Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          DjWuAp28bro2jogEkzNnW0k5D7vNgfPE0P5ZW4LgPxQ=
Subject key identifier:   F2:FD:6B:D2:2B:09:D6:7D:1D:91:90:EF:FC:A7:06:AC:EF:3D:4F:C5
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       0196BA7FBA14D13CF8A8F5C5B1377C984B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          14C3
Signing time:             Sat 10 May 2025 14:00:54 +0000
Manifest this update:     Sat 10 May 2025 14:00:54 +0000
Manifest next update:     Sun 11 May 2025 14:00:54 +0000
Files and hashes:         1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: IkB1gLERTOK+vTRfgzC46VFuMZ56G4QgNcNHqj5JLsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:ba:14:d1:3c:f8:a8:f5:c5:b1:37:7c:98:4b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: May 10 14:00:54 2025 GMT
            Not After : May 11 14:00:54 2025 GMT
        Subject: CN=f2fd6bd22b09d67d1d9190effca706acef3d4fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:1f:6f:58:c7:ed:b6:49:4b:27:aa:69:a9:
                    74:17:d4:fd:86:dd:35:b8:d2:40:00:95:fb:f1:db:
                    09:15:bb:4d:ff:2d:84:45:06:2d:0b:c2:85:22:19:
                    3e:55:10:a4:03:69:73:30:6c:b6:1b:1b:64:6b:80:
                    2d:bd:71:3e:a9:27:81:c0:c7:41:51:44:24:d8:16:
                    a0:24:d2:86:6d:1e:42:0f:45:a3:3a:da:f5:75:d3:
                    7c:02:e8:32:44:6b:5e:66:29:d4:8f:4a:b7:c0:bb:
                    a1:7c:28:31:8a:4a:21:c0:e5:e7:c3:7d:76:f1:a1:
                    e5:1a:51:70:e5:58:18:e1:c8:a7:01:fd:48:83:52:
                    7a:77:26:8a:53:cf:dc:3f:a3:4f:d4:16:fa:5d:70:
                    43:60:30:9f:58:df:f4:69:86:14:d4:4a:c7:b6:15:
                    93:7d:1c:ae:91:5a:21:92:9b:41:fe:9d:93:68:b5:
                    0c:ab:01:65:01:3f:08:15:96:86:02:7a:34:50:5c:
                    3b:34:a9:3d:e0:cb:fc:5c:ef:98:46:a7:e6:eb:57:
                    88:32:86:a4:56:5f:17:f0:d9:82:f3:c8:82:ea:fa:
                    7d:a3:4c:f3:a0:ed:84:47:30:45:68:74:2a:c5:d2:
                    4b:2b:84:93:16:78:87:83:12:6e:4d:43:00:0e:ec:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FD:6B:D2:2B:09:D6:7D:1D:91:90:EF:FC:A7:06:AC:EF:3D:4F:C5
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:ea:84:44:30:ac:e4:0f:95:55:6d:c6:c2:8e:40:dd:9b:
         62:a9:19:98:56:aa:26:72:25:3c:cb:03:3b:76:2d:5f:39:25:
         55:74:a8:99:df:81:1a:93:a3:8c:55:fa:ac:91:82:0e:25:4b:
         e9:7b:2c:5b:23:e6:f7:e4:47:0b:d9:c8:1c:04:e3:8e:f4:4d:
         26:3e:80:47:65:a2:bf:cc:07:a6:5d:af:d7:4e:45:ea:c9:f1:
         dd:36:e8:e4:42:c3:c0:e2:a2:90:59:fc:f6:53:ac:03:a6:0c:
         cf:a4:06:50:eb:36:95:03:cf:3e:e2:1f:9a:37:35:d1:12:89:
         99:5a:7f:f3:37:28:fb:30:85:e3:b3:be:d4:18:b7:da:35:1d:
         4f:ec:e4:40:08:11:0f:46:a6:11:4d:ad:30:78:f2:03:17:3a:
         52:6d:d2:09:d6:09:2d:ec:18:79:a6:20:84:5f:6d:93:e8:b5:
         8e:d6:56:19:51:45:5e:45:7f:c3:11:0b:fe:82:1b:15:1b:67:
         9b:9b:28:53:ff:2b:0d:2f:bf:2c:93:4d:c1:b4:cc:19:20:93:
         71:b9:fd:74:fe:60:43:7f:69:b3:e8:08:ea:aa:62:98:2f:d3:
         88:fa:c6:1a:e2:68:e2:0c:e9:19:8a:31:a0:f3:00:72:fa:df:
         00:e4:ca:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:37:03 2025 by rpki-client