Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          sucrLaz7ulSpZkS8qMhKt+YdP1+5Htlc8GX87L2zJh8=
Subject key identifier:   60:7F:B5:00:47:BA:79:05:C9:05:11:91:0D:A4:47:B8:83:87:99:78
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       0196C7CD81AB6A52D8F9298119AC0B2B28D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          04D3
Signing time:             Tue 13 May 2025 04:00:55 +0000
Manifest this update:     Tue 13 May 2025 04:00:55 +0000
Manifest next update:     Wed 14 May 2025 04:00:55 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: YLx9HB9QRQf0usuAMSfsVju8ke4YgPWxrW/zg1JwhAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:81:ab:6a:52:d8:f9:29:81:19:ac:0b:2b:28:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: May 13 04:00:55 2025 GMT
            Not After : May 14 04:00:55 2025 GMT
        Subject: CN=607fb50047ba7905c90511910da447b883879978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:96:72:b2:51:cf:22:77:32:d5:70:d9:a9:
                    11:78:7a:eb:06:4f:81:41:3e:2e:8a:66:6e:ea:cf:
                    69:13:89:1f:44:67:e7:26:44:26:4b:af:d5:6b:06:
                    27:33:7c:cd:19:6d:3b:11:08:2c:09:58:59:03:f4:
                    bd:f7:37:0b:6a:ad:cc:53:45:e0:2e:c4:e3:d7:cc:
                    04:44:f7:12:a6:24:6f:0b:a4:bd:aa:75:2c:4d:c9:
                    ec:9e:ce:55:6b:3c:a5:aa:5b:c9:6f:9d:ad:5c:20:
                    30:68:75:f8:28:43:4f:34:45:6a:9a:db:3a:52:fc:
                    f3:0f:3b:26:09:86:bb:1d:b8:67:8c:4b:48:44:f2:
                    b9:17:1c:b6:47:2d:11:3b:cb:64:c4:87:4d:8b:4c:
                    1e:4f:4e:f1:37:0c:f6:3d:25:68:57:f4:0d:ef:e0:
                    0e:5f:a5:03:64:92:70:a2:99:b5:d9:a7:cc:37:2a:
                    7e:90:37:38:20:08:a6:33:01:93:a7:58:af:d2:b3:
                    77:58:43:9a:7f:53:97:56:6e:94:65:ba:67:32:84:
                    a3:be:9f:b0:9c:f6:ec:1d:61:5d:16:7b:ee:59:20:
                    af:79:a6:88:5b:0c:dd:83:de:f6:3e:a6:5b:f7:84:
                    17:3c:dd:d4:f4:05:07:30:a0:85:97:2e:7a:f3:de:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7F:B5:00:47:BA:79:05:C9:05:11:91:0D:A4:47:B8:83:87:99:78
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:72:11:50:5e:0a:fd:fc:75:b1:79:8e:87:dc:9f:c4:bf:
         ce:5b:1a:1c:1f:ca:8b:bc:3d:ae:d5:7f:23:91:68:11:2a:de:
         4e:f7:4a:38:a7:17:92:4b:b5:a0:41:70:9f:52:2d:3b:42:fd:
         86:99:35:1d:dd:b4:6e:2e:d2:f7:ad:69:ed:70:c9:ae:1a:b6:
         87:02:4b:a2:28:32:3e:29:81:2c:b1:93:10:5e:04:34:6f:d2:
         ef:75:81:99:9e:d1:16:2a:ff:cc:77:3a:e5:ea:9f:e0:d2:b9:
         e9:9e:db:4e:0e:9d:80:19:5d:ea:08:f9:3d:bb:21:b9:92:ea:
         e3:c7:e0:fc:b8:fb:28:c3:38:ca:14:54:55:42:51:5b:7b:38:
         e3:d8:b0:41:0f:42:ee:af:56:e1:44:4e:80:28:d5:49:c4:65:
         a2:ac:70:1c:eb:88:e0:3b:ee:44:87:21:48:87:7f:07:d6:e0:
         96:db:5c:c5:43:95:42:92:f9:02:20:9f:d1:fa:78:3a:14:1b:
         2a:f4:f6:3a:7c:2f:44:55:a8:40:dd:91:79:30:82:2c:cd:20:
         5c:7b:d6:da:7b:41:1a:01:5e:bc:bd:04:a5:12:2d:47:24:60:
         77:89:8f:8e:32:9b:dd:00:ae:e3:51:b8:f0:6a:bf:a8:a1:da:
         bd:d8:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:37:11 2025 by rpki-client