Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          tKmoxbytCRmpcYpaey7vw5mwUsJ0uhm5l8GSKoqZMDs=
Subject key identifier:   50:8A:F4:F5:10:F9:6A:F9:7E:81:AD:8F:DE:61:62:B7:09:AA:A1:24
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019648210C3E57207F03549D85664459D331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          098E
Signing time:             Fri 18 Apr 2025 09:00:47 +0000
Manifest this update:     Fri 18 Apr 2025 09:00:47 +0000
Manifest next update:     Sat 19 Apr 2025 09:00:47 +0000
Files and hashes:         1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=)
                          2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: e2s06We5lcqcGhZP2m2zmm8vT/lDCm1AOSe2rYnBA5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:21:0c:3e:57:20:7f:03:54:9d:85:66:44:59:d3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Apr 18 09:00:47 2025 GMT
            Not After : Apr 19 09:00:47 2025 GMT
        Subject: CN=508af4f510f96af97e81ad8fde6162b709aaa124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:50:ee:23:d3:61:90:4b:5f:cb:5b:97:bb:
                    e3:10:c8:be:63:60:a3:d0:4a:21:ef:da:0b:38:a3:
                    86:15:d7:e4:6b:3f:d7:ff:63:35:46:7d:42:6c:62:
                    4b:72:2a:32:ab:07:13:58:98:47:bd:2b:dc:04:85:
                    86:6c:d9:51:97:20:40:9b:49:e6:fe:6a:ac:55:4c:
                    51:69:5f:b7:29:9b:be:4f:d3:18:2d:70:02:ae:99:
                    8a:f1:5d:69:e8:9c:7b:cb:9d:89:0b:19:d8:bf:da:
                    cc:67:a0:f6:bc:77:6e:89:5a:3f:90:09:4d:34:0b:
                    eb:5f:be:19:0c:ff:ad:e0:9f:85:b6:cf:42:c7:f4:
                    eb:25:af:9a:e0:e5:a2:f7:4a:56:b9:2c:50:3d:a7:
                    bb:9e:82:77:20:27:d6:1c:04:5d:ae:a8:70:24:02:
                    43:c8:21:bf:db:d7:60:1b:a7:69:4b:8c:55:00:13:
                    92:f4:9f:d5:81:e0:b1:e3:3d:32:d6:70:80:1a:77:
                    cc:08:f0:68:66:40:68:56:e6:af:ff:99:cb:9e:5a:
                    09:c8:d5:26:36:02:4a:40:78:e9:b6:64:69:17:b5:
                    74:c0:b8:e4:e1:0a:16:b3:6b:82:2f:eb:31:e6:8f:
                    13:26:d6:70:ca:18:fb:8f:31:46:1d:5d:63:a9:bc:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8A:F4:F5:10:F9:6A:F9:7E:81:AD:8F:DE:61:62:B7:09:AA:A1:24
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:25:1d:38:4d:ca:94:cb:0d:52:7e:e8:de:41:b1:28:5b:6b:
         95:01:62:9e:d6:d4:ef:22:8f:28:68:26:c8:c9:5d:8f:81:60:
         d8:2d:af:e5:fb:dc:5b:2d:c9:a3:92:2e:5c:1e:a9:b8:d7:45:
         37:fb:fd:37:c9:eb:0f:bf:d3:e6:a0:60:27:65:64:ea:17:b9:
         80:88:d5:ac:12:e5:c4:e5:ec:68:6d:ed:a4:39:37:0a:d3:88:
         40:f5:e6:cf:36:1c:9c:50:c1:e8:a1:31:0f:0c:5c:b7:1e:35:
         4f:c5:29:9b:2f:18:e3:8e:87:9b:01:67:ac:ff:be:01:71:a6:
         bf:14:5c:ea:ef:3c:aa:ae:34:70:0a:d4:1e:3e:f0:25:7d:1d:
         f1:cf:34:13:f8:2d:b4:ce:c5:f3:4f:98:f5:9e:a1:16:dd:71:
         2e:b1:d2:87:57:3e:54:0a:54:c0:bb:8e:7b:b5:83:0d:a8:ea:
         37:6b:02:8f:ca:45:98:2f:0f:0b:62:f5:61:ca:87:9f:e4:2d:
         75:90:b1:31:18:d9:b5:93:50:f1:ef:5e:1e:5e:b5:c9:ea:1a:
         4a:94:5d:44:e4:94:f4:41:79:d0:df:e5:e2:e0:b5:1f:eb:4c:
         db:61:32:e0:da:d4:0e:8d:0e:da:ba:ca:c5:81:d6:99:f5:71:
         90:c1:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:15 2025 by rpki-client