Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File:                     VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier:          ZEY0Fr8vCaQvHQoJ2CBAShuLSr7g6SJ2R/GHAFEjXPw=
Subject key identifier:   E4:2A:32:EC:00:A7:C8:19:8E:37:8E:2C:49:CA:35:7B:27:55:3F:56
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer:       /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial:       0196439F565F6E95674EC809F9DDE07989C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number:          094F
Signing time:             Thu 17 Apr 2025 12:00:37 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:37 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:37 +0000
Files and hashes:         1: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: MDP7t0HVp1AZN1Z047vAUZ/43ts/mIHiZYJoGRFIR1I=)
                          2: ZRax88V5p4U88t_b2oPo8_w8EVw.roa (hash: wbdz2WKZbk8YP6i6XOpsIsE71ar5pDtmK77QBUlEFwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9f:56:5f:6e:95:67:4e:c8:09:f9:dd:e0:79:89:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
        Validity
            Not Before: Apr 17 12:00:37 2025 GMT
            Not After : Apr 18 12:00:37 2025 GMT
        Subject: CN=e42a32ec00a7c8198e378e2c49ca357b27553f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:dc:e1:94:05:20:d2:c6:b1:68:af:42:f4:
                    d9:58:e7:77:ff:f0:5b:41:1e:b9:c8:04:a6:17:c4:
                    40:6a:4d:73:29:b4:08:c6:7e:1b:ea:22:22:79:fd:
                    d9:74:54:b7:ce:eb:3a:df:3d:2c:40:05:bb:d3:28:
                    9e:6f:b6:3e:e9:29:cc:0a:5a:0f:eb:c7:e2:63:4c:
                    63:5f:da:06:1e:54:b7:6b:18:6c:06:13:df:46:a2:
                    6f:97:6b:6c:97:1b:7e:8d:4a:39:69:4a:f4:7f:8b:
                    9e:34:ae:4e:8d:42:f3:5c:78:e2:ba:6e:2c:b2:fd:
                    44:b4:b7:3b:b3:9d:09:aa:23:4f:f4:f5:41:40:dd:
                    99:d8:ab:64:37:23:e3:d7:ee:b8:c8:36:04:32:64:
                    ff:c9:50:7b:91:c4:38:af:be:0a:26:5e:28:c8:20:
                    c5:7b:f7:06:83:59:3e:32:c4:60:c8:52:b3:f3:bf:
                    69:5b:d5:1a:f8:a2:c9:6b:bf:cf:56:72:75:5f:3d:
                    5c:c9:a1:fc:95:76:b2:84:65:1d:f7:44:c4:ed:99:
                    bb:c6:be:ac:c4:b1:81:12:22:29:01:30:cb:68:5b:
                    f6:41:1c:a5:71:3f:01:59:a9:a0:58:38:17:50:b4:
                    be:7b:61:9a:73:ed:7f:d0:46:1f:03:94:97:ff:d3:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2A:32:EC:00:A7:C8:19:8E:37:8E:2C:49:CA:35:7B:27:55:3F:56
            X509v3 Authority Key Identifier:
                keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:c7:3a:40:d8:c3:75:50:c7:4c:2b:34:1a:49:68:66:fb:
         a3:ce:3f:38:38:02:98:a2:e1:9e:49:48:52:d4:b0:77:4b:a4:
         18:de:0b:21:8f:1b:8e:54:e6:ce:d4:eb:1c:2b:03:14:77:ee:
         8c:a2:48:18:09:e6:bd:8c:f4:a8:00:2d:fd:ac:a6:6c:0e:85:
         77:17:90:e0:28:7d:03:9f:58:d6:b6:01:8f:0b:e6:d8:ed:24:
         a4:4d:a9:92:37:e2:4d:51:c7:5e:51:62:8e:94:ff:8b:71:bd:
         28:78:6e:d2:f7:2c:db:7c:b4:27:90:d7:b9:14:1a:b3:c2:31:
         d9:84:4e:e0:78:89:c2:73:07:8d:ca:79:65:47:91:0e:04:e4:
         a1:de:46:ad:98:6c:68:cd:57:d7:5c:3b:3a:ac:e1:8b:71:18:
         f4:35:f3:77:e1:48:67:f2:91:4e:d2:27:ef:b6:34:5a:c5:fb:
         be:d8:98:66:dd:dd:f7:64:91:06:ba:25:a2:b5:8c:3a:df:a3:
         70:e2:a6:97:e0:85:01:0e:52:49:d3:53:78:96:1b:1b:d2:cf:
         db:90:7a:23:f4:ad:1b:6d:30:66:ed:93:b9:2b:c2:c3:01:e7:
         1a:79:93:2f:69:bb:c4:f4:03:f2:e1:23:bc:52:37:77:4c:2a:
         bc:d3:56:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:56:28 2025 by rpki-client