Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          SY1STqe0OxPMyOpa1lejUCgydF6i8frVkhQ6XHjAmJA=
Subject key identifier:   FC:16:24:84:FD:3D:63:E3:44:82:67:B6:6A:54:22:41:3D:CE:7B:7D
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       019630506D0190321367C567DFCD30414BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 18:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 18:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 18:01:39 +0000
Files and hashes:         1: 8Ka9rxc0YKocFkWcaDXR1ONcgME.roa (hash: usLLszkWwMw6Nc8UOkM6uTFB1CmI/iSWcsPGfnYTo08=)
                          2: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: P3jdILA2qhL+UMLUxwkx/oSbP+mVcAgjNl8DL89PKG0=)
                          3: Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa (hash: rqvXt2CssSw6L3PQ9/nqjpjhgnLM7ZB7CTFTgI4c5Qs=)
                          4: ajS1l9bTEjVqB1ygFPAWcG-Q9kQ.roa (hash: uL6fZ/UsSnnW3wqVpmK15xjLej5W2U7a16D6Y1oklZo=)
                          5: vukdtTF8gJW6aLYtFAgpB-1xyO0.roa (hash: m3ugJ7KMai4fpszgDOIdVX816p3QuqcOk8kPIMOxT+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Apr 2025 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:30:50:6d:01:90:32:13:67:c5:67:df:cd:30:41:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Apr 13 18:01:39 2025 GMT
            Not After : Apr 14 18:01:39 2025 GMT
        Subject: CN=fc162484fd3d63e3448267b66a5422413dce7b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:da:4f:70:5a:da:f4:ee:48:52:54:61:37:3a:
                    ce:44:01:ba:ed:bc:85:7b:bb:3c:a9:30:dc:49:17:
                    c6:31:1b:a6:b9:43:66:21:df:a5:79:9f:33:d2:17:
                    f8:94:2a:b0:66:2b:f7:7f:ad:40:a1:44:50:ea:9b:
                    70:eb:b7:58:56:c9:de:ed:d8:db:ad:bc:9e:ac:7c:
                    b1:01:cf:3f:98:1e:b8:ac:4b:50:bb:44:e1:ff:09:
                    2c:b7:bc:d0:b9:0b:9d:e4:59:78:bf:39:56:e2:53:
                    c1:2e:b4:c6:05:4c:4c:3b:4d:6d:a6:90:51:2e:dc:
                    48:bb:7a:49:cb:57:3d:e4:65:ff:8a:25:9b:bc:d3:
                    ec:2a:a0:16:07:69:35:80:fa:aa:83:b1:9e:de:29:
                    27:6d:8e:41:44:c7:36:6d:36:b9:d9:9a:34:8f:ea:
                    66:21:d5:fa:c6:50:5b:5f:64:6f:43:0c:2a:f6:17:
                    cc:c6:42:3e:ed:53:ce:9d:7b:66:6b:d1:10:49:85:
                    00:7a:4f:54:98:59:33:18:72:28:a2:d2:a8:3f:1b:
                    5c:15:6e:df:46:b1:ac:2e:e2:4f:0e:7d:21:34:83:
                    2e:13:df:31:01:86:e0:c8:7f:11:42:2d:14:d6:43:
                    0b:4b:d0:c4:76:71:40:6f:f2:2d:87:ad:e4:c9:79:
                    06:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:24:84:FD:3D:63:E3:44:82:67:B6:6A:54:22:41:3D:CE:7B:7D
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:e0:e8:1a:2a:c9:1b:e2:f9:c4:ab:a5:06:4b:05:7d:c3:
         1b:49:fd:50:b0:97:ad:f6:a5:a0:53:83:73:2e:93:44:41:ef:
         89:97:51:7f:89:ec:db:1b:6c:a0:23:f2:05:8d:3b:b2:6f:c6:
         e6:9a:b2:26:89:e9:dc:99:0f:56:6d:2e:d9:95:e3:64:13:7f:
         4d:76:7a:e9:05:7e:c1:4c:94:fa:ed:8b:fb:e1:8a:38:7a:fc:
         b6:de:63:aa:63:f7:94:4c:eb:90:5a:3b:60:52:72:19:6b:1a:
         c3:8f:e0:7d:55:41:17:c2:00:b9:92:7d:0b:71:72:89:64:25:
         de:56:15:b1:ba:21:27:9c:91:e1:fc:1b:e1:01:53:f6:df:31:
         c1:b3:ea:a7:f7:16:76:41:84:27:73:8a:2c:ad:af:6b:67:e5:
         21:ce:f1:15:55:f1:f4:60:74:2e:cc:67:88:8f:12:3d:a9:c7:
         5f:1c:cf:d6:3f:50:54:41:4d:ca:0e:a1:12:d7:e4:7f:76:99:
         70:76:25:7a:bd:a3:19:c4:c9:14:de:d1:64:81:e0:b7:c9:4b:
         1b:bf:1d:b9:64:f8:7d:47:cf:a2:7a:af:30:e9:3d:a9:63:04:
         35:5c:da:38:94:c6:c6:1b:49:f1:34:93:d6:89:d1:e3:fe:45:
         cb:55:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 21:26:54 2025 by rpki-client