Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File:                     VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier:          qJ6RnnlEJDfV0MJ0vcq3Nss/5z8RxlBXgLZ16/bVd5A=
Subject key identifier:   0E:B2:B5:12:A1:29:7E:CC:F4:E9:2F:38:A3:30:E0:25:83:29:2F:3D
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer:       /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial:       0196515AFCA6381A493A5E4AC348F016A9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number:          097D
Signing time:             Sun 20 Apr 2025 04:00:39 +0000
Manifest this update:     Sun 20 Apr 2025 04:00:39 +0000
Manifest next update:     Mon 21 Apr 2025 04:00:39 +0000
Files and hashes:         1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: +Hqx91gR6kTZ07Bz1OPYeBaKkXyYc2NSUoPIWi926OA=)
                          2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 04:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:5a:fc:a6:38:1a:49:3a:5e:4a:c3:48:f0:16:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
        Validity
            Not Before: Apr 20 04:00:39 2025 GMT
            Not After : Apr 21 04:00:39 2025 GMT
        Subject: CN=0eb2b512a1297eccf4e92f38a330e02583292f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:2b:1a:fc:9a:e5:58:f1:17:30:43:98:ca:
                    aa:fc:1e:69:97:a7:ef:4d:c5:a6:87:30:b4:d0:2c:
                    e0:20:0b:2d:47:54:87:04:4d:4e:cb:ca:bd:0b:4f:
                    5d:1e:0d:fa:d2:f0:e7:b7:84:6d:c0:28:da:08:a8:
                    1b:2f:4a:29:d4:09:16:25:01:bd:27:ee:0c:56:c9:
                    4d:eb:84:64:5e:d4:35:eb:b2:1e:d1:90:5c:e9:98:
                    05:c9:c3:2f:6f:d3:7c:8b:15:a8:4b:55:0a:96:f8:
                    7d:8d:da:1e:b4:cb:21:dc:48:95:7b:1b:ef:1a:1c:
                    17:3c:7c:46:de:f4:b5:74:72:f9:4c:2e:b6:54:77:
                    97:c8:e2:11:4f:d6:6c:57:0e:79:64:bf:a7:d6:cb:
                    f6:4e:aa:c6:a0:41:57:34:28:69:93:90:4a:db:14:
                    02:f3:6a:5c:ec:fe:77:13:08:17:ae:41:82:c7:ac:
                    f9:28:e0:11:5c:a6:aa:06:dd:50:97:c6:a5:a3:cb:
                    0b:46:12:79:74:98:b4:ff:44:6f:48:f4:9a:ad:d6:
                    73:8a:66:14:40:3c:24:29:43:8b:94:35:55:69:09:
                    c4:8e:4a:08:1a:d5:9e:ed:a6:d3:e1:20:2b:fd:31:
                    7a:63:47:6b:d8:2b:17:1b:bb:f9:c4:01:b0:12:c0:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:B5:12:A1:29:7E:CC:F4:E9:2F:38:A3:30:E0:25:83:29:2F:3D
            X509v3 Authority Key Identifier:
                keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:09:eb:82:e0:99:b4:41:24:fd:ad:fd:b9:f2:eb:74:f0:37:
         0a:b4:65:b9:5d:bd:72:92:41:d1:da:71:94:15:2f:85:dd:cb:
         a8:ad:b0:3a:6c:3d:23:04:e3:5c:30:8e:5a:96:4b:ed:49:16:
         f0:26:0d:2f:04:0c:cc:71:aa:7b:8b:9b:11:a1:32:5f:0b:b6:
         51:f6:71:e8:60:17:f0:a8:66:9b:d4:58:9f:94:ca:2c:96:c9:
         8d:47:d5:ff:e5:fd:6c:05:ad:b6:9e:c2:2f:06:67:76:ab:2c:
         c2:45:23:d9:16:2a:eb:dd:0f:cb:22:ef:01:25:8a:42:6b:5d:
         04:fa:61:dc:05:13:40:f3:dd:c2:dc:af:bf:7e:46:44:15:10:
         a9:12:b5:16:8b:06:e5:d9:da:8f:3d:d7:58:8e:29:2b:3b:c4:
         0d:57:f4:84:15:44:4a:66:14:3f:ef:75:14:48:c8:02:71:f4:
         0f:41:04:4a:06:3a:fa:8b:c1:34:c1:d1:e1:8c:b8:76:18:46:
         17:83:6f:92:11:56:fd:3f:dd:15:ad:08:83:de:cb:fe:23:c2:
         f3:83:3b:e4:67:fd:bb:83:ac:28:2e:50:00:55:fa:2e:2f:da:
         6c:cb:92:8e:1f:85:d9:79:b8:b7:e4:98:82:de:f0:84:49:d9:
         46:39:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:34 2025 by rpki-client