Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          wP11CBQ7HmjBLzrmLKI22n5JpIERHHtthdbdtd+S6A0=
Subject key identifier:   75:40:50:A8:C0:2A:0E:29:F9:AF:B0:2B:75:7C:98:08:59:F7:0A:01
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       01974A43CC83E9B2D33E2908DE7A02127350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          0DA7
Signing time:             Sat 07 Jun 2025 12:00:46 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:46 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:46 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: UB3yh9x/py5RJwNwTCMe4SSo3voQT5aUsOWJ5R+mqbQ=)
                          2: hLQXaatH7tOfK30W86b9zuTHKXk.roa (hash: fye8nCK2BKeEhZ/L6aDq++jY2Ctv+chp1+aFAXyDnu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:cc:83:e9:b2:d3:3e:29:08:de:7a:02:12:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Jun  7 12:00:46 2025 GMT
            Not After : Jun  8 12:00:46 2025 GMT
        Subject: CN=754050a8c02a0e29f9afb02b757c980859f70a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:41:64:d0:13:e3:14:29:f9:f6:9a:d6:90:01:
                    db:e3:9a:5b:b8:a1:be:55:eb:a2:26:1a:bb:71:7b:
                    a9:9b:4a:56:b9:d6:d6:a5:b9:7e:4d:6c:e3:3f:3e:
                    7b:14:74:34:75:1c:54:79:81:86:a8:f5:b9:67:49:
                    ca:df:af:da:d9:e9:71:6f:f0:4f:ad:f9:8d:12:99:
                    7f:e7:98:ab:d7:7b:83:e6:77:ad:92:4c:51:85:5a:
                    80:1f:29:95:ec:a5:9e:ce:15:e3:ff:2c:38:fe:52:
                    1d:12:30:77:73:b9:97:07:97:9d:19:88:93:b4:02:
                    cf:12:3e:68:d4:0d:bc:73:24:77:a5:04:9b:50:bb:
                    18:25:e6:0c:a6:08:a9:09:54:4b:0e:61:94:6f:d8:
                    c7:c8:90:a3:af:b9:6e:d7:7b:26:8d:a6:e8:34:5d:
                    cd:ba:cc:e8:46:73:54:a4:f2:54:f4:4f:9c:12:e3:
                    9f:fe:da:7d:28:9d:78:56:68:af:53:99:87:88:51:
                    77:20:82:9a:67:7b:8b:80:c8:16:6e:7d:ec:ee:98:
                    e1:cb:e9:cd:be:5c:d4:3e:17:ab:ee:ea:00:d6:d9:
                    ec:8b:86:dc:3e:47:27:90:09:82:32:52:09:95:7b:
                    47:8d:9b:6d:98:1f:19:df:bd:84:e6:0e:07:7b:66:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:50:A8:C0:2A:0E:29:F9:AF:B0:2B:75:7C:98:08:59:F7:0A:01
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:bd:01:a9:ec:48:f5:a4:f0:ea:28:2d:da:63:ad:5c:38:2e:
         1b:da:6e:c4:52:6f:4a:a0:a6:67:63:5b:98:29:d4:3c:d1:5e:
         ab:e7:62:4f:fa:d5:41:03:c2:56:84:1c:94:c4:b7:cb:a5:61:
         13:e1:db:c9:f1:31:47:2a:34:aa:dc:24:98:6f:9a:55:fd:16:
         b5:27:e7:e5:b9:8e:e7:a4:49:6b:6e:5c:cc:71:f0:4c:a7:4a:
         9c:08:32:47:85:05:0c:74:6c:b1:b3:85:2f:a0:ad:19:c3:e6:
         49:88:5e:cc:0c:16:65:3e:a7:6e:42:65:a6:a3:bb:05:b3:85:
         8d:c0:1b:09:42:09:97:c0:33:74:a9:ba:cb:cf:60:15:e7:ab:
         40:04:7f:87:8d:34:75:b5:d2:4c:c8:88:ce:3b:bf:27:2f:49:
         a8:e8:ee:ea:a6:3a:e8:49:8f:ba:1b:1c:ca:36:3b:04:80:a7:
         fe:9f:94:2f:90:07:82:2a:c4:ff:4d:86:8f:9c:e6:aa:47:47:
         2e:db:93:ce:ca:c6:60:54:27:70:05:7c:86:b2:c7:31:06:91:
         ec:39:11:9e:49:2a:84:64:3b:23:0f:f9:00:70:8e:89:ac:01:
         bb:94:d9:86:ed:64:b5:36:67:b3:60:58:df:bc:d8:c4:79:36:
         37:d2:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:12 2025 by rpki-client