a:60:19:46:22:
         ee:6f:d8:5f:1a:17:fc:d4:05:6e:95:9b:31:36:4b:c7:66:b8:
         59:13:a3:13:66:fa:77:39:3c:76:7c:1e:41:a7:e2:29:13:e0:
         ba:2e:42:23:47:58:3f:09:2e:0b:2c:51:23:e5:df:2d:d7:dc:
         f2:39:93:35:35:0c:ec:93:95:c2:bd:8a:68:ea:41:13:bd:23:
         56:5c:2e:a8:f6:62:85:7e:a3:ff:4e:1d:8f:e6:fa:70:5a:9b:
         fb:6b:a4:d0:de:7c:7a:cd:d8:3c:94:81:6f:a5:70:a7:4a:e2:
         ca:c8:6e:b4:1d:25:13:b4:fa:71:77:5b:be:ad:9e:5a:43:90:
         9f:a3:8d:ee:83:62:d7:07:af:e1:c7:c6:51:58:cc:5f:c4:b3:
         1b:74:06:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSADSi8JHA7ObYElyuVTnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmVkMTFiYjZkNWUyZDZhNmVhYmExOWRhZjYzN2I1M2Y3
NjdlZDUwHhcNMjUwNDIwMDcwMTA3WhcNMjUwNDIxMDcwMTA3WjAzMTEwLwYDVQQD
Eyg4YTQxNzBkMzMyZTQwMjE1MDE4ZGU3NDcwZGZmOGUzZWRhZWMxZGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV9F80B24mNTnfVa9DK/+F1pfBAo
wLQPLCX7G/YUcenE0ojZbyky8OqOs8fuNgwWPN2jZW0wPt1SPnw8okwATspgvcTk
QLyF379uTeqtCZTfedGxCGCHnR/iP5aJZSacLbajGhr2s7ncGBfJuNEuY5SMC9Je
2M96bq2b99nXD3E5kR1gBBsjfx61T3t4xpSCwFP1hOuODKvGwB0/cXWe4qtJHIRm
0NgiBacmiM1mno5yoBLzIeAkdOL/H2uiYM9eJND1LNoKznQT5PVfE0ghU2qRqzJl
B+wLvhxq7d3JeyKdiF0dMx/lxFVr27wNSwJh6TCpi+gnAR/Hch+feTcLUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpBcNMy5AIVAY3nRw3/jj7a7B3gMB8GA1UdIwQY
MBaAFFVu0Ru21eLWpuq6Gdr2N7U/dn7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYt
MTk5ODY2NWJkNzkzLzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yMmJmOWYtYzBjOC00NzUwLWIxYmYtMTk5ODY2NWJkNzkz
LzEvVlc3Ukc3YlY0dGFtNnJvWjJ2WTN0VDkyZnRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7gRWzKW
d8x4kQclGbcWtMX+Iw6kVsxkqpV35v3zAvprkHp9LUsLVa4F8aDnWrYGBex4g9/z
cYI8FhQKNIeNeWoArUrUwegGptXb1SR4Sv2VABiX6z3v0jIqY52+IKbt52jk9mZ1
mDpgGUYi7m/YXxoX/NQFbpWbMTZLx2a4WROjE2b6dzk8dnweQafiKRPgui5CI0dY
PwkuCyxRI+XfLdfc8jmTNTUM7JOVwr2KaOpBE70jVlwuqPZihX6j/04dj+b6cFqb
+2uk0N58es3YPJSBb6Vwp0riyshutB0lE7T6cXdbvq2eWkOQn6ON7oNi1wev4cfG
UVjMX8SzG3QGxg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 14:26:49 2025 by rpki-client