Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          fHc65LE3NJY+lKqd34YJNtOHCSXcpuj4+E1pixMViXw=
Subject key identifier:   17:AC:F5:F2:98:3F:99:C9:5F:A3:D3:5A:9B:FB:4E:62:69:C8:1F:D6
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       01960FB2638ED03963206741D3744EE02E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          14DD
Signing time:             Mon 07 Apr 2025 10:01:11 +0000
Manifest this update:     Mon 07 Apr 2025 10:01:11 +0000
Manifest next update:     Tue 08 Apr 2025 10:01:11 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: 9E2GF4lHdl0zccRKvdzRbB58H0AGXHSiK01EjwkZwnY=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0f:b2:63:8e:d0:39:63:20:67:41:d3:74:4e:e0:2e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Apr  7 10:01:11 2025 GMT
            Not After : Apr  8 10:01:11 2025 GMT
        Subject: CN=17acf5f2983f99c95fa3d35a9bfb4e6269c81fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6d:07:25:ec:ed:c0:68:07:6d:f2:7a:42:85:
                    2b:a2:35:72:24:c1:7c:60:69:0a:c5:45:12:92:be:
                    d1:d8:ad:0c:14:06:81:d1:66:72:03:d3:64:7a:f7:
                    f2:38:06:15:72:42:55:62:f0:f5:27:89:c8:f3:8f:
                    84:0d:7a:0a:a1:a9:6e:fe:a2:82:b4:df:22:5a:bf:
                    8d:33:a2:a3:2c:7e:fb:69:4e:20:c9:5d:11:35:54:
                    18:67:39:55:42:87:e7:3b:47:dd:20:b7:7d:2e:3e:
                    fe:b9:ae:cc:8e:a5:e8:c5:58:57:f0:68:eb:8c:4c:
                    2d:57:81:85:9b:1f:c3:90:98:e6:92:e8:6d:df:66:
                    fa:cc:02:79:df:ab:7c:fb:e8:e5:4a:66:c8:e4:3f:
                    1f:eb:c8:b3:2e:38:5b:3a:6f:8c:bd:a5:a8:d1:ce:
                    3b:1a:85:6d:61:fd:d8:0d:fe:e7:8f:7d:1e:01:56:
                    fd:ed:6f:5c:63:43:32:85:b8:77:3e:d3:df:1c:bd:
                    a0:d3:5f:b7:a7:42:78:d4:50:b6:af:a2:82:ab:d7:
                    5e:44:91:77:02:ee:0f:5e:e7:fb:9f:d7:9f:56:e2:
                    33:f2:dd:f0:1f:cd:42:c6:74:35:5c:39:6a:39:0f:
                    d9:14:3b:4a:b4:ef:f6:24:95:0e:be:c8:e9:f1:35:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AC:F5:F2:98:3F:99:C9:5F:A3:D3:5A:9B:FB:4E:62:69:C8:1F:D6
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e8:02:0a:31:b8:14:c7:a7:6f:e8:6e:c8:52:f8:14:7e:4f:
         33:19:70:5f:b3:f5:e2:6d:72:c5:f6:99:61:e7:e5:04:17:4e:
         83:40:1d:e1:b3:85:ef:e9:11:25:7e:2c:b0:34:9b:62:b8:54:
         14:d8:57:b3:6a:bf:a9:ed:93:ab:23:80:a5:b2:4f:e7:4c:bb:
         c4:ab:87:d8:ee:d9:4f:3e:94:79:9c:96:fe:ad:d1:d8:6a:3e:
         d6:1b:c5:61:9d:a6:57:d1:eb:a1:e1:62:77:c4:e3:57:11:3c:
         2c:33:b0:92:0b:47:18:7b:21:e1:3a:31:f3:d8:88:79:a2:11:
         60:8c:a4:8e:91:0d:e2:fa:6c:3e:51:e9:b0:1d:cd:94:57:ad:
         b0:2e:99:2f:7f:a9:cf:af:96:2a:23:8f:de:f8:ad:e7:f9:fe:
         50:83:c3:69:af:5d:c9:ba:fc:d0:25:69:f2:7e:78:a0:16:6d:
         e9:18:6d:0d:49:ff:bf:02:ae:f3:cc:e7:1d:fe:24:e1:be:7d:
         0c:59:f5:48:a4:85:69:94:15:cd:c7:71:e6:d6:a9:b8:a3:73:
         68:2a:24:cf:0f:a1:b6:d9:16:80:1a:72:0c:91:fb:62:af:5d:
         d4:c8:bf:04:77:c9:9e:fa:99:7d:04:98:62:e6:14:cb:60:4e:
         cc:e7:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:15:26 2025 by rpki-client