Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
File:                     viVOG1zUUoaN8uGZLYjQdgn8TJI.mft (raw, json)
Hash identifier:          n/GLQxSjgZw810dlus0GK/i2O6KxKrt1OiacbFgh1vo=
Subject key identifier:   76:AD:B8:C5:40:51:B7:73:C9:56:A6:9E:0A:32:F1:37:32:95:0C:92
Authority key identifier: BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92
Certificate issuer:       /CN=be254e1b5cd452868df2e1992d88d07609fc4c92
Certificate serial:       019612457CA4DF460676061697D9F12A188F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
Manifest number:          121F
Signing time:             Mon 07 Apr 2025 22:01:05 +0000
Manifest this update:     Mon 07 Apr 2025 22:01:05 +0000
Manifest next update:     Tue 08 Apr 2025 22:01:05 +0000
Files and hashes:         1: Upbmgaxs-6mjxomkKKYIv-UFDZc.roa (hash: xYhTMsW/xH2WlZbbWjmk5dTqOa5c7utc43oMpkeWGxs=)
                          2: viVOG1zUUoaN8uGZLYjQdgn8TJI.crl (hash: jgNx14cMrY71wXF7toQsViX4KA+mOBMZC692SOvpfmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:45:7c:a4:df:46:06:76:06:16:97:d9:f1:2a:18:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be254e1b5cd452868df2e1992d88d07609fc4c92
        Validity
            Not Before: Apr  7 22:01:05 2025 GMT
            Not After : Apr  8 22:01:05 2025 GMT
        Subject: CN=76adb8c54051b773c956a69e0a32f13732950c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:38:22:53:36:80:7e:1d:7f:c1:48:2b:ea:4d:
                    b8:85:59:8f:71:1d:95:66:d7:d6:c6:80:96:96:29:
                    e8:ed:30:94:5b:39:34:b7:46:f1:a0:25:52:ef:92:
                    ec:8f:92:5d:f6:4e:97:9f:5a:09:7c:06:4e:d7:49:
                    98:e1:9d:d0:7d:85:60:2d:a4:91:9c:66:9f:8b:fe:
                    30:4c:44:27:59:db:65:2b:71:a0:89:11:92:e8:2d:
                    5f:1c:99:50:19:c0:93:60:c7:9f:81:8a:e9:0a:a2:
                    ec:a0:c3:13:c5:81:85:e8:b9:ce:c9:f4:4e:c5:35:
                    6c:22:bf:ac:65:ca:bf:2c:a7:b2:20:21:de:36:2e:
                    40:f7:52:38:d0:fb:05:d0:39:8a:68:f5:d7:6c:ca:
                    11:f5:df:10:c2:fd:b4:35:06:dc:2c:56:87:46:f6:
                    31:48:9c:25:b7:56:20:56:34:63:7d:57:bc:9f:bf:
                    13:66:b3:1d:d7:7a:6f:e3:da:2f:a3:1e:35:6a:de:
                    43:ef:bc:2e:26:34:89:02:87:b2:7b:b4:f2:69:75:
                    3b:5a:58:e1:12:93:c1:0f:1f:fd:f2:78:f9:fa:ee:
                    60:8d:92:1d:94:4f:25:94:6e:6b:c1:e5:9a:4d:8f:
                    eb:d2:e3:c3:f9:94:b9:9e:5d:3e:a5:84:25:91:e6:
                    70:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:B8:C5:40:51:B7:73:C9:56:A6:9E:0A:32:F1:37:32:95:0C:92
            X509v3 Authority Key Identifier:
                keyid:BE:25:4E:1B:5C:D4:52:86:8D:F2:E1:99:2D:88:D0:76:09:FC:4C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viVOG1zUUoaN8uGZLYjQdgn8TJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/155fa2-8007-4967-ad02-42cf5d51e418/1/viVOG1zUUoaN8uGZLYjQdgn8TJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:39:0c:19:6c:f7:c9:7e:a5:67:0b:c5:bc:cd:69:49:e4:d1:
         12:58:71:5b:d1:e7:43:cd:ff:1e:3e:69:5b:8e:ef:99:c2:0e:
         9f:ce:76:f7:ad:e0:ad:3f:1f:26:76:d4:5b:c0:be:31:59:8c:
         71:7a:47:f8:10:0f:66:2a:20:34:52:58:23:7a:9b:1e:00:22:
         23:21:13:9f:60:6c:05:33:40:13:60:a7:3b:d3:01:e4:2f:37:
         6c:f1:03:86:a2:78:76:4b:4b:53:5b:6c:cd:b8:06:7e:86:ab:
         08:21:2f:5c:2f:f5:e3:5b:44:68:77:22:09:c7:b5:74:55:89:
         ca:ed:4c:cd:f7:03:3a:e3:30:cc:8b:f6:10:41:22:79:2b:7f:
         05:99:b9:02:74:3f:c6:87:44:e0:33:80:f3:34:09:ac:62:6e:
         fd:15:42:7b:16:97:72:0a:49:9f:45:d3:ea:36:cb:c7:a8:32:
         76:5f:64:69:75:b0:7d:50:be:21:d2:fb:ce:d7:59:d0:f4:5f:
         9a:f5:bf:74:f4:52:95:95:a2:86:13:64:b4:45:6a:05:68:65:
         7b:3c:12:2e:31:b3:12:0c:66:b3:81:bf:b4:d7:4a:2c:da:f6:
         75:05:39:00:28:8a:19:8a:52:c4:e0:ad:68:a8:32:a0:0a:c1:
         d1:20:93:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:25 2025 by rpki-client