Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          KtWbPSNmf2WDd+YyocK0EkItcAZNFWJBli1p9X2mFV4=
Subject key identifier:   D4:8B:36:ED:41:61:B6:F5:F9:98:18:A3:C9:D3:BA:04:4C:E9:55:3F
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       0196B890D86DCC64BF9152C6D008C3703F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1180
Signing time:             Sat 10 May 2025 05:00:22 +0000
Manifest this update:     Sat 10 May 2025 05:00:22 +0000
Manifest next update:     Sun 11 May 2025 05:00:22 +0000
Files and hashes:         1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 8ti/Rt7BYygWHtyPTeW8AsWA659LuovnFTDEYt0bWWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:90:d8:6d:cc:64:bf:91:52:c6:d0:08:c3:70:3f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: May 10 05:00:22 2025 GMT
            Not After : May 11 05:00:22 2025 GMT
        Subject: CN=d48b36ed4161b6f5f99818a3c9d3ba044ce9553f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:03:dd:3d:eb:69:81:42:94:63:c7:88:0e:
                    f1:58:04:df:ed:ad:f1:75:81:0c:18:ab:1e:5d:34:
                    f2:70:68:4d:7e:ff:2c:4d:01:5f:1a:48:18:c1:79:
                    39:23:6c:45:be:c7:5e:93:26:21:2f:42:d6:f5:65:
                    ad:04:8f:a7:1c:27:b0:b2:bc:0e:3d:52:e1:f8:9b:
                    e8:b9:b9:1f:5c:e3:c4:0d:fc:46:87:59:7f:bf:c4:
                    32:ec:98:86:46:a0:74:3f:22:1c:c4:09:7b:ad:17:
                    0f:dc:90:95:5e:39:12:5d:7c:08:7f:e5:39:d3:28:
                    1d:2b:70:30:21:94:9c:48:a4:8e:6e:27:eb:b4:a5:
                    2b:4d:62:40:07:ec:64:cf:66:4d:db:10:76:aa:b7:
                    61:7b:b5:8f:7a:d4:a6:68:ee:fb:2d:8a:5d:76:59:
                    45:33:c6:ce:ed:a0:0d:80:f1:49:53:d4:4a:bd:79:
                    e9:d5:06:38:47:7d:15:56:c6:94:7e:55:b2:db:92:
                    32:78:b9:05:c5:35:58:33:c8:4c:93:7d:3f:76:85:
                    fb:80:a3:02:f1:5d:e5:b8:11:1a:56:bd:8c:47:b0:
                    70:ef:ab:cf:56:50:44:b0:dd:19:fc:ac:1f:54:ea:
                    75:7c:3b:94:f6:56:bb:b5:a4:25:ec:44:7b:d5:e0:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:36:ED:41:61:B6:F5:F9:98:18:A3:C9:D3:BA:04:4C:E9:55:3F
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:0c:f2:29:30:20:47:3f:b9:c0:a3:d8:50:19:a3:5f:3d:
         31:0e:6e:e4:72:91:e3:36:6b:24:92:af:40:b3:66:96:06:4f:
         45:a3:e4:d4:fd:98:16:84:24:f9:c6:04:ed:3b:1c:72:c5:b3:
         be:89:51:3c:32:ba:e4:c3:f2:52:07:a4:bf:18:85:91:04:56:
         f1:43:4a:65:bb:a7:09:16:02:e3:b1:3b:d3:62:6d:59:43:9f:
         dd:88:b5:c4:9b:62:8c:a1:42:1b:86:5d:44:95:df:24:18:71:
         95:f0:93:a2:1d:fc:fe:23:b0:73:bf:9b:32:42:45:5f:5b:67:
         6e:b0:80:5c:0e:85:88:29:0b:e0:c1:1d:49:8e:df:3d:c7:a2:
         2e:7e:96:0d:44:a2:fe:d3:d1:39:0a:af:68:97:e9:d8:17:24:
         0b:3f:d7:79:a1:bd:56:0c:4f:5e:a1:3d:64:14:52:b9:b5:dc:
         31:e9:4a:10:bf:0e:f7:a4:5f:7a:51:e0:74:c3:06:b7:70:80:
         de:fd:a2:fc:f8:13:34:6f:fe:f9:10:99:6e:9f:20:82:2d:4c:
         aa:ac:8e:29:00:b8:15:ce:23:7e:f8:72:d6:64:4c:42:76:1d:
         60:f0:fe:79:28:c7:fd:29:45:a4:57:11:ad:1b:86:4d:dd:ae:
         f1:ac:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:53:15 2025 by rpki-client