Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File:                     4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier:          pzFf7kFsr01r4bDnRyHOE5uIp+dmTQO5l5Y+L0/TAoo=
Subject key identifier:   7C:2E:CB:0D:1C:E6:9F:CC:41:1F:6D:58:94:B6:CA:A1:4A:FD:D6:7B
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer:       /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial:       0196BB5B47A568EE6795E38AE064470B0CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number:          0108
Signing time:             Sat 10 May 2025 18:00:43 +0000
Manifest this update:     Sat 10 May 2025 18:00:43 +0000
Manifest next update:     Sun 11 May 2025 18:00:43 +0000
Files and hashes:         1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=)
                          2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: 1ussiiubWz9ybPvWT+3j9Ow/c+/LrD1Xf+eAnAcAdAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5b:47:a5:68:ee:67:95:e3:8a:e0:64:47:0b:0c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
        Validity
            Not Before: May 10 18:00:43 2025 GMT
            Not After : May 11 18:00:43 2025 GMT
        Subject: CN=7c2ecb0d1ce69fcc411f6d5894b6caa14afdd67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:1a:16:78:c8:26:f6:56:a5:80:75:9f:6d:
                    88:b3:51:9e:fa:f4:4c:a4:f6:e6:ac:4a:4d:12:1b:
                    a0:bd:43:cc:1c:63:4f:2d:2b:d5:0c:04:34:02:9a:
                    5a:fb:58:31:12:f5:4c:a8:12:dd:25:c6:4b:2b:4c:
                    64:59:06:96:0e:e2:8b:2d:dd:10:28:d8:81:7b:6a:
                    c1:8a:8d:04:2a:6e:da:2e:58:11:18:14:a9:2b:f8:
                    41:02:0d:0d:e0:53:fa:7c:cc:bf:28:26:81:21:af:
                    9b:9a:b4:72:44:db:60:30:ec:a5:56:9d:97:2d:13:
                    1a:e3:0b:4c:10:c6:42:bb:3e:ba:81:8f:ad:8b:db:
                    04:04:a2:50:85:db:5f:8b:5b:df:2b:a8:0e:c9:ca:
                    52:76:5f:24:d6:0c:de:07:d5:12:a6:43:8a:0b:4a:
                    08:c0:eb:79:b1:a3:5f:57:1e:af:46:22:fa:18:36:
                    85:75:6c:a9:9f:da:51:02:c8:24:3a:a8:ea:8e:7a:
                    65:f6:98:1b:12:0c:57:eb:31:b8:fd:43:27:d6:1a:
                    05:27:5e:46:92:90:0e:73:66:fb:ac:01:11:86:5f:
                    7d:92:4c:1c:33:c5:94:20:89:46:8e:71:a7:03:a9:
                    7c:78:61:47:45:20:18:c4:cb:7f:13:9c:4b:13:cf:
                    1f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2E:CB:0D:1C:E6:9F:CC:41:1F:6D:58:94:B6:CA:A1:4A:FD:D6:7B
            X509v3 Authority Key Identifier:
                keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:2e:8c:6a:39:f9:ae:e0:09:a8:20:4d:61:a0:dd:b9:15:
         45:1e:ef:3d:de:f0:63:4c:ea:b3:65:b4:71:f2:f5:f7:10:64:
         db:f3:f4:b9:27:5a:1b:e9:35:e8:c7:5a:f2:c7:ec:76:3e:6f:
         00:6d:8e:b7:9e:d0:78:81:9d:09:6a:70:2f:20:dd:53:b8:c2:
         53:ae:f9:eb:74:0d:0f:44:68:e6:5b:9e:a5:9a:bf:84:93:43:
         d0:16:5e:26:c6:76:86:a7:55:f4:84:7a:19:6c:91:d2:e4:ee:
         3a:ce:c1:c9:9c:04:fc:05:00:a5:1b:90:99:7a:13:f2:ff:39:
         7b:cf:43:5f:12:e2:71:69:d1:53:6f:58:f5:f6:67:c6:19:ce:
         08:74:ab:60:35:7f:0e:79:71:7b:5e:4f:c5:2d:59:fb:1c:aa:
         58:86:da:e1:e4:ba:45:2a:61:9b:db:a3:01:ee:0e:76:bf:39:
         ed:22:a3:45:ac:13:a7:36:e0:47:de:5c:48:c9:82:70:51:24:
         a3:fa:26:3c:01:cd:7c:03:c8:46:16:18:ef:48:16:71:e1:e2:
         4c:82:44:a4:b2:2d:b7:03:2c:8e:f6:c4:de:84:d8:b4:b4:4d:
         96:4e:19:d4:32:b3:66:9e:4e:13:b4:fe:18:45:d3:a2:0c:0a:
         92:bf:50:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:43:54 2025 by rpki-client