Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          l0LH84kedkzSDwq0Lr/mgaNepYST3iZpjOZTRzm91Wc=
Subject key identifier:   56:0D:39:22:32:D8:74:46:72:3C:E3:36:33:A9:C3:FA:70:1A:FB:6B
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       01974A0CEC2C937FB2C6CADEF7A71E95869F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          0481
Signing time:             Sat 07 Jun 2025 11:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:50 +0000
Files and hashes:         1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: AJwKbvP5ZzXUEnKisSyrsMxEmxE3IQ4GgJlNwRq8drs=)
                          2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:ec:2c:93:7f:b2:c6:ca:de:f7:a7:1e:95:86:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Jun  7 11:00:50 2025 GMT
            Not After : Jun  8 11:00:50 2025 GMT
        Subject: CN=560d392232d87446723ce33633a9c3fa701afb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e4:c7:15:10:5b:80:43:ae:24:49:02:59:97:
                    50:94:b8:53:25:53:5e:5f:7e:b1:a2:fa:13:07:82:
                    6c:e6:2e:c0:35:d6:3a:3c:18:f2:08:35:03:29:b6:
                    2f:a6:e1:a7:16:3d:95:36:c6:c5:85:f4:0c:07:56:
                    5b:43:4b:6b:e9:09:5c:de:ae:9c:42:b5:5e:70:00:
                    b6:c9:54:46:c1:1b:bc:12:5b:b5:57:3e:84:fb:48:
                    41:97:3b:98:15:53:e5:17:7a:0b:9d:b5:dd:1e:c6:
                    e1:c6:fe:da:7d:01:d8:e1:3b:37:ba:df:49:45:24:
                    9a:61:69:a8:b9:dd:94:66:99:21:a3:88:19:1e:65:
                    13:f3:cc:de:39:3a:14:c8:f6:77:38:51:7a:2b:d7:
                    be:bc:b7:7d:6c:55:06:be:48:8a:02:4f:b9:8e:dc:
                    95:ed:61:a8:b8:d2:19:7f:39:87:ca:39:55:71:8e:
                    d9:cd:e3:c6:4e:b5:79:f8:e9:96:28:49:9c:4f:96:
                    fa:51:9e:b2:90:52:bc:7c:0e:11:58:0d:01:39:77:
                    49:7f:75:91:e1:9a:d3:38:03:1a:56:ae:db:9f:6e:
                    92:bd:48:b3:2a:1f:82:ef:86:0a:ee:92:c5:09:40:
                    e6:ef:cd:86:a3:9e:85:18:9d:67:49:c9:9e:33:56:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:39:22:32:D8:74:46:72:3C:E3:36:33:A9:C3:FA:70:1A:FB:6B
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ab:21:75:c9:b8:fd:3b:ea:2e:72:a4:7d:be:ac:bf:d3:e7:
         f8:b5:30:8c:26:54:74:10:d8:b2:ad:39:98:bf:7c:58:53:2c:
         fe:91:d0:25:2d:dd:e1:b9:52:af:26:a9:0e:c8:6c:3b:cd:5f:
         6a:dc:9f:18:5f:0b:d1:4d:e5:c3:ca:ef:2b:94:e6:ab:75:f3:
         0d:22:9b:09:b6:e0:3c:f3:f2:0a:1d:a6:35:70:33:a0:de:a1:
         ef:c5:69:7d:dd:5e:7a:e8:58:2e:fe:b1:08:36:a3:8d:95:dc:
         50:9a:ce:c7:e6:2d:c3:a2:da:02:fb:6e:a4:f2:85:d8:68:4a:
         f4:f1:dc:62:b2:97:9c:ab:bb:41:ea:90:9a:dd:b7:f3:5f:10:
         dc:e5:dc:50:a6:e7:5c:d5:fe:27:2e:54:fb:c7:23:22:4d:e4:
         4c:ad:0c:64:cd:6c:57:ed:29:a7:5a:3b:19:6e:97:8a:e5:d4:
         58:4e:49:05:01:23:ce:90:8e:b5:c5:c6:1b:f8:56:6d:20:48:
         ea:a8:17:da:98:7a:14:a9:ee:29:0e:61:2a:db:ae:8d:7e:70:
         52:ee:3a:a3:ef:50:f2:3f:7c:e7:fa:7e:cf:a2:e2:33:4a:7f:
         f6:b7:2d:ae:da:17:f9:15:55:bf:ca:91:77:7a:ee:76:5a:eb:
         ad:83:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:12 2025 by rpki-client