Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          eKALJA1bkc6hMGtuLD9ZvYrqHo5dzP84BnCgXId6aeg=
Subject key identifier:   C1:D4:75:AD:30:7C:72:F6:D6:D1:39:61:72:25:E6:25:F4:7A:F3:53
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       0196A9C2B00819CE68D1FCB6C23DDA21DF49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          14BD
Signing time:             Wed 07 May 2025 08:00:30 +0000
Manifest this update:     Wed 07 May 2025 08:00:30 +0000
Manifest next update:     Thu 08 May 2025 08:00:30 +0000
Files and hashes:         1: YWfBB1A6AsyoVHWPYh_PG8Oqc7Y.roa (hash: 5j8p5mvaO4of1g1DTD7WjWWwx2W9IRdFQlgp9hnSnts=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: UefBKq9vwy0PDc56ZicM7vtWQc//LDNX97T3+dW02cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:c2:b0:08:19:ce:68:d1:fc:b6:c2:3d:da:21:df:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: May  7 08:00:30 2025 GMT
            Not After : May  8 08:00:30 2025 GMT
        Subject: CN=c1d475ad307c72f6d6d139617225e625f47af353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:77:4f:86:56:41:1a:58:13:b5:3d:5b:0b:
                    c2:d9:2d:a2:0c:3d:86:3c:f5:72:f2:19:4d:13:ad:
                    67:f0:50:81:8e:2a:3f:15:26:9d:3f:79:a5:7e:5b:
                    bc:3e:f8:93:78:59:68:18:fc:63:bc:4a:23:63:4a:
                    0b:37:32:a0:28:51:21:eb:bb:23:f5:9b:54:20:14:
                    a9:73:57:18:c5:cd:80:0f:d1:5c:14:95:55:36:12:
                    3c:b1:2d:32:41:a9:63:0e:5b:ff:11:ae:b9:07:97:
                    76:02:ba:36:d0:bc:c9:1f:3d:55:e1:d8:96:94:33:
                    58:ff:72:09:01:23:89:35:c0:54:44:6e:05:4c:2f:
                    61:0d:fd:18:2d:58:e2:51:80:46:de:2d:e4:19:8e:
                    83:00:17:e1:4d:dc:5a:af:f1:98:90:86:27:56:ee:
                    05:3b:5f:79:6c:3b:6f:42:22:5b:4c:0c:9a:17:59:
                    ee:01:a0:e2:62:3d:31:26:c5:f0:c4:d5:16:3b:a3:
                    4d:f5:5c:bc:1f:e2:b8:19:b4:34:03:84:13:0a:b5:
                    31:4f:74:4d:f9:2d:fa:5a:10:43:09:21:30:25:0a:
                    19:1b:32:e8:19:db:33:a1:10:13:1d:94:a2:62:53:
                    4b:27:71:5a:fc:01:b6:1b:fd:3a:b4:d0:01:bc:28:
                    c6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D4:75:AD:30:7C:72:F6:D6:D1:39:61:72:25:E6:25:F4:7A:F3:53
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:35:0a:66:ff:69:f1:a6:e4:30:8a:0a:06:b0:c2:eb:bf:77:
         c0:33:0e:4c:4f:ff:a7:7f:ac:0d:cc:be:25:18:98:58:d3:9a:
         44:41:71:a5:db:11:d5:54:60:63:85:79:20:e1:dc:00:0d:5a:
         6f:f2:92:06:39:df:6f:b1:e6:5a:fd:28:06:b8:17:da:11:06:
         fc:c0:23:74:21:3f:ac:f2:e8:95:69:91:7e:1f:d6:8e:d5:d7:
         d7:41:4c:45:96:fd:2e:1d:c4:9f:af:0f:49:12:19:ef:f7:01:
         29:c5:ef:66:f0:69:66:de:2f:9d:4a:02:16:6a:f6:53:d9:78:
         55:da:52:85:c8:5a:e7:0a:2f:8b:45:70:3d:9e:1f:5d:20:56:
         a0:19:cb:b8:b4:a9:9c:e6:d3:83:c9:c2:17:23:ad:d3:26:6b:
         9e:96:25:46:7c:c2:81:2c:3e:9b:79:89:64:cb:89:48:2d:2a:
         c8:fc:27:cf:be:5a:58:56:27:b1:21:d0:b6:47:56:10:a6:76:
         f0:2f:67:74:43:bb:10:96:25:b0:f0:ba:a5:23:dd:95:19:1d:
         64:44:47:1b:05:2e:80:a4:01:d4:6d:95:5f:1b:76:12:c1:c6:
         94:d9:54:13:bb:18:79:09:c6:83:78:09:b6:3a:74:71:ea:43:
         c8:63:64:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:16:23 2025 by rpki-client