Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File:                     VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier:          Zap6xqpt5sLI+iGXbOuIowGmj6yrE/jVpaBPxC2nQwY=
Subject key identifier:   AD:0A:E3:A6:4E:2A:75:E0:D1:C6:0E:D5:32:7C:6B:59:F8:F6:ED:92
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer:       /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial:       0196C3F0A264D495A67D6CB9685A441B80C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number:          124B
Signing time:             Mon 12 May 2025 10:00:49 +0000
Manifest this update:     Mon 12 May 2025 10:00:49 +0000
Manifest next update:     Tue 13 May 2025 10:00:49 +0000
Files and hashes:         1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: pJ7iK1Qkxz57jdoO8RtUjpXp5Uga1OHpNW1sijVfIt8=)
                          2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
                          3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:f0:a2:64:d4:95:a6:7d:6c:b9:68:5a:44:1b:80:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
        Validity
            Not Before: May 12 10:00:49 2025 GMT
            Not After : May 13 10:00:49 2025 GMT
        Subject: CN=ad0ae3a64e2a75e0d1c60ed5327c6b59f8f6ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1c:ef:36:fa:19:a4:5b:43:09:10:2b:8c:46:
                    1f:4d:d9:1e:ef:e2:af:a4:f7:5b:2e:f5:1e:41:85:
                    e3:e3:a2:ba:ed:ed:41:11:d9:14:7f:eb:46:e5:c3:
                    06:6e:05:70:53:b3:b9:2a:d9:5c:a8:2a:c6:39:3a:
                    54:6c:45:bc:2e:ff:b9:5e:78:73:0f:83:dc:31:f6:
                    8b:18:e8:71:7d:72:21:17:f0:17:ca:dd:bb:32:e2:
                    e4:7a:3d:f4:9a:12:41:d5:ed:98:c9:07:15:5a:72:
                    61:a4:a3:52:4d:14:b1:d7:e8:5f:01:f8:55:5b:dc:
                    ce:cb:12:7a:b6:32:9f:c2:c2:ca:03:b7:37:29:41:
                    4b:54:79:ad:f6:19:ed:93:ba:b6:50:58:b2:d0:f3:
                    99:54:be:68:89:af:a3:b0:69:f6:f0:4e:c9:54:65:
                    9c:08:14:c4:2b:75:61:2e:c1:c9:2c:8b:a4:d1:b0:
                    af:7d:b5:8e:4e:42:2b:6e:79:09:31:35:9d:7b:5a:
                    c3:0d:a5:17:1d:44:d1:34:f0:ab:bb:6d:3f:40:a8:
                    d7:7e:1b:e8:c2:ec:0a:47:b4:11:af:9d:a4:b7:ae:
                    2a:65:54:2b:71:5e:5e:d5:ab:ac:2f:e1:4a:0f:24:
                    a2:e0:a6:90:8f:5d:72:8c:9f:05:6f:23:ce:a9:39:
                    e4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0A:E3:A6:4E:2A:75:E0:D1:C6:0E:D5:32:7C:6B:59:F8:F6:ED:92
            X509v3 Authority Key Identifier:
                keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:df:c3:67:ff:8e:93:d8:92:5d:a0:e7:63:08:eb:07:74:
         b5:15:b3:41:39:32:48:56:e7:11:9a:06:6f:fa:20:5d:14:11:
         10:17:be:7f:21:6b:64:31:ba:27:5f:5b:1a:ec:ac:f0:93:c6:
         44:9d:25:f5:5c:98:d3:a9:31:a5:c1:1b:9d:65:b3:08:be:a8:
         e9:f0:2c:c0:6b:14:0c:a6:ce:70:76:e3:7d:c2:18:ca:be:46:
         89:f0:ef:05:fb:8c:eb:d0:96:82:67:e0:b2:6f:a9:e7:6c:1d:
         c1:c8:79:c1:a3:99:18:9d:86:11:84:27:4f:51:1e:95:30:f4:
         41:9c:78:8d:11:12:29:2a:0c:6e:e0:80:e1:b5:47:63:bf:00:
         cd:e6:8b:3f:af:de:a1:a2:21:e7:c7:b4:da:69:95:1b:42:c4:
         09:e3:b0:fa:71:86:cc:e3:f5:5b:97:3c:14:e9:d8:98:d8:b2:
         e7:b0:f0:f4:bd:62:22:8b:ec:15:f5:be:17:9e:b4:e2:54:f2:
         81:8f:a5:97:77:41:32:22:52:92:d3:de:0d:e8:b3:98:be:bf:
         f0:30:a2:0b:3e:80:e2:c0:57:96:5e:ef:bc:70:ec:ef:37:ed:
         a0:60:ed:77:09:6a:c5:c0:23:6c:30:ae:4a:52:66:9d:fc:ae:
         d4:d6:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:25:47 2025 by rpki-client