Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
File:                     VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json)
Hash identifier:          FuJY148u2xNZ/E9KgeVVawyxJvn9oiYN5ePsunJVrpQ=
Subject key identifier:   9D:64:53:3F:6E:E1:9A:6D:7D:81:72:DB:3B:F3:A9:C7:2E:30:D3:09
Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5
Certificate issuer:       /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
Certificate serial:       0196C7CD00974B71128AD272250525076FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
Manifest number:          1246
Signing time:             Tue 13 May 2025 04:00:23 +0000
Manifest this update:     Tue 13 May 2025 04:00:23 +0000
Manifest next update:     Wed 14 May 2025 04:00:23 +0000
Files and hashes:         1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: YRukOCJTkS/8QG0Pod6aWTd5vNarrY3L+ZTphhtUgNY=)
                          2: a5BvzhKkKgNIrlfggpHqvjOR9aQ.roa (hash: dEnnR8B+4ToU5y7KFBIs83RELZnLbdh/fDQM1Q9oIpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:00:97:4b:71:12:8a:d2:72:25:05:25:07:6f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5
        Validity
            Not Before: May 13 04:00:23 2025 GMT
            Not After : May 14 04:00:23 2025 GMT
        Subject: CN=9d64533f6ee19a6d7d8172db3bf3a9c72e30d309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:52:be:0a:ab:f7:8d:c3:30:74:2b:8c:98:
                    97:49:6d:52:c6:88:61:a5:1d:ac:66:75:34:f1:01:
                    d9:01:9b:9d:8c:6f:ea:7d:83:b1:8d:e3:95:91:5a:
                    f7:44:29:a6:59:c9:86:4d:50:f7:e8:ad:8e:44:76:
                    24:60:67:5e:54:e6:f5:d3:52:95:4f:48:58:c3:b3:
                    78:21:a9:90:c8:ce:ed:2f:9d:28:3b:63:9f:2d:a0:
                    4b:dd:16:a3:70:74:45:1a:0c:b8:29:3a:1d:52:6a:
                    7b:c2:f5:29:6b:73:d9:fc:38:61:07:84:47:94:38:
                    13:6b:9f:31:28:18:05:67:e0:b3:06:a7:a3:1f:a9:
                    4e:5e:18:e0:54:e1:87:3b:6c:69:6c:cf:ed:3a:b0:
                    fd:b1:09:50:35:43:57:23:31:07:a3:83:21:a0:a3:
                    ff:65:eb:42:3b:ee:3a:48:da:b2:63:02:fa:b4:0d:
                    4a:84:7e:68:91:7c:b3:37:8e:fe:b0:6b:90:80:70:
                    28:b7:73:ef:ab:39:0d:25:05:3c:97:a0:ad:d7:26:
                    b4:f8:c5:ed:b4:68:b1:10:43:34:73:e1:c9:f5:d6:
                    c7:8b:17:93:f3:af:c5:23:00:99:bc:24:f2:29:db:
                    11:ee:28:40:a6:3c:50:7e:f7:2c:0e:1c:56:8a:42:
                    b0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:64:53:3F:6E:E1:9A:6D:7D:81:72:DB:3B:F3:A9:C7:2E:30:D3:09
            X509v3 Authority Key Identifier:
                keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:11:cf:11:1a:4f:d1:c3:b2:73:5c:6c:50:b5:5c:51:68:c0:
         2d:58:69:fc:a1:ec:57:42:00:43:24:48:88:19:1a:5f:1f:ec:
         82:77:1c:13:18:a4:6c:c6:a7:e1:0c:13:87:66:e5:0f:e1:62:
         cb:7d:4f:af:23:ef:9f:e0:a7:2c:cc:28:1a:ff:e0:4a:cd:14:
         1e:ee:f9:13:f1:58:64:33:f6:0d:9e:4b:d5:85:46:fd:c7:6d:
         c9:5a:aa:85:65:33:36:63:b0:e5:f5:43:54:73:3d:61:0b:e0:
         d2:36:e4:5f:ac:5b:b3:dc:ce:38:81:3d:01:8c:ea:08:63:95:
         ea:28:a9:bb:c3:15:c1:5e:94:89:50:db:30:e5:b1:e5:41:1b:
         e3:e3:13:13:c9:b0:a9:f9:c5:cb:27:aa:6f:72:f3:43:17:04:
         24:6b:b9:5f:03:b8:bd:7c:ea:37:09:f3:67:fa:d5:cd:f9:02:
         22:2e:0d:30:e8:cf:94:5f:ed:e8:27:3c:65:1e:00:eb:ed:12:
         d7:92:c6:f8:59:4e:20:38:db:db:6d:61:56:bd:9e:8c:9b:85:
         7b:3c:e4:60:07:bd:b0:4a:0a:5c:45:8e:59:6e:82:8c:52:cd:
         89:bc:82:d8:0c:03:70:2d:4e:9c:67:dc:43:99:fd:6a:7a:b3:
         2b:d7:bc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:35 2025 by rpki-client