Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
File:                     V_nB-yK84e8kHdfviSpRjQVmqKs.mft (raw, json)
Hash identifier:          OUViPK6VUJUoJgJgnaHwXf9XZz0fS/Bi/4YlF5H3G+g=
Subject key identifier:   60:1F:AB:43:50:DD:13:C6:0F:9F:6D:8C:12:BA:B0:58:92:B4:2B:4A
Authority key identifier: 57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB
Certificate issuer:       /CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
Certificate serial:       0196AA9E970BD81194CF2832316BDF13F968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
Manifest number:          152C
Signing time:             Wed 07 May 2025 12:00:42 +0000
Manifest this update:     Wed 07 May 2025 12:00:42 +0000
Manifest next update:     Thu 08 May 2025 12:00:42 +0000
Files and hashes:         1: V_nB-yK84e8kHdfviSpRjQVmqKs.crl (hash: vT/k7RUIOGjD4h3zAmGOC73Tf9MivGusdll6QNMKvG8=)
                          2: fnzKoJIItFzpKqsa1DSC_YU9Oz0.roa (hash: VMMeskb+gseTxaGOSqruyC/TYUaQqqzUpJ/qPck/ehc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:9e:97:0b:d8:11:94:cf:28:32:31:6b:df:13:f9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f9c1fb22bce1ef241dd7ef892a518d0566a8ab
        Validity
            Not Before: May  7 12:00:42 2025 GMT
            Not After : May  8 12:00:42 2025 GMT
        Subject: CN=601fab4350dd13c60f9f6d8c12bab05892b42b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:ee:12:d1:93:69:22:07:c4:e3:31:8f:fc:
                    37:42:9a:39:26:ef:2c:cd:c5:04:70:49:a3:3d:01:
                    6d:94:70:40:4e:ba:5f:b5:59:78:60:f8:8c:42:83:
                    c8:f4:f3:2f:81:67:06:1d:e2:61:0e:a9:90:ff:3d:
                    b8:ad:4c:31:cf:b5:a6:45:28:20:ba:0c:c4:98:57:
                    aa:55:d1:a7:1b:bd:b2:42:79:06:1d:0e:bb:d6:85:
                    27:a4:84:f9:c3:27:a4:80:b9:e7:1d:33:44:b1:26:
                    57:b4:a1:c5:1e:04:9a:e6:4f:e2:ae:44:e1:01:8d:
                    ac:c4:64:d6:08:e6:62:6c:e6:e3:08:15:50:0a:c6:
                    1f:a2:18:ed:7d:9b:4d:62:f9:bf:e2:11:5e:f5:ea:
                    b5:c2:55:fe:78:6c:97:83:16:0f:af:fa:ef:61:9c:
                    a7:c2:d7:d5:dd:15:3d:3c:2d:be:f2:e2:01:81:99:
                    c5:5f:c5:18:42:a3:5d:cc:a3:a6:0c:b7:59:0b:19:
                    b5:d0:a3:b0:40:de:2e:eb:e2:8f:9b:8b:5a:41:a0:
                    27:bf:50:1d:3e:31:98:bf:46:4c:eb:6b:b1:55:fa:
                    34:9a:11:a3:b7:ee:88:59:a6:28:4c:a6:eb:80:e7:
                    7d:bd:15:f0:d6:71:8f:62:08:a7:22:d2:54:52:b9:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1F:AB:43:50:DD:13:C6:0F:9F:6D:8C:12:BA:B0:58:92:B4:2B:4A
            X509v3 Authority Key Identifier:
                keyid:57:F9:C1:FB:22:BC:E1:EF:24:1D:D7:EF:89:2A:51:8D:05:66:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_nB-yK84e8kHdfviSpRjQVmqKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/976597-659b-44e4-92b2-9d8ea234295b/1/V_nB-yK84e8kHdfviSpRjQVmqKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:88:c9:cf:20:58:f8:c8:38:ee:1c:1a:d5:aa:33:c2:ad:d0:
         31:da:83:fc:04:54:ff:c9:31:f0:95:44:ee:e5:ef:ac:fa:18:
         06:37:e8:62:3c:4b:bd:e4:f6:e9:1e:c9:7e:97:15:14:a1:bc:
         c9:b9:7a:0e:2f:ea:f9:d1:2f:25:56:ce:bd:6d:ce:d5:f2:18:
         4e:21:a2:a2:a5:6c:d2:f2:a2:a2:27:54:fc:69:f7:ea:1c:e2:
         c6:55:b1:a0:5e:84:8a:91:c9:77:93:7c:60:cf:b5:34:97:2b:
         8c:9d:d8:ec:82:a1:a4:3a:12:af:ec:f0:37:ec:22:12:4d:6c:
         eb:49:63:66:87:72:a5:83:10:53:61:bf:30:70:ee:34:0a:7d:
         08:39:62:f6:58:89:05:74:bd:d6:79:d5:8c:9b:a5:b5:f7:d0:
         e3:d6:50:23:ad:66:1d:89:dd:0f:c3:52:03:e1:3a:a4:ae:1b:
         b7:8b:85:86:bf:20:0c:3c:d3:7e:bf:6d:1f:70:29:83:2b:c0:
         76:39:e0:d4:15:67:cb:a8:45:04:51:04:49:d5:f5:65:ce:78:
         8a:18:ae:f4:e3:e4:1d:f1:3b:a4:1c:fb:89:ef:74:42:80:d7:
         8f:e5:6b:ff:ed:ef:ab:37:95:3e:55:d6:14:01:06:f7:bc:61:
         ab:1f:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:57:27 2025 by rpki-client