Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
File:                     Vylib6kTE9VuTXZFVy_1gGH9T4w.mft (raw, json)
Hash identifier:          /NYNzskPm9R0NYtPC3rEke1IAQUX26gyExgAWckRnkI=
Subject key identifier:   E7:8A:24:C5:78:10:4C:02:01:12:DD:2F:24:4E:70:3C:1B:6A:D9:46
Authority key identifier: 57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C
Certificate issuer:       /CN=5729626fa91313d56e4d7645572ff58061fd4f8c
Certificate serial:       01958B16FBE929D32250EAFBF0F150D3B7BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
Manifest number:          1496
Signing time:             Wed 12 Mar 2025 16:01:34 +0000
Manifest this update:     Wed 12 Mar 2025 16:01:34 +0000
Manifest next update:     Thu 13 Mar 2025 16:01:34 +0000
Files and hashes:         1: 45ZEV-2i1vRdy90rokjRcQ4xSe4.roa (hash: ZhVSW3BK8XEZVGJDvUY2YgC4tkCCCyYXhiZwWu4Zbno=)
                          2: Vylib6kTE9VuTXZFVy_1gGH9T4w.crl (hash: xFbZF8CZKcEr7Xtd/GP0qeqYOtt5gienKTvkE2bHRys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:fb:e9:29:d3:22:50:ea:fb:f0:f1:50:d3:b7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5729626fa91313d56e4d7645572ff58061fd4f8c
        Validity
            Not Before: Mar 12 16:01:34 2025 GMT
            Not After : Mar 13 16:01:34 2025 GMT
        Subject: CN=e78a24c578104c020112dd2f244e703c1b6ad946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a2:3e:75:0e:59:8a:e3:d0:59:18:ce:0b:11:
                    ba:bd:12:b6:b4:17:6c:f8:a1:a3:4c:90:35:3e:09:
                    cb:43:74:8c:80:e5:bb:9e:f1:69:30:19:27:49:8d:
                    96:67:4d:6c:af:f0:be:f3:90:3d:8d:e5:4a:06:eb:
                    ff:25:a7:56:34:b7:61:1e:40:aa:4d:c1:95:17:ce:
                    a3:2a:a5:98:53:46:26:36:af:5e:b7:16:3b:2c:d6:
                    c3:5e:1a:dd:bf:82:4a:d9:a3:11:7c:b6:af:07:57:
                    a9:15:75:94:62:e9:94:8e:6c:a9:35:9c:3d:97:ff:
                    f0:e1:60:c9:74:e5:16:b2:28:e1:4b:66:9d:42:e7:
                    1a:95:f3:22:33:b2:1b:a3:bc:1e:60:d9:6d:7d:5e:
                    71:ea:c5:5f:e2:0c:39:d7:34:26:2c:d7:81:55:41:
                    30:64:5d:e6:06:4c:13:ec:62:7e:89:55:23:20:df:
                    d6:54:f8:be:a8:4e:97:29:30:26:44:ff:4a:1f:fc:
                    28:19:33:f9:d3:66:27:4a:cf:90:45:2a:c3:3e:d7:
                    b8:d3:15:13:ea:02:53:2f:d4:b8:4f:18:c5:e3:70:
                    e3:de:ad:7a:1c:0d:c7:96:d8:2f:06:a5:94:69:c0:
                    99:4f:14:d0:e9:e3:c9:ac:83:76:f1:6d:07:9f:fa:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:24:C5:78:10:4C:02:01:12:DD:2F:24:4E:70:3C:1B:6A:D9:46
            X509v3 Authority Key Identifier:
                keyid:57:29:62:6F:A9:13:13:D5:6E:4D:76:45:57:2F:F5:80:61:FD:4F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vylib6kTE9VuTXZFVy_1gGH9T4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2d35a9-e802-415c-ba56-7b7b5d4f58fb/1/Vylib6kTE9VuTXZFVy_1gGH9T4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:c6:fd:26:98:75:b6:9f:0d:e9:51:79:77:f1:cc:52:58:
         89:a1:db:a0:4f:c6:c0:f2:b5:c5:ea:d5:e4:70:07:bd:37:3e:
         00:e0:51:37:91:db:18:b3:60:37:ca:48:a8:1c:44:08:5b:21:
         4b:b6:90:66:80:98:a1:bb:2e:79:0f:11:d7:6c:46:35:99:3e:
         e8:95:93:0e:90:df:d9:21:37:84:22:14:39:04:56:9b:97:b3:
         d6:eb:12:40:e7:ed:10:f2:60:a1:7c:f8:d7:23:47:52:c6:18:
         3a:cc:95:e7:10:c9:3f:57:56:40:4d:65:7c:bc:90:be:9d:2e:
         e4:16:b8:ca:f8:54:d6:dc:c8:c6:1b:27:7c:17:6f:c4:f0:bb:
         54:f4:41:ed:fe:34:d7:1a:ff:1e:58:63:85:08:b9:fa:3f:ca:
         5e:e2:fb:62:c9:f0:95:10:1e:dc:f2:65:bb:bf:4a:ed:ff:5a:
         dd:a8:3a:92:27:aa:86:98:69:0b:1d:55:53:b2:b2:1c:5b:61:
         b8:02:da:cf:4d:59:cb:ee:c1:ae:17:ad:05:8e:7e:93:ad:56:
         d8:41:24:79:d1:17:d2:3b:2a:91:9a:07:a9:fc:ee:d4:d9:99:
         b3:6f:e9:f1:b9:cb:00:58:f3:75:09:c5:15:cb:e8:84:6e:b7:
         27:e7:69:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:21:31 2025 by rpki-client