Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
File:                     Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft (raw, json)
Hash identifier:          gvw9dmS97o2Si2PQO5u24f2+NOFjadffhieEIvah5L0=
Subject key identifier:   32:DE:36:C4:D2:D2:1D:15:0E:86:21:C6:CA:35:CB:09:C8:85:D5:E5
Authority key identifier: 56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20
Certificate issuer:       /CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
Certificate serial:       01974B1F609EC512C6FB408A0FE1E68398E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
Manifest number:          1020
Signing time:             Sat 07 Jun 2025 16:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:36 +0000
Files and hashes:         1: Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl (hash: A2TfNkkxOaY0dKbDzVYW587zcwYcs1PLHAVlnc00rus=)
                          2: oUhkxIulPtQeLWZAap9t1mlG6ec.roa (hash: ajp39CXFmDkVYsw0WCJ5aOTXiyIplQgAr9vcF3fe87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:60:9e:c5:12:c6:fb:40:8a:0f:e1:e6:83:98:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560eff1d23161feaa08a1994e1dd4b46a8383f20
        Validity
            Not Before: Jun  7 16:00:36 2025 GMT
            Not After : Jun  8 16:00:36 2025 GMT
        Subject: CN=32de36c4d2d21d150e8621c6ca35cb09c885d5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:5f:3b:c3:a4:06:91:f7:b6:99:ab:23:c3:
                    66:81:d3:e1:b8:4e:3d:8e:0d:97:06:da:11:f3:7a:
                    41:48:7f:c3:fd:15:ca:6a:49:46:d2:c4:b7:0a:d9:
                    a8:af:6e:32:e0:40:8f:f4:c6:9d:30:41:e4:e9:94:
                    9b:e6:e7:f2:aa:c0:ee:07:58:f8:7b:51:81:1d:50:
                    f7:b2:10:b2:99:13:48:30:ae:a1:ef:9b:3d:31:6d:
                    fd:c1:d7:57:ee:f1:4b:32:32:33:b2:0d:fe:ad:19:
                    5c:44:e7:06:d0:ac:a4:ac:61:88:45:73:4a:a4:ee:
                    8f:af:c0:ca:0c:2d:01:af:b9:b6:35:7d:07:30:f6:
                    31:a4:a2:01:5b:1b:d1:bf:e6:4b:0e:1c:33:47:b7:
                    f3:e5:28:d0:89:c3:fb:82:c1:cd:d3:05:93:1e:21:
                    d0:57:bf:58:6a:43:62:7e:fd:a6:ae:d5:28:32:c9:
                    12:12:34:4a:1e:58:1f:1c:cc:9c:4b:6b:66:2c:b9:
                    1f:d7:66:94:cf:8a:6c:85:fd:a8:ba:f5:d7:cf:1b:
                    b6:07:db:7e:1b:42:06:ea:27:53:60:ed:86:39:6d:
                    f3:72:7a:9c:11:46:78:55:82:45:48:94:38:01:6b:
                    74:23:8f:63:b0:32:d4:38:1f:e4:56:ef:79:4e:fc:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:DE:36:C4:D2:D2:1D:15:0E:86:21:C6:CA:35:CB:09:C8:85:D5:E5
            X509v3 Authority Key Identifier:
                keyid:56:0E:FF:1D:23:16:1F:EA:A0:8A:19:94:E1:DD:4B:46:A8:38:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg7_HSMWH-qgihmU4d1LRqg4PyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96705-1cb7-43b9-96dd-4c2d4c4b5f0a/1/Vg7_HSMWH-qgihmU4d1LRqg4PyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d6:bf:4d:ef:51:33:9f:80:99:ed:4f:d4:eb:25:8a:3e:d1:
         8a:28:fe:bf:ad:2a:93:5b:e8:1a:5a:ad:c9:a3:c2:91:94:6a:
         40:8d:8d:9e:3f:37:d8:48:3f:f6:14:2f:19:ad:7b:c4:8f:b7:
         3f:1a:d8:08:e2:2f:c2:ee:a8:98:a1:c2:e8:ff:cf:18:f9:50:
         2c:49:e9:3f:66:78:d5:31:6e:4e:49:d9:03:b3:5c:6d:56:76:
         b5:f3:21:46:59:9d:fc:97:fd:d1:65:7d:83:d6:94:f1:77:3e:
         e7:29:ce:f0:3a:f5:d6:a2:0a:ac:de:dc:e2:31:ce:f0:cd:0e:
         e5:31:15:29:59:57:85:0b:96:77:a9:70:c1:31:b0:9a:4f:dd:
         3f:38:b9:c7:29:41:75:32:40:48:13:8d:cc:1e:d7:5a:0e:d7:
         14:7d:f7:bc:2d:c8:02:28:84:ce:0f:a6:53:34:4d:d0:2a:a7:
         fc:7f:f5:9c:90:91:64:ec:f4:29:77:56:0b:ef:a1:01:8f:03:
         ba:b4:47:b8:62:fd:84:7d:6c:4a:f3:2e:22:fe:8f:99:52:29:
         8d:f5:a4:f9:be:90:b0:0e:99:c1:9d:80:73:27:ca:7a:0d:ba:
         60:15:5f:cf:25:b3:f7:69:5b:b7:ab:b1:96:ab:6b:a4:0e:cf:
         ae:a3:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:20 2025 by rpki-client