Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          zbQlBEYO3NJ2b76DX6/jSLX0WYwm3wv9d7Xq9KJjRyc=
Subject key identifier:   E9:21:C6:83:79:2E:09:D9:8B:65:A4:8C:3E:FD:CA:56:DB:20:FE:58
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       01958EBD417B8169DC872B7578C6CE1133FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          0693
Signing time:             Thu 13 Mar 2025 09:02:02 +0000
Manifest this update:     Thu 13 Mar 2025 09:02:02 +0000
Manifest next update:     Fri 14 Mar 2025 09:02:02 +0000
Files and hashes:         1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: Oe4SO1fn4wsPowLaMHUaJx2wGzxeX2895SELAmdE6AI=)
                          2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8e:bd:41:7b:81:69:dc:87:2b:75:78:c6:ce:11:33:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: Mar 13 09:02:02 2025 GMT
            Not After : Mar 14 09:02:02 2025 GMT
        Subject: CN=e921c683792e09d98b65a48c3efdca56db20fe58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:0c:36:ed:71:89:b7:7f:71:cf:64:f5:6f:
                    69:c3:56:04:83:cf:fa:99:21:e2:ee:08:57:d9:e5:
                    6a:a7:43:93:e5:8a:99:6e:f5:c2:d5:1a:23:fe:d7:
                    bd:e1:97:5d:73:f6:67:92:e6:ff:24:71:e6:39:cc:
                    90:55:d9:75:1e:14:98:f1:20:eb:6d:7c:37:d8:1c:
                    d4:c3:17:8f:7c:c3:33:57:22:03:ad:4d:97:0c:d0:
                    76:5d:41:3a:e1:e6:c7:b2:f8:bc:0c:76:46:2c:ef:
                    4b:90:93:36:4e:5c:86:6d:d6:f9:1b:47:88:6d:be:
                    0a:3f:2b:82:3f:75:92:b2:97:6e:81:7e:4b:c8:ca:
                    b3:01:f8:02:cb:dd:72:45:79:48:d2:64:30:2c:5b:
                    e7:7f:36:b7:26:0d:06:8b:01:62:9a:40:b0:8f:d7:
                    aa:5c:e8:96:42:12:2e:55:1c:d4:78:2b:88:99:42:
                    63:fd:b3:f9:bd:19:76:67:7a:f3:3c:fd:0a:5c:71:
                    0e:5c:78:f1:84:9d:42:ff:cf:61:e7:8a:6c:2c:4b:
                    d6:5f:f0:c1:19:6d:65:3f:07:45:80:f0:de:b7:4a:
                    56:72:8d:63:96:b9:3e:57:c1:73:09:aa:eb:a5:25:
                    e8:34:d1:26:b3:14:80:a0:46:e0:ba:ad:16:bc:73:
                    6c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:C6:83:79:2E:09:D9:8B:65:A4:8C:3E:FD:CA:56:DB:20:FE:58
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c8:48:2f:11:26:ff:6d:cb:51:73:fc:71:2d:49:15:a7:44:
         03:8c:7b:23:7f:25:46:63:f7:7d:92:31:9d:d1:e5:b1:98:5f:
         bc:19:c9:98:35:19:d0:e1:ed:46:ee:38:33:f5:6b:d5:ee:6f:
         93:28:c3:9e:16:ff:50:21:96:d0:74:16:c7:67:c3:f8:b6:4a:
         14:66:0d:67:db:a6:53:01:35:98:2e:97:ee:39:5a:fa:77:5b:
         8e:0c:ad:d7:87:0a:ef:37:05:4c:f7:a0:d3:98:e1:a4:52:24:
         8a:53:b1:0a:41:9b:3d:73:c7:fb:7e:9d:5c:20:80:da:c5:f0:
         44:5a:41:32:e2:6f:51:2d:a8:0b:42:d5:6d:43:3e:0e:61:56:
         97:17:40:5d:a3:15:a0:2a:d5:74:fb:8d:a0:45:5f:28:8b:bb:
         56:4a:a7:10:3d:5a:78:50:fd:02:64:c6:95:28:f6:b7:36:9f:
         71:6e:3c:1e:5a:09:be:11:ba:bd:34:0b:d6:3c:4b:05:3f:c1:
         a9:a7:41:dc:1c:50:20:33:17:85:47:12:49:f9:44:bf:02:e2:
         42:e3:c0:d7:0b:b1:a8:af:8c:9a:3e:35:c2:89:47:f7:11:22:
         cf:5d:46:10:88:18:b2:d2:db:32:54:ef:be:46:45:de:fb:0d:
         1f:9d:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:35:58 2025 by rpki-client