Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          WMU+ssRiyydugxxcf8iMjHY99VrwChSyhn0205D1kiE=
Subject key identifier:   DC:C4:0D:97:31:BE:BA:F3:3E:94:B8:D1:20:D8:73:06:D0:A7:C7:CA
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       0196B9DA49430B16E0346BDB6C83467996FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1531
Signing time:             Sat 10 May 2025 11:00:12 +0000
Manifest this update:     Sat 10 May 2025 11:00:12 +0000
Manifest next update:     Sun 11 May 2025 11:00:12 +0000
Files and hashes:         1: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (hash: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=)
                          2: TbgjMEdQ0rbdH1wsIeqh_-bYUgk.roa (hash: GE4J211d6K3inNZ5KwcVMOOJlKd9Y0lNHq1APwdB4fA=)
                          3: g1mm45j_OkLlur_SqI7WDyJYFdM.roa (hash: RaLkgB3O9bQ5zciuBh3cX5AYs1JmNx5tm4PsA2iWmaQ=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: PFKwrQEGevO+4r7tbq11JVR/qkhbA5yDQsH4tFLHA7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:49:43:0b:16:e0:34:6b:db:6c:83:46:79:96:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: May 10 11:00:12 2025 GMT
            Not After : May 11 11:00:12 2025 GMT
        Subject: CN=dcc40d9731bebaf33e94b8d120d87306d0a7c7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:b2:1a:ab:17:03:84:03:ae:01:28:e0:2b:
                    d6:09:7a:25:95:9a:5b:22:43:b6:db:e2:b2:f6:a0:
                    4f:32:54:a4:ed:03:cb:0a:c7:c9:50:1f:6c:7c:ec:
                    f6:8c:53:97:0c:37:38:bf:80:48:ed:cd:42:ec:bf:
                    19:5c:2c:0d:71:97:75:95:f6:e9:bb:90:d4:8a:70:
                    7a:34:36:9e:d0:0f:31:51:1e:87:d1:cf:6a:90:77:
                    35:e4:cc:58:9b:2b:73:20:b0:09:5c:83:d8:61:21:
                    31:31:72:19:1d:6e:af:bb:c9:f8:21:d7:3f:5b:ca:
                    9c:38:78:f2:11:1d:e1:7a:58:ca:10:51:02:70:e5:
                    76:ee:7a:49:d3:c0:f4:da:41:18:ab:57:ce:96:21:
                    5f:9e:a1:aa:1a:3c:f1:6a:9e:a0:10:3c:de:a6:fe:
                    26:f3:a1:d0:6e:0c:f6:d0:4f:85:fc:c4:14:3e:4b:
                    83:c1:1b:a5:a5:6d:d5:8e:af:bb:ba:d2:4d:96:8b:
                    ea:05:11:fa:ff:cc:40:4c:c3:6a:d2:3e:4c:c0:22:
                    7e:1e:33:e6:da:e2:f7:01:28:e9:44:b8:a7:a6:60:
                    23:60:4d:9b:df:44:f6:26:dc:46:c5:06:83:77:f8:
                    42:30:cc:db:77:42:40:e8:93:ba:00:5a:6d:7c:ba:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:0D:97:31:BE:BA:F3:3E:94:B8:D1:20:D8:73:06:D0:A7:C7:CA
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:4e:18:dd:ca:e4:43:e3:57:29:b3:37:6b:4d:ba:29:4d:
         4c:59:6c:da:6d:be:ab:e2:81:6e:b2:8b:7c:c3:6c:1c:38:0f:
         ca:b0:38:45:71:d9:db:a6:40:9e:71:2d:48:4b:d4:34:3c:79:
         87:ab:9a:43:8f:56:27:ea:ec:cc:69:af:df:e8:af:9f:7e:f4:
         02:b6:d1:e8:82:1c:6d:c6:f9:26:15:bc:f8:7c:a2:a3:1b:2e:
         84:30:2d:00:6a:74:28:ce:ed:fa:42:21:4a:55:52:0a:55:38:
         8a:b0:23:07:15:ec:a5:8e:63:44:cf:4e:c3:6a:d5:d0:d2:2c:
         ae:23:49:d0:bc:49:81:95:53:92:7b:2e:4e:10:2a:2e:0a:8e:
         d3:da:91:96:a4:05:a9:62:77:25:c8:b5:48:16:80:e4:16:b5:
         26:18:da:c2:37:8b:49:c6:11:62:4c:ae:29:8d:f0:c8:c3:9d:
         fd:ba:1f:98:07:a7:ab:0e:ca:07:f6:46:1c:4c:85:b6:d1:74:
         b8:0d:11:39:55:8d:d9:92:43:8a:6a:07:fa:f2:fd:db:ea:80:
         36:3d:08:82:99:2f:fb:d2:dd:60:ec:db:98:bb:af:6a:1e:a4:
         bd:2d:05:ac:dd:53:44:c3:9a:d4:e6:76:f3:65:6a:67:39:db:
         7e:12:00:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:34:14 2025 by rpki-client