Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
File:                     VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft (raw, json)
Hash identifier:          4YnmwrmmFxmrwVVkv/U96P9l95CijxaiYoz+v4BiTm8=
Subject key identifier:   ED:19:E8:9A:44:B5:22:FB:EE:41:8C:5C:42:C6:8F:24:95:78:CD:ED
Authority key identifier: 57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5
Certificate issuer:       /CN=572bc93f1580fc95274d983940f3efaede304ae5
Certificate serial:       0196BD8106A44E830EBF72E6867AF9DA8036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
Manifest number:          08FF
Signing time:             Sun 11 May 2025 04:01:11 +0000
Manifest this update:     Sun 11 May 2025 04:01:11 +0000
Manifest next update:     Mon 12 May 2025 04:01:11 +0000
Files and hashes:         1: M1JW_FKXqFnt6Im00lE7zjh_jCo.roa (hash: vOsH4Wy7uW8mjyCfxBJ6jJ4GPqxod09m04HGmvnUFqw=)
                          2: VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl (hash: m3L0k4fzpqvZcnP8T7CHxLEg4vtanLzVPlqdKkWySYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:06:a4:4e:83:0e:bf:72:e6:86:7a:f9:da:80:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572bc93f1580fc95274d983940f3efaede304ae5
        Validity
            Not Before: May 11 04:01:11 2025 GMT
            Not After : May 12 04:01:11 2025 GMT
        Subject: CN=ed19e89a44b522fbee418c5c42c68f249578cded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:da:12:0c:1a:25:b1:ed:7e:f0:ca:53:9a:55:
                    8f:8e:19:0a:cc:89:ce:fe:12:05:a6:39:c2:13:74:
                    d0:32:90:73:47:80:08:61:41:47:84:66:e8:a7:86:
                    96:dc:df:58:9c:18:91:7b:bc:8d:db:e8:0b:c5:e9:
                    d1:b4:cb:52:db:bd:19:5a:b1:fa:39:2b:06:ec:cf:
                    5d:85:41:7d:58:b7:2a:50:fd:0a:5b:1e:32:7a:2d:
                    a5:d2:38:6c:1b:bd:fd:5a:bc:38:3a:fa:63:fd:09:
                    15:65:b6:19:cb:bd:6c:77:5a:ca:54:31:80:f7:f8:
                    0d:0b:bc:eb:22:50:a8:e6:48:37:00:5d:76:5a:fa:
                    c5:8c:fd:41:c9:1f:e1:05:c3:46:e0:7a:5a:22:51:
                    17:31:20:83:d1:99:06:03:79:9f:b7:49:3a:7c:78:
                    2a:e0:64:33:43:55:80:c3:36:d1:3e:83:85:a6:05:
                    aa:80:bb:e8:af:90:e8:6b:d1:28:8e:aa:38:d7:cb:
                    df:2d:81:e3:87:f4:b5:34:ed:07:ec:55:f5:39:c4:
                    71:85:7f:f7:81:19:28:01:e3:f3:cc:d4:72:96:ad:
                    c3:c0:c1:e5:8c:56:9d:10:3a:ba:40:dd:7d:74:5a:
                    40:46:e7:3f:ec:ca:5a:dd:28:68:86:a8:dd:b7:c7:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:E8:9A:44:B5:22:FB:EE:41:8C:5C:42:C6:8F:24:95:78:CD:ED
            X509v3 Authority Key Identifier:
                keyid:57:2B:C9:3F:15:80:FC:95:27:4D:98:39:40:F3:EF:AE:DE:30:4A:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyvJPxWA_JUnTZg5QPPvrt4wSuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29f55c-6032-41c2-baa4-1080e865ec6c/1/VyvJPxWA_JUnTZg5QPPvrt4wSuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:87:13:c8:93:35:dd:05:2d:bf:5e:cc:5f:1d:c5:18:33:
         03:b6:48:8c:f6:03:c6:71:47:f6:7e:c4:51:5c:4a:cf:e1:70:
         de:54:be:06:9e:84:c7:e7:e3:59:6a:92:b5:62:0f:c1:5c:4e:
         4a:c5:40:a7:31:b2:ad:3f:83:3e:30:d4:d1:ac:6a:f9:35:ec:
         89:cd:49:9f:f2:56:69:2f:8b:1a:2a:20:19:d7:13:f8:56:ce:
         c2:86:dc:63:8b:e1:1a:7c:ab:bc:1a:cb:9c:3e:a0:23:8c:21:
         28:88:ec:20:c2:8d:eb:8b:a4:6a:f3:48:77:54:5a:c5:38:3e:
         98:0d:24:fc:b9:68:81:82:84:7a:45:45:e2:19:83:05:96:11:
         03:80:ce:f6:ec:fb:08:c2:96:8d:de:3c:08:59:02:18:23:93:
         cd:7d:42:ac:fd:dd:3b:9f:1c:fc:42:d4:38:db:dd:fb:b2:4a:
         ea:da:1c:09:ac:1a:24:b2:fb:21:dd:ae:d7:5f:f4:17:8b:7e:
         0a:04:38:e9:17:55:94:4e:33:31:61:3a:f8:1f:03:0e:98:a9:
         98:92:ce:84:e8:89:c1:d1:c8:14:54:20:2f:ae:b1:b9:ea:2a:
         cf:00:6c:e2:68:db:54:58:63:18:69:5a:1e:24:2d:20:5c:42:
         5c:6b:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:29:04 2025 by rpki-client