Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
File:                     vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json)
Hash identifier:          leZs/sb1KHDXHH2Dl93HIvuiLIFMOuAAJA8lQTBhso4=
Subject key identifier:   6C:C0:62:80:45:B4:99:F3:B8:41:31:61:3F:1A:12:CD:A0:2E:E8:79
Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D
Certificate issuer:       /CN=be370733b8db614daa760a002c24048028300e2d
Certificate serial:       0196C64C84BD4E99FD623CF2143BD278260D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 21:00:25 +0000
Manifest this update:     Mon 12 May 2025 21:00:25 +0000
Manifest next update:     Tue 13 May 2025 21:00:25 +0000
Files and hashes:         1: paMGJN73rjp1fa_w9RA1xrwwx18.roa (hash: Z6fxiaAqnra9zk/dGdgt7claLY2U/7DrFceSHabOI5E=)
                          2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: g85g3WlUhRd0wirIicpfSU6pbx3lzw+IA6OCRn8UsY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:84:bd:4e:99:fd:62:3c:f2:14:3b:d2:78:26:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be370733b8db614daa760a002c24048028300e2d
        Validity
            Not Before: May 12 21:00:25 2025 GMT
            Not After : May 13 21:00:25 2025 GMT
        Subject: CN=6cc0628045b499f3b84131613f1a12cda02ee879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:86:76:c2:27:ba:62:0d:78:27:67:20:a4:
                    98:c7:89:fb:ba:48:15:95:94:1c:3a:ad:76:0c:44:
                    f1:77:5a:41:2d:cd:20:65:5a:0e:b9:07:99:04:55:
                    ad:77:8b:94:aa:4d:14:cf:d3:5a:c6:34:9b:a4:c7:
                    11:c0:f0:dd:fe:ca:4a:1c:fe:cc:36:db:27:25:06:
                    5f:31:b7:51:64:57:0b:e4:45:74:f4:81:c0:68:14:
                    12:55:cb:25:86:37:84:ba:49:f4:84:cc:b1:fd:0a:
                    d2:d3:4f:d1:63:af:70:3b:ad:b0:c7:95:f2:79:51:
                    8e:7b:65:da:e8:80:62:4d:ba:b5:d3:c4:f5:a4:b7:
                    71:9f:c7:44:36:2d:9a:76:00:08:be:8c:1f:34:ab:
                    f4:b7:8c:78:11:fc:52:c6:6b:65:06:b7:80:67:7d:
                    a6:8d:82:fa:4c:2e:72:ff:7c:03:c1:ba:59:55:43:
                    43:65:2e:47:a6:94:d0:ec:32:7c:23:24:9e:ec:a6:
                    19:77:b7:ed:1d:b9:de:b0:3d:5a:ec:8a:05:15:88:
                    f7:6b:06:8e:7b:20:8a:44:37:69:31:96:64:ec:19:
                    72:f8:0c:69:84:e0:b2:64:03:2d:9b:5a:cf:7e:de:
                    7c:14:90:3d:22:66:54:1f:92:fe:50:f9:75:81:ef:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C0:62:80:45:B4:99:F3:B8:41:31:61:3F:1A:12:CD:A0:2E:E8:79
            X509v3 Authority Key Identifier:
                keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7a:05:9b:b3:d5:87:7d:96:35:04:17:8f:fa:d9:11:41:3f:
         98:b8:ba:5b:23:61:a2:8e:67:f6:f0:90:8d:f1:1e:d6:65:60:
         3e:a0:df:98:4d:c7:c6:5f:5c:a7:5a:d7:ea:0c:f1:a3:98:3a:
         ec:22:b4:bc:37:62:ff:58:cc:e7:e4:c3:65:a0:74:5c:ef:f1:
         d8:21:47:e3:a2:7e:57:71:55:05:e4:9b:cb:00:bf:b5:83:a7:
         af:57:fe:43:f0:d5:ed:5a:64:dc:12:dd:25:d8:af:5d:d4:da:
         04:52:4b:76:f9:e1:9c:f3:73:c5:91:e9:3a:86:8b:b5:90:e1:
         ae:52:e4:94:02:2a:6e:cc:3f:de:0c:c9:7b:bb:66:e6:86:c6:
         1b:48:b1:0c:84:c6:1e:91:88:6d:6e:73:24:c3:e5:69:02:1c:
         27:73:81:53:45:e8:5a:ba:c0:37:35:17:22:3e:d7:29:1c:fd:
         7a:cb:30:e6:7d:5a:40:c3:26:f3:77:c5:e1:c8:d1:30:93:2d:
         89:e0:b5:20:49:69:b2:7c:10:f4:5f:a2:c5:a2:84:cd:48:51:
         42:93:9a:0a:2a:98:3a:6a:65:bf:9c:d1:85:be:6f:87:e9:ab:
         fd:2d:97:2f:bf:e0:8c:19:44:44:5e:ff:ad:c9:a1:b3:ba:49:
         f1:02:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:15:24 2025 by rpki-client