Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File:                     vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier:          OUZD/OyYnP+ik//QABR/jRf7Ug2JznhpRz/kN+25rXQ=
Subject key identifier:   16:B1:46:36:DF:2A:97:DE:D2:7B:9D:AB:62:7A:EC:45:3A:F4:B4:B6
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer:       /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial:       0196CACE152752C2073D4FCD6CDA6B34E5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number:          0764
Signing time:             Tue 13 May 2025 18:00:25 +0000
Manifest this update:     Tue 13 May 2025 18:00:25 +0000
Manifest next update:     Wed 14 May 2025 18:00:25 +0000
Files and hashes:         1: 8TP605-bnnRU4oKxlSCpw5mXUvE.roa (hash: mDnmEgfw91sdWLEWlPQZ2jWiCvBV4IYovQSRnJwJt28=)
                          2: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: 8LXux19w2OvT+RRc3RSBRfrI/uzFOnZFE7dKVX537FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 18:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ca:ce:15:27:52:c2:07:3d:4f:cd:6c:da:6b:34:e5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
        Validity
            Not Before: May 13 18:00:25 2025 GMT
            Not After : May 14 18:00:25 2025 GMT
        Subject: CN=16b14636df2a97ded27b9dab627aec453af4b4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:d4:5e:ff:af:14:1e:9a:2e:4e:ec:40:63:
                    df:e5:d3:10:cb:e1:92:9c:ff:06:1b:81:f5:9f:f5:
                    37:93:b8:28:6c:b6:59:86:c5:07:c8:06:28:33:9c:
                    b7:79:92:aa:e4:82:26:82:23:0e:75:9e:c5:ea:2b:
                    ed:be:5a:2c:d6:27:30:8f:43:8d:b9:0b:14:80:63:
                    45:23:fe:ef:13:8e:3b:38:33:1e:fd:00:e8:32:8a:
                    18:2f:e6:17:78:49:e8:53:f0:eb:2a:4f:21:f3:3d:
                    48:3a:e0:a1:24:bb:fd:ad:0e:bb:e2:a9:f6:bb:99:
                    60:b1:0e:4f:4e:73:aa:51:7c:1a:c9:0d:df:da:6c:
                    37:2b:1f:a8:ea:ac:93:2b:cf:44:03:e9:a0:15:59:
                    a2:d6:3f:d2:41:0f:97:8b:08:99:12:a6:40:e9:9e:
                    13:a2:90:84:ba:ca:6b:84:79:59:4e:42:cc:4b:69:
                    d8:b9:21:58:81:7d:b8:58:1f:18:4e:ae:53:b3:f5:
                    99:4b:f8:e2:1b:ea:a9:36:d5:a6:c8:b1:2d:1c:98:
                    a9:a0:f6:b6:23:cd:b8:57:e4:94:93:cf:c6:74:ec:
                    74:c9:eb:29:00:1f:4c:56:4b:ee:7e:bf:90:07:a1:
                    bb:fc:c2:ba:fa:b8:c2:fd:34:01:16:9a:80:85:a8:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:46:36:DF:2A:97:DE:D2:7B:9D:AB:62:7A:EC:45:3A:F4:B4:B6
            X509v3 Authority Key Identifier:
                keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:aa:aa:3a:4c:ae:cd:82:76:bb:34:44:72:ad:18:4c:a7:
         dd:df:b1:1a:05:b8:ed:28:50:7a:0a:44:7a:6b:e0:6f:4f:ce:
         5b:2b:2c:a6:e2:33:6c:a8:ea:cc:31:81:99:84:6e:8e:c1:fc:
         93:2c:a4:b5:92:98:a2:26:b0:1e:5a:70:5c:2d:3f:14:fb:43:
         2f:e2:f5:f4:24:47:90:03:f4:56:7d:60:96:8c:ea:27:1e:b8:
         72:c1:0b:e5:75:a3:45:6b:46:e9:13:8b:81:e5:10:11:bf:04:
         a2:de:5b:72:b6:9a:d6:24:a6:46:a0:cc:b6:e6:29:4b:04:71:
         91:fe:31:52:be:1c:53:97:db:89:d8:eb:79:22:0a:b3:f9:08:
         11:d8:68:fb:8d:de:04:97:59:9c:51:f1:df:74:ce:9d:f6:c8:
         7c:77:f9:d3:2d:08:a5:fd:d6:dc:9f:b6:2e:c5:6f:19:d4:38:
         87:a3:1b:4d:74:be:c0:95:dd:45:89:78:59:f9:5e:5a:8a:88:
         4b:fc:5e:93:91:98:84:e6:f6:d0:e1:c8:97:82:c8:1a:be:9e:
         42:cf:33:66:5b:99:ba:b6:88:87:1b:ac:1c:9b:96:10:cc:ec:
         b2:fe:61:79:1f:1b:cd:0c:d1:53:49:b6:fe:46:be:94:4c:01:
         a0:bf:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:34:23 2025 by rpki-client