Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File:                     VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier:          b/jTEL4UwC+rp2Dd1CDwi+BRmBkN/Z6TkN+f2MyEvbM=
Subject key identifier:   4D:E4:91:9C:69:61:00:3D:2B:96:67:76:90:CE:A7:43:EB:69:B6:CC
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer:       /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial:       0196A653F6D0597567676DC65B7A5F9608B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number:          1526
Signing time:             Tue 06 May 2025 16:00:42 +0000
Manifest this update:     Tue 06 May 2025 16:00:42 +0000
Manifest next update:     Wed 07 May 2025 16:00:42 +0000
Files and hashes:         1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: DCkg0DwdBsErtqe8zbsImPa4UUt1zV/lfoPZprVpu0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:53:f6:d0:59:75:67:67:6d:c6:5b:7a:5f:96:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
        Validity
            Not Before: May  6 16:00:42 2025 GMT
            Not After : May  7 16:00:42 2025 GMT
        Subject: CN=4de4919c6961003d2b96677690cea743eb69b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:de:88:42:6d:64:36:12:ae:99:c8:43:ec:40:
                    b2:65:ea:3e:58:50:05:2b:48:73:a0:3d:cb:6f:c4:
                    83:73:56:3d:a3:5b:81:b2:83:96:d3:1d:cb:e1:97:
                    71:92:50:c2:8e:9e:c1:f4:38:68:6e:a8:89:94:90:
                    13:e1:98:88:98:05:6f:ac:65:f1:e8:cf:82:c3:7f:
                    cb:99:78:41:af:78:de:b7:fe:4c:c8:32:9f:07:13:
                    1c:8e:c4:31:24:d0:69:38:0b:5f:98:08:2c:bd:48:
                    0e:84:4b:e4:ac:3a:47:c4:ad:5f:b2:d6:00:3d:47:
                    50:f0:7d:c2:a4:4c:62:03:bc:2c:f7:0c:d2:b1:b3:
                    e0:66:5c:86:42:b4:a4:20:77:45:51:90:31:6e:89:
                    96:4a:7f:de:aa:2a:0d:be:39:72:45:0e:2d:14:ce:
                    17:81:a2:5f:9d:db:74:0f:f9:ee:4e:cf:f2:11:42:
                    2d:47:46:ab:1a:61:e4:18:a4:93:7c:0b:20:1b:60:
                    7a:cd:92:1f:69:79:1d:1f:0c:a9:87:09:92:eb:2a:
                    1e:4f:0e:c8:8f:87:bc:43:02:e6:d3:53:99:0e:05:
                    42:7c:fc:d8:a7:1c:6a:f6:93:71:16:53:db:4c:29:
                    83:74:17:d9:2b:49:e9:de:7e:2a:a5:f9:0b:69:8d:
                    6b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E4:91:9C:69:61:00:3D:2B:96:67:76:90:CE:A7:43:EB:69:B6:CC
            X509v3 Authority Key Identifier:
                keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:b8:55:00:2d:fd:89:b4:90:4d:52:26:6b:1e:07:33:ac:
         d7:f4:0f:af:e0:48:ef:e4:64:00:c6:00:ab:04:a3:27:21:52:
         77:dd:b0:d4:af:43:8f:dd:1a:81:da:aa:b7:32:39:f2:65:f9:
         02:e8:7a:c5:ea:3a:c3:1d:f8:cd:a6:60:c8:77:06:1f:81:97:
         e0:c1:5b:4f:db:38:0d:a2:77:a7:a3:9c:e1:94:95:10:a2:48:
         01:7e:87:45:31:cd:af:db:12:fc:67:64:a1:9e:19:c2:60:ab:
         6f:7f:43:30:82:c9:41:10:58:76:17:e0:e4:22:be:e1:8a:91:
         5b:28:3b:ca:6a:8e:eb:07:6f:85:d8:79:56:d5:89:48:09:fc:
         a6:52:36:43:ce:c2:5e:03:4d:79:71:a3:43:39:f6:1d:ed:8d:
         83:10:bc:e0:93:9f:5e:17:c6:2c:26:79:9a:ef:30:c6:1e:08:
         4e:9b:40:82:37:50:f3:e7:11:cd:fa:dc:d8:12:39:cd:c6:f6:
         73:44:22:c8:cb:f8:57:3a:52:c7:65:92:17:e8:95:41:84:31:
         0b:63:fb:cc:f9:5c:6d:92:50:29:6f:30:03:af:8d:86:2f:82:
         d0:e0:38:fc:00:92:18:fb:64:6e:cf:72:77:7f:81:b7:63:a7:
         3d:73:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:06:48 2025 by rpki-client