Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File:                     vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier:          tVFeJSR92w2qaFk39bPDY+mdhsLz/Kldg9OFHXG6GgE=
Subject key identifier:   3D:AF:46:38:DA:14:C3:D7:55:56:0C:8F:B2:FA:A0:43:68:C3:7E:16
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer:       /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial:       01962D4ECE35C638E3105787C459C2293FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 04:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 04:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 04:01:01 +0000
Files and hashes:         1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
                          2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
                          3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
                          4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: 7MQnPgH6St2wDFQJhiUVG/anh/QwgMEJqe67hE5RD6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:4e:ce:35:c6:38:e3:10:57:87:c4:59:c2:29:3f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
        Validity
            Not Before: Apr 13 04:01:01 2025 GMT
            Not After : Apr 14 04:01:01 2025 GMT
        Subject: CN=3daf4638da14c3d755560c8fb2faa04368c37e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:04:69:da:d5:91:4d:e9:c5:02:ac:22:e8:74:
                    6e:df:d8:aa:ed:28:fb:af:75:62:68:4f:8e:11:b5:
                    d8:50:46:65:88:9e:d7:70:15:7b:02:0e:54:4c:af:
                    a2:0f:7f:de:b8:8a:1a:36:a2:9f:c1:3d:0c:c2:cc:
                    26:c2:cb:97:a7:d8:3e:57:f1:ea:24:2d:16:ed:bf:
                    ca:eb:51:23:4f:7a:93:47:dc:5e:38:5a:10:1c:be:
                    79:23:56:17:ca:11:66:04:1c:79:2a:d4:09:3c:6e:
                    db:71:9a:ba:3f:b9:21:04:cc:9e:7a:3d:4d:48:19:
                    ad:43:e0:7b:e3:9c:1d:1c:31:68:d6:47:db:0d:e1:
                    06:8f:1b:b9:b8:eb:49:8f:52:41:d7:f7:d1:0f:1e:
                    c2:68:12:36:53:fc:af:c2:9b:04:3c:2d:2e:f2:d7:
                    4c:c1:11:da:ae:e8:b5:e7:30:f9:2c:68:3b:99:ca:
                    eb:92:66:b6:d6:62:e2:3b:c7:ef:da:23:fe:42:b7:
                    6c:17:08:19:60:ce:3a:ab:9d:e7:33:81:b0:b3:62:
                    a1:68:2b:26:24:8a:1f:ad:e0:0c:33:88:ed:f4:2a:
                    66:36:75:c2:e0:85:62:41:ab:95:43:b2:9a:7d:30:
                    b6:3b:9d:c3:95:78:9a:ec:e3:5c:5d:0c:c1:ff:7c:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AF:46:38:DA:14:C3:D7:55:56:0C:8F:B2:FA:A0:43:68:C3:7E:16
            X509v3 Authority Key Identifier:
                keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9a:ae:96:ef:b6:3f:1d:85:1c:bd:60:38:72:76:55:19:6e:
         b6:af:6a:88:62:e1:3d:31:4b:c1:9a:03:68:55:e5:08:ba:db:
         e2:ad:da:03:03:ff:0a:61:7b:e3:1e:96:fc:19:c0:33:99:b5:
         79:6e:1a:e5:99:f0:0b:70:9a:bf:a9:cd:c8:69:d9:7f:a7:b8:
         0d:9f:70:7b:84:0c:6c:5c:b4:bd:22:7e:97:fe:ed:cf:97:a6:
         95:72:91:c1:85:7b:73:6e:29:cf:f4:c4:8e:41:df:cb:ea:92:
         4a:ef:3d:43:53:ef:ca:ee:08:50:cf:a3:7b:24:9b:92:39:78:
         9a:2a:1c:e3:e6:9e:df:b6:2c:02:47:16:1d:36:3b:49:59:ef:
         0e:3c:ea:d6:a7:de:99:9d:ef:81:c5:bc:34:57:58:13:06:43:
         22:e7:12:23:cd:2b:c9:f8:f3:d6:03:57:a4:29:0f:18:c3:33:
         f2:c1:5d:81:4b:47:1f:f4:80:87:67:00:a1:d2:76:93:c8:1c:
         3a:b4:1d:61:b8:e0:38:f0:94:f8:d8:98:31:74:51:6f:77:1e:
         e7:aa:70:4c:a6:fa:9c:70:6a:de:0a:ab:e4:da:e7:09:6e:9f:
         b8:72:32:36:be:68:9a:67:4e:07:e1:52:85:15:42:8b:46:46:
         09:81:72:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYtTs41xjjjEFeHxFnCKT/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTBlYzU5NTY0MzI0MjM3NDIwZDUwNmI5YjQ5OGQ3NTJl
ZTIxNjgwHhcNMjUwNDEzMDQwMTAxWhcNMjUwNDE0MDQwMTAxWjAzMTEwLwYDVQQD
EygzZGFmNDYzOGRhMTRjM2Q3NTU1NjBjOGZiMmZhYTA0MzY4YzM3ZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoARp2tWRTenFAqwi6HRu39iq7Sj7
r3ViaE+OEbXYUEZliJ7XcBV7Ag5UTK+iD3/euIoaNqKfwT0MwswmwsuXp9g+V/Hq
JC0W7b/K61EjT3qTR9xeOFoQHL55I1YXyhFmBBx5KtQJPG7bcZq6P7khBMyeej1N
SBmtQ+B745wdHDFo1kfbDeEGjxu5uOtJj1JB1/fRDx7CaBI2U/yvwpsEPC0u8tdM
wRHarui15zD5LGg7mcrrkma21mLiO8fv2iP+QrdsFwgZYM46q53nM4Gws2KhaCsm
JIofreAMM4jt9CpmNnXC4IViQauVQ7KafTC2O53DlXia7ONcXQzB/3zr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2vRjjaFMPXVVYMj7L6oENow34WMB8GA1UdIwQY
MBaAFLyg7FlWQyQjdCDVBrm0mNdS7iFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMt
N2M1NDlmMWVkMTZjLzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yNDNiNTMtNGI5NC00MjQ0LWE4ZWMtN2M1NDlmMWVkMTZj
LzEvdktEc1dWWkRKQ04wSU5VR3ViU1kxMUx1SVdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZqulu+2
Px2FHL1gOHJ2VRlutq9qiGLhPTFLwZoDaFXlCLrb4q3aAwP/CmF74x6W/BnAM5m1
eW4a5ZnwC3Cav6nNyGnZf6e4DZ9we4QMbFy0vSJ+l/7tz5emlXKRwYV7c24pz/TE
jkHfy+qSSu89Q1Pvyu4IUM+jeySbkjl4mioc4+ae37YsAkcWHTY7SVnvDjzq1qfe
mZ3vgcW8NFdYEwZDIucSI80ryfjz1gNXpCkPGMMz8sFdgUtHH/SAh2cAodJ2k8gc
OrQdYbjgOPCU+NiYMXRRb3ce56pwTKb6nHBq3gqr5NrnCW6fuHIyNr5ommdOB+FS
hRVCi0ZGCYFy8w==
-----END CERTIFICATE-----
Generated at Sun Apr 13 08:44:20 2025 by rpki-client