Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
File:                     VzEE_zVoy5m39QJOc_8q6gVjzmo.mft (raw, json)
Hash identifier:          rINv3kXzS7BEdfzslodjpMO965Uq1MK2Ul6Q9xkICuw=
Subject key identifier:   B2:65:10:89:85:D4:EA:0B:22:EF:F7:A7:90:A2:2F:45:A6:C9:10:76
Authority key identifier: 57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A
Certificate issuer:       /CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
Certificate serial:       0196417A2625305D15FF1A34B36CCF5BAD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
Manifest number:          0FD7
Signing time:             Thu 17 Apr 2025 02:00:46 +0000
Manifest this update:     Thu 17 Apr 2025 02:00:46 +0000
Manifest next update:     Fri 18 Apr 2025 02:00:46 +0000
Files and hashes:         1: VzEE_zVoy5m39QJOc_8q6gVjzmo.crl (hash: qYqNDPrCuEQQ8koUvbENgAJ+DfsbW4bIDzSwUkytFJ0=)
                          2: bidV1RGJvspfkMpdjQXNi22L0Yc.roa (hash: TRhOcgWb9Nbze7wnhoqf8wJKPFZyeVfQX0I5QO8Q+S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 02:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:41:7a:26:25:30:5d:15:ff:1a:34:b3:6c:cf:5b:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573104ff3568cb99b7f5024e73ff2aea0563ce6a
        Validity
            Not Before: Apr 17 02:00:46 2025 GMT
            Not After : Apr 18 02:00:46 2025 GMT
        Subject: CN=b265108985d4ea0b22eff7a790a22f45a6c91076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:fa:9e:86:96:2b:0f:d3:17:a0:13:eb:5b:
                    b5:ff:5c:33:01:44:dc:f2:cb:65:a9:ee:a5:42:b5:
                    c8:25:72:d0:ab:5b:29:e7:2a:b1:c4:0e:c1:6f:87:
                    04:2e:f1:ba:6a:ec:63:22:da:3d:89:c6:c2:98:1d:
                    99:cd:a6:aa:29:fb:a0:b1:62:4e:2d:f6:a2:30:3f:
                    81:fc:37:71:de:07:b9:ce:e4:b3:ea:b7:39:b1:2c:
                    6d:c5:6e:1e:32:7a:dd:2b:c4:ad:ab:48:16:93:7b:
                    72:d3:14:32:21:9f:e1:e7:99:ca:af:88:72:b3:e3:
                    72:1c:17:3a:59:79:db:be:35:46:6a:df:98:f9:f2:
                    2f:25:bc:a9:4a:c3:ba:d6:7a:f4:dc:39:b3:c1:da:
                    c3:17:0e:40:ab:6d:8f:75:12:d1:c6:c3:c9:77:4d:
                    f8:2a:f0:aa:4a:0f:9d:36:4a:0c:51:32:db:a5:55:
                    09:f5:7a:16:7d:6e:31:e6:51:e8:4e:d3:f9:87:dd:
                    38:64:94:83:d9:6d:7c:71:a9:ec:81:07:d0:0d:0e:
                    dd:2c:37:1a:d1:26:4e:25:b1:ba:03:40:7f:61:73:
                    3c:ce:63:4d:09:60:a9:a0:c5:7c:e4:5a:43:93:3c:
                    64:73:ba:25:fb:ed:ec:22:8a:e9:bb:34:c9:fe:06:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:10:89:85:D4:EA:0B:22:EF:F7:A7:90:A2:2F:45:A6:C9:10:76
            X509v3 Authority Key Identifier:
                keyid:57:31:04:FF:35:68:CB:99:B7:F5:02:4E:73:FF:2A:EA:05:63:CE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzEE_zVoy5m39QJOc_8q6gVjzmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/3e76fc-5dcd-4ba5-8495-1998cb9d065c/1/VzEE_zVoy5m39QJOc_8q6gVjzmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:54:58:ac:17:32:f1:96:96:69:73:5a:8f:56:03:45:29:28:
         93:76:e5:44:12:cb:44:f1:8e:8c:7a:ee:2e:ba:6e:68:45:5a:
         b5:0c:9a:71:7e:e1:74:f4:f7:fe:1e:ea:e7:da:8a:36:f4:50:
         f1:24:a6:b6:99:d5:39:94:88:7f:6f:1d:9b:ee:33:26:2c:40:
         c3:6d:25:b4:da:a5:9c:81:ba:5e:19:04:b3:db:46:b2:af:7d:
         49:bc:fe:8b:ad:b1:20:c9:b9:7d:58:61:7b:da:7a:2c:74:d8:
         94:4d:97:a0:2a:08:57:87:cd:6a:7c:5e:a0:56:c9:64:5a:2f:
         a2:3d:bf:02:f7:f5:3c:bb:a8:46:80:ac:7d:25:d9:ea:fa:33:
         5e:3d:7a:34:d5:c4:fd:d7:b3:84:b5:3c:b6:8c:da:62:75:32:
         c7:e2:25:c3:a5:84:ae:b6:fb:b8:29:2d:6a:e1:3f:db:4b:41:
         06:e7:17:e6:43:2d:7c:40:1e:f6:b8:4a:16:99:16:84:57:af:
         2e:69:d4:9b:ce:15:58:ee:d8:6c:0a:0c:cb:b9:44:23:41:08:
         71:45:69:c7:ad:bf:c1:f0:d5:bc:13:29:27:a7:3f:49:65:a2:
         fe:2a:c3:9e:e4:21:8f:2f:c6:b0:07:98:51:c2:91:9a:bd:ca:
         da:36:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:55:52 2025 by rpki-client