Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
File:                     VWpfoNz7NEM_m4YNleLEQlR8X5w.mft (raw, json)
Hash identifier:          C4j+xu7Me5gaH/Sf/JWLGM3kxb34ZjwlnAnNDLKywCM=
Subject key identifier:   1D:C7:12:C6:44:48:0F:0D:66:56:7E:3E:E2:A0:82:54:87:5C:60:41
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Certificate issuer:       /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial:       0196331A1419AA2E037A67FC1768F398998C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
Manifest number:          0C93
Signing time:             Mon 14 Apr 2025 07:01:09 +0000
Manifest this update:     Mon 14 Apr 2025 07:01:09 +0000
Manifest next update:     Tue 15 Apr 2025 07:01:09 +0000
Files and hashes:         1: 4n8bN6gHQ-7gt2_UKypfQrHDnhE.roa (hash: t6dpamgt2/zryHABiVBySA6efg8g99Jt9uTQJoGynjc=)
                          2: 8JQcsysiOnri0kQHCtlxZWtskIc.roa (hash: 8uXbEXZddA7mrG0hLFGoh/Y7FsDHWEPfJhu2xn7axAU=)
                          3: Ux9674M8NjPfocnrYudKeCUjMbo.roa (hash: FHnDbBZXh+K5rsgYdlcJ2kPhhFwRgdi5MK2KNTvvH+c=)
                          4: VWpfoNz7NEM_m4YNleLEQlR8X5w.crl (hash: XjvEMwzjMAvss2BRtD76YlTwLG5DhvzzzpiSV/8Ixrw=)
                          5: pmob96zXbDAhKR7Wz6RPvLXoY-A.roa (hash: npv/p9WYQ1OGSln1/kh4OSRLRABeIWxzh68X8dIu6Hs=)
                          6: zCMQvVyUHIhgqGjnqqS6hG87t8I.roa (hash: tlgi6dRpTD9+AZIQcf0rkaPRaq7iQdTH9FHfASRSnUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:33:1a:14:19:aa:2e:03:7a:67:fc:17:68:f3:98:99:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
        Validity
            Not Before: Apr 14 07:01:09 2025 GMT
            Not After : Apr 15 07:01:09 2025 GMT
        Subject: CN=1dc712c644480f0d66567e3ee2a08254875c6041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:e9:1b:66:3b:bf:21:0e:23:7a:f3:3a:7c:
                    25:55:18:49:a6:5b:1f:be:1c:13:b9:ff:82:89:3d:
                    21:f1:dc:69:a4:23:c1:f0:f7:0c:10:36:9e:44:a6:
                    b9:89:19:52:bf:c6:80:c3:34:1d:93:3b:cb:51:06:
                    47:68:04:2e:1c:6b:31:9f:2e:73:d9:b8:f9:45:03:
                    ee:80:09:84:6f:8e:97:3b:68:02:1d:25:10:8f:f0:
                    9e:e7:5b:3f:41:7c:3e:7d:4d:b8:18:af:eb:2b:c7:
                    4e:4f:9f:d4:73:9b:c6:d1:92:65:9f:bf:45:b3:3f:
                    d7:46:9d:25:ec:41:ec:4b:f0:3c:f7:e8:30:82:c8:
                    d7:5a:5e:57:c7:79:ac:a6:55:58:f9:b6:00:9f:68:
                    6f:5c:0e:6e:7f:b4:cf:2b:0c:da:d6:7d:f7:66:66:
                    e7:94:e3:ea:eb:7b:82:97:08:66:3d:7a:f5:a5:bb:
                    21:ac:b6:61:0d:3c:bc:31:70:1b:e0:75:7a:6a:4c:
                    21:e9:03:e8:b7:55:88:38:6b:ed:98:26:79:fc:1b:
                    54:8d:8c:2c:88:ae:b9:ea:db:d9:a0:f1:84:41:a8:
                    2f:78:bb:f0:b1:9f:56:aa:eb:b0:d9:01:86:5e:8a:
                    f7:cc:bb:54:7d:78:4b:23:03:01:90:ab:ae:16:43:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:12:C6:44:48:0F:0D:66:56:7E:3E:E2:A0:82:54:87:5C:60:41
            X509v3 Authority Key Identifier:
                keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:92:7a:22:e6:9c:42:a3:4f:1f:61:18:67:55:e6:1a:b7:0d:
         54:a4:62:f4:2a:68:44:e4:a4:30:88:c2:9c:8a:49:7c:97:4e:
         53:1f:df:50:6e:1b:9b:6b:a1:86:57:73:46:90:17:7b:d9:ce:
         be:f1:20:1c:04:bc:2e:df:e4:aa:e1:5a:c6:bb:cf:dc:58:33:
         5f:ae:d9:f6:53:c5:d4:fa:a5:0c:48:bf:db:20:be:13:7d:e8:
         95:f0:a1:80:7a:dc:ab:0a:23:75:1e:ea:61:6d:cd:28:60:31:
         00:5a:89:4a:d7:5f:10:1f:58:6c:93:57:7d:a3:dd:f2:31:31:
         5c:28:7c:c1:31:87:7f:04:7b:af:09:47:50:85:33:c8:17:34:
         97:7b:bb:35:c9:95:11:31:72:80:d6:e7:38:6c:9a:81:c5:47:
         3d:aa:0e:da:fd:69:8f:82:3f:d5:51:aa:82:19:50:a2:08:d5:
         76:f6:76:5e:2d:71:48:5a:d5:19:40:56:45:3f:c5:c2:4b:85:
         95:31:2c:ae:ff:68:23:6e:14:c0:a6:8c:c3:48:dc:b0:70:43:
         dd:89:aa:59:f5:b4:92:30:7b:64:da:22:8e:e2:b9:c8:67:56:
         09:45:67:c6:bf:a5:89:00:7a:a4:14:64:50:10:d5:16:66:63:
         63:b4:87:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:27:48 2025 by rpki-client