Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          BTqc+pjJ34CaMQmAmOFEOeS4S1OuN/fCJXaD9DAi2V8=
Subject key identifier:   2C:56:C8:04:59:C4:81:97:B5:B0:87:07:46:44:AE:9C:1B:BE:BA:CC
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       0196A31C10BA1E8149AD39FF349B2AEEBAC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          1528
Signing time:             Tue 06 May 2025 01:00:47 +0000
Manifest this update:     Tue 06 May 2025 01:00:47 +0000
Manifest next update:     Wed 07 May 2025 01:00:47 +0000
Files and hashes:         1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: zprLpHA+SbyYTgLWQNXYGIkRc/pInjNKoO17tEW3hnU=)
                          2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:1c:10:ba:1e:81:49:ad:39:ff:34:9b:2a:ee:ba:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : May  7 01:00:47 2025 GMT
        Subject: CN=2c56c80459c48197b5b087074644ae9c1bbebacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:2c:56:c6:0b:67:dd:5b:f5:ea:d3:eb:51:
                    4a:c2:4a:9d:d5:a6:78:89:f2:f8:8f:ec:99:09:ee:
                    88:fc:53:dc:85:79:1c:21:7c:7f:f3:d9:78:bf:de:
                    8d:bd:2e:92:39:28:11:27:43:31:63:ac:3a:c2:b0:
                    e1:8b:f9:fb:8a:27:d5:e6:9b:aa:88:dc:d4:ec:b1:
                    31:8e:c8:d9:62:d6:ec:13:d8:30:5e:cb:71:ff:8e:
                    3c:5c:cc:9c:ce:a6:5c:94:4c:da:23:f4:a3:eb:10:
                    1e:65:1f:5e:81:12:84:29:2e:66:64:a0:2b:38:fa:
                    73:a6:96:48:cb:75:b3:7c:f2:af:95:71:79:fc:23:
                    4f:da:65:03:a2:8c:5f:27:c4:e9:6d:fd:fe:d9:18:
                    83:07:0d:8f:ec:75:ac:e7:0d:e6:ac:d4:dc:8f:cc:
                    89:ca:a4:89:df:03:99:4a:1d:2b:05:63:26:e8:95:
                    f0:54:77:d8:9a:07:97:63:55:12:a7:12:69:56:5e:
                    5c:21:9a:67:9e:cf:a9:71:fb:69:26:ea:cf:54:3d:
                    72:d6:50:24:f4:60:04:36:ec:2e:c3:60:02:53:de:
                    e1:ab:0f:60:a1:4c:5f:74:0d:47:37:25:e6:09:97:
                    c6:c9:5d:45:47:7f:00:78:d1:c1:03:53:04:6f:27:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:56:C8:04:59:C4:81:97:B5:B0:87:07:46:44:AE:9C:1B:BE:BA:CC
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4d:00:1c:1a:23:de:ff:c6:1d:46:91:94:e5:a1:7e:e7:38:
         20:d9:b2:fe:15:6e:a9:1a:b2:ba:c5:3d:9c:e8:eb:8e:b3:21:
         c2:8e:13:8c:01:ef:4f:47:f4:d2:8b:a6:07:a9:64:d4:c2:22:
         10:d9:0e:57:70:93:dc:16:b2:8a:13:fd:29:63:72:05:6c:d6:
         96:b1:38:d6:41:ec:f3:79:bc:97:25:19:4f:6e:a4:ab:ad:7a:
         0c:ca:87:dc:36:47:11:08:f0:13:73:c1:14:22:5f:6e:93:23:
         65:4e:46:5a:71:99:8c:1b:2e:6b:b9:e9:e4:88:aa:10:61:14:
         9d:0e:d9:a1:81:04:a5:53:b9:f0:51:08:00:6f:8e:b5:65:c6:
         1c:b8:ad:f8:c4:c3:e8:70:be:75:93:80:da:a9:86:e4:1d:96:
         42:26:ee:78:8d:2c:72:6d:be:c8:4a:d5:93:d3:7e:e0:19:ca:
         51:c7:0c:a8:ba:e5:44:ac:a2:0f:cd:d8:20:f9:06:38:55:67:
         5e:84:55:45:d0:19:5c:c2:4d:9f:e8:81:77:6a:85:0a:a2:97:
         0d:ea:1d:d8:86:1d:d4:e9:51:47:da:05:68:28:e5:a1:21:d1:
         2f:3a:aa:19:1f:5b:61:8b:e2:79:21:2c:5e:b9:d2:69:5e:8a:
         7e:29:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 08:41:27 2025 by rpki-client