Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          nsayblQ4MP27QBj2OtIB42SGfNHhjhV91g9nOwTv4QA=
Subject key identifier:   A1:61:DB:D6:5A:E4:26:2C:91:E2:41:AE:8E:78:5F:87:0C:A8:2A:63
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0196BA48947C674FAF8299CE1101CD0F49BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0B3F
Signing time:             Sat 10 May 2025 13:00:40 +0000
Manifest this update:     Sat 10 May 2025 13:00:40 +0000
Manifest next update:     Sun 11 May 2025 13:00:40 +0000
Files and hashes:         1: EpDBPVNlNeVkVgjR_m5x1NyX39k.roa (hash: xU4je7vw+hy54ZIE4xMAX4T+f8GKgqonphRIwXr+3Ro=)
                          2: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
                          3: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
                          4: j4-0AZNF6iCS-Y8DwznMUfguQKM.roa (hash: 9UHind5om+M7xPoByFFXJSZvuZyNAdK5MCxVIuXiRrs=)
                          5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: yKR3tQ9HYzjh722goyeaXjJs+xSgIk780LiOYjmx49w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:48:94:7c:67:4f:af:82:99:ce:11:01:cd:0f:49:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: May 10 13:00:40 2025 GMT
            Not After : May 11 13:00:40 2025 GMT
        Subject: CN=a161dbd65ae4262c91e241ae8e785f870ca82a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:23:47:70:12:4e:a0:67:e8:72:4f:28:e0:
                    ce:9f:9b:db:76:12:f0:7b:38:a1:f1:41:46:59:d3:
                    be:f2:ed:94:50:01:f0:67:e5:ac:a0:6b:08:51:d0:
                    14:00:99:48:5d:82:9b:bb:40:64:d5:cb:14:0e:f4:
                    6d:13:5e:e3:da:53:48:35:06:b1:e8:b0:6a:6f:1d:
                    60:e8:d1:a1:77:c1:27:cf:46:fd:81:04:30:0e:fb:
                    1b:5c:65:51:4a:4a:07:2c:c0:d5:ea:51:d6:9c:ee:
                    50:72:b7:fd:b2:66:f4:f1:c1:de:16:bb:06:c4:00:
                    76:08:b9:19:53:69:39:b1:8d:82:84:15:e5:e5:2a:
                    e4:6a:be:2f:c2:7c:a0:e5:6b:94:18:12:bf:0b:0c:
                    40:a6:77:d4:8c:b4:fc:a3:19:92:3c:a2:74:fa:07:
                    32:3f:69:4f:67:03:6f:d3:80:ab:e6:e4:47:2d:ab:
                    8e:a2:03:ed:7b:24:49:92:c3:4c:5d:41:7d:2f:e1:
                    1c:ed:5c:ed:de:75:8f:0d:38:d8:90:0d:5c:19:d2:
                    6f:b0:d9:a4:ea:58:8d:b4:97:7e:e6:80:8a:8c:8b:
                    a1:4b:83:4d:aa:b9:f7:6b:fe:b9:85:13:e9:31:6c:
                    3a:c6:39:5d:f4:ed:58:67:8a:e5:91:54:b5:cc:13:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:61:DB:D6:5A:E4:26:2C:91:E2:41:AE:8E:78:5F:87:0C:A8:2A:63
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:44:33:db:4b:b7:8a:68:47:5e:cd:44:ce:59:74:26:74:25:
         4a:9f:a1:29:23:a3:18:ad:ac:2f:a1:a9:b3:3b:f2:47:d4:01:
         c9:00:9f:7c:4d:fe:18:a3:22:94:48:c7:4c:5c:85:4e:a6:e6:
         96:06:61:37:84:7e:88:e8:e6:54:29:05:17:13:af:58:66:cd:
         f8:1b:15:e5:87:d5:a0:a7:fc:93:b4:e3:0b:a6:e0:73:cb:95:
         03:10:6b:2c:bf:3e:5f:95:cf:d1:a2:3a:14:f8:70:34:68:c1:
         36:31:fd:ac:34:80:d2:f1:1d:84:5b:df:a4:30:0e:08:07:5a:
         8f:e1:d1:39:95:66:23:40:cd:f0:c3:0d:23:06:ec:1f:40:66:
         d0:8b:1f:b5:01:5b:f3:71:49:28:97:0d:0d:6b:73:79:70:9b:
         64:5b:4a:71:82:6c:e2:17:fd:10:f2:f2:77:2e:56:18:09:49:
         c5:0a:15:d6:51:bc:ec:b0:b9:9e:48:7d:12:8f:04:aa:48:c2:
         06:2d:6f:43:d6:12:0a:28:97:c4:21:f3:5d:f5:78:f4:d6:bf:
         08:fd:53:0a:ab:6b:d7:28:0c:6a:9f:90:df:e3:0a:43:df:68:
         0d:9b:07:c2:76:15:6d:4c:64:f9:61:87:cd:96:c3:17:23:ab:
         de:5d:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:07:55 2025 by rpki-client