Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          OMbov4EkteiX4Z+A+bK1TzRikmUR3EV4W9wd/a1WF2g=
Subject key identifier:   CF:79:58:E8:EB:40:F4:16:BD:87:62:8C:4E:38:A3:EF:60:FD:30:A8
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       019654928EBB6E705F37DD72E46FCFDDA35D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          06E3
Signing time:             Sun 20 Apr 2025 19:00:12 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:12 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:12 +0000
Files and hashes:         1: pJxbAynYAVMuxCYI9fjMWPnEqnE.roa (hash: X09w84W5zdqhQp1J0A98/qFI2PJLHu66aEtf6RsnuSc=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: SYagfEDN1UvLPgVsCdkRKr/J0ld4X/XlwIwLCkI7EyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 19:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:8e:bb:6e:70:5f:37:dd:72:e4:6f:cf:dd:a3:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Apr 20 19:00:12 2025 GMT
            Not After : Apr 21 19:00:12 2025 GMT
        Subject: CN=cf7958e8eb40f416bd87628c4e38a3ef60fd30a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:d6:66:3e:f4:f0:47:18:e1:23:f7:84:78:
                    e0:e3:92:30:38:b1:d5:86:b4:bb:df:a6:c2:ed:99:
                    eb:07:98:73:cb:a5:bf:b5:2f:5f:57:c8:5a:8a:26:
                    bc:f3:fc:1c:66:a9:58:60:b8:fd:ca:4e:cb:c3:cf:
                    43:39:a4:f8:df:37:1e:32:b3:56:10:36:4f:2b:a9:
                    46:c3:bf:47:68:a3:20:ba:55:25:b2:e0:b4:a5:71:
                    91:87:0c:f7:2b:2a:79:1c:8e:4a:cd:d8:96:37:3e:
                    27:71:10:a6:b4:d2:5b:49:ac:59:9c:12:21:f0:64:
                    e8:74:49:5e:f5:47:3f:e8:a7:ac:48:f3:de:34:b1:
                    77:d2:00:65:f8:57:9a:e3:38:79:13:f9:76:c2:7b:
                    35:05:47:a9:1a:39:5a:b4:ea:95:fe:4a:2e:3f:5a:
                    a4:7d:19:01:fd:d0:62:96:09:a2:eb:0b:13:03:2d:
                    5f:3d:21:c6:9c:99:30:76:73:21:ca:44:16:7b:ce:
                    97:af:b5:4b:90:c6:4d:98:dc:91:10:26:bf:bd:d5:
                    3b:56:84:c3:e5:49:b7:bd:ac:69:bf:78:07:bb:fe:
                    db:51:08:0a:93:7c:a8:05:54:42:6c:5a:e1:3a:2f:
                    63:6f:96:09:b5:7c:15:b1:3e:e6:0e:35:4d:41:7c:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:79:58:E8:EB:40:F4:16:BD:87:62:8C:4E:38:A3:EF:60:FD:30:A8
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a0:da:e6:84:2d:11:1c:cf:f9:cb:47:17:4e:c0:c0:69:2a:
         18:c6:69:31:21:5e:ae:03:da:08:09:5a:57:23:56:69:bc:71:
         aa:c6:d8:67:23:37:d0:76:9f:b9:b8:71:2c:74:a2:e8:35:72:
         96:79:69:89:d1:c1:fa:ee:65:65:c5:d6:d0:9f:86:bf:e2:50:
         39:26:c6:1d:ba:86:14:ba:5e:a3:1e:d9:83:bc:7e:2a:aa:2b:
         5b:0b:5f:f8:b2:55:a8:ef:94:58:44:20:be:90:bb:62:af:9a:
         dc:ea:2d:03:da:70:be:b4:ab:fc:99:e9:34:f4:ea:5f:67:b6:
         65:93:02:59:ce:92:47:2b:27:25:0b:e5:19:2a:ac:e6:e5:bc:
         fb:64:58:15:99:bd:32:81:8f:d2:17:36:44:c6:20:39:77:13:
         01:d1:bb:b1:a7:a6:44:70:f7:8c:8b:57:2d:bd:62:6b:55:42:
         38:61:ce:35:fe:e9:6b:20:bd:e2:4e:c2:be:46:af:7a:64:ef:
         a4:dd:14:01:19:c4:fc:96:8e:7e:b3:e1:d6:9f:bd:be:0e:2c:
         07:b4:ea:c5:05:e8:00:93:05:78:80:25:47:e8:9f:d4:9a:e9:
         62:ab:6b:fc:24:0a:14:6b:13:d7:ae:69:78:2c:d6:b3:c1:00:
         44:09:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:46 2025 by rpki-client