Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          gaOUloJmPoJnBfGUL6sZWBS3thbA1BGGeuJft4E+Q0w=
Subject key identifier:   57:C2:6B:89:EB:24:C0:82:A7:0B:13:69:E3:A0:2B:18:26:49:69:32
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       0196A051F36A5AF27C7E5006CCB920543194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0A1B
Signing time:             Mon 05 May 2025 12:00:47 +0000
Manifest this update:     Mon 05 May 2025 12:00:47 +0000
Manifest next update:     Tue 06 May 2025 12:00:47 +0000
Files and hashes:         1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: QmAx3BELYXkWkLQnZaXVqtHNjqxEB8OrQ+TssyOqiZU=)
                          2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:51:f3:6a:5a:f2:7c:7e:50:06:cc:b9:20:54:31:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: May  5 12:00:47 2025 GMT
            Not After : May  6 12:00:47 2025 GMT
        Subject: CN=57c26b89eb24c082a70b1369e3a02b1826496932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:54:48:1f:18:cc:6c:37:0f:f1:09:ca:7a:df:
                    69:43:b5:d2:ea:a6:cf:47:45:0d:90:b5:7a:5e:eb:
                    d9:ba:5c:13:c2:fb:77:33:11:bb:8d:0e:c0:c8:a5:
                    bd:b9:36:bc:7a:25:54:67:85:b2:d4:fb:47:0d:42:
                    d1:bf:45:e3:b5:84:29:17:33:45:e2:c8:f9:59:33:
                    4e:f7:f9:07:d5:bc:61:28:11:ba:34:19:8a:45:27:
                    ec:28:b9:eb:48:dd:c6:58:90:83:51:1c:b7:97:f7:
                    e0:49:39:7a:e6:12:a8:67:cd:50:08:46:f3:e2:dc:
                    73:c6:0e:99:12:00:a9:04:7d:05:73:fc:bb:61:34:
                    ac:cf:f0:a6:7b:19:1c:23:06:9e:81:04:bc:a0:78:
                    26:52:6b:42:08:7b:00:46:3c:9c:d4:f0:8e:5f:fc:
                    25:2e:f7:97:3f:22:0b:55:80:92:ff:03:1f:4f:78:
                    99:41:94:60:4e:24:ce:34:2c:9d:04:5d:e1:1a:56:
                    c3:ed:9c:7a:52:42:b1:b9:90:12:f2:ad:22:01:e4:
                    a6:90:11:30:b2:03:1d:2a:86:ec:99:7d:98:63:dc:
                    bc:1d:82:ac:6a:d0:8f:32:20:88:52:c3:9f:a0:af:
                    2b:0f:51:ec:ea:64:e7:f4:77:f6:95:9d:5a:a3:85:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C2:6B:89:EB:24:C0:82:A7:0B:13:69:E3:A0:2B:18:26:49:69:32
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bb:a0:ce:37:ed:53:5f:36:9e:52:79:be:93:13:18:d6:7a:
         0c:37:fc:73:4d:4f:8d:e6:ff:18:1e:fe:8b:62:70:b9:5d:b7:
         68:34:c9:a7:e2:ea:80:95:20:7c:02:0d:63:91:27:d5:39:fb:
         12:03:7a:e7:d8:0c:20:ad:fe:2b:2a:1b:e3:06:ae:6d:4b:b5:
         f7:08:6a:4e:62:30:65:ee:00:38:f5:93:6d:d6:1a:7b:46:e6:
         74:c2:90:b4:71:75:44:63:58:db:1f:a6:30:df:4e:06:8a:7b:
         47:2f:10:90:d9:39:06:c4:ee:a5:3a:b6:d4:fa:3b:3e:75:ee:
         77:e5:83:b3:46:c7:d2:37:81:14:cf:fb:90:c4:f8:9b:91:bb:
         63:a4:1b:6e:a3:d1:de:ce:e9:9d:e3:3d:85:8a:75:71:98:60:
         a3:f5:f1:34:fc:bb:42:51:8f:4f:2f:02:42:70:a8:3e:61:ec:
         f4:92:aa:02:a8:c3:7e:05:58:2b:5c:2d:95:65:69:9a:0d:f3:
         d1:d5:d4:ba:47:e1:ba:8f:9d:ad:b5:d4:7b:77:47:e5:db:c3:
         27:4f:5f:2d:2e:01:29:0f:ff:ae:cb:32:30:36:ac:d9:c0:f7:
         69:b1:a7:70:99:0a:ed:51:72:8f:4e:87:d9:ae:13:24:e0:99:
         74:79:1b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:03:58 2025 by rpki-client