Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          HehU259scjzol0nrFM5gjJ1tpcvC2su8NdN2lZE0T+M=
Subject key identifier:   95:2C:33:61:FC:25:2D:90:E0:C5:72:35:83:FC:D1:66:46:79:D7:45
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       0196C15DC5809449F11F67316160C3736948
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          0381
Signing time:             Sun 11 May 2025 22:01:10 +0000
Manifest this update:     Sun 11 May 2025 22:01:10 +0000
Manifest next update:     Mon 12 May 2025 22:01:10 +0000
Files and hashes:         1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
                          2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: oZuVxGzsx6STVEBtXzVgWjAZugTUy7e1UGY8+1WiicQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:5d:c5:80:94:49:f1:1f:67:31:61:60:c3:73:69:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: May 11 22:01:10 2025 GMT
            Not After : May 12 22:01:10 2025 GMT
        Subject: CN=952c3361fc252d90e0c5723583fcd1664679d745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6b:6e:84:4a:43:ac:99:77:a9:a3:28:92:1c:
                    02:dc:40:cd:83:3a:fd:a6:82:2c:db:cf:c1:9e:b8:
                    94:42:3d:4f:37:93:16:6e:3d:c6:96:01:59:4f:a5:
                    db:3b:d9:b6:c2:d1:8e:c9:93:f5:15:a9:ab:17:99:
                    1a:76:63:5d:7d:dc:9b:09:c9:f1:e7:22:af:56:02:
                    bd:a6:72:e8:44:ea:f2:ab:0f:26:e9:d5:18:3c:6c:
                    8b:5e:5a:ce:3f:14:d4:91:5d:25:33:99:1d:11:e8:
                    8f:5c:45:c7:cb:44:03:5a:47:f3:02:d4:08:e4:be:
                    81:3f:34:ee:97:f8:52:98:bc:ae:3d:a6:1d:89:58:
                    85:3e:6d:d9:8b:af:9a:60:52:1f:1d:80:b2:c4:fe:
                    79:70:d4:21:a9:3b:3f:fb:c5:f3:b7:04:b9:e3:c6:
                    76:4f:1a:c8:c2:e8:67:34:f7:7b:fc:74:5e:55:5a:
                    d8:3a:6c:d8:02:29:a3:e3:a7:56:50:6d:33:08:25:
                    0d:2f:9d:26:12:11:3d:c0:79:01:0d:97:98:a8:3b:
                    8a:97:e3:0e:20:c6:f7:2a:e8:6e:fa:ba:e4:63:38:
                    96:9d:48:53:7b:b7:92:82:a7:e4:5f:2c:9f:e4:d2:
                    bf:ed:f5:16:33:73:a1:02:87:55:1e:7a:e0:01:53:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2C:33:61:FC:25:2D:90:E0:C5:72:35:83:FC:D1:66:46:79:D7:45
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:54:ec:26:88:05:2e:ce:8c:30:50:1c:25:35:09:9c:a2:
         a7:26:30:e9:bb:8b:71:12:13:eb:a6:b7:c4:d2:96:b7:44:0e:
         cd:d2:00:f6:8a:cd:c6:1c:a3:fb:55:3f:9f:9a:5f:df:c1:e4:
         4f:6c:3e:c2:c4:9d:0a:be:e3:f3:ff:f0:a7:7e:95:64:f4:6e:
         da:c9:35:3f:0a:69:e3:bc:81:a2:73:19:9f:d3:89:f7:0b:94:
         40:8a:56:96:14:37:b1:c4:69:b8:1f:72:ab:2b:51:c4:d8:2d:
         a7:f5:b5:57:d2:54:c6:c2:28:dd:f2:45:a6:a6:45:19:0f:34:
         3f:54:d9:18:53:eb:d8:22:85:62:49:20:c1:65:55:7f:74:12:
         23:08:ea:01:70:82:60:8b:c7:be:32:73:f2:6f:86:25:2a:d9:
         f6:bf:93:5f:bb:a1:6f:f4:ca:9c:61:0c:21:7b:33:e4:4f:56:
         ed:01:52:9c:05:19:90:96:50:87:6c:1e:69:62:32:09:c8:f0:
         22:cc:bc:2b:76:2a:72:f5:09:80:94:9e:df:4a:5d:aa:03:ee:
         02:f7:26:a1:31:60:50:40:62:ee:14:8b:18:7d:ef:8e:94:65:
         bd:40:b8:30:9e:c0:61:64:88:0c:44:df:36:2c:cd:b9:6d:b0:
         43:42:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:22:20 2025 by rpki-client