Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          dbEyPzrdUqBAPJfrYJlxFZFYtE/tjfW4xXPR7icqSJo=
Subject key identifier:   6A:2F:49:B3:83:15:2F:84:8B:49:29:4F:93:EA:AE:B0:01:F7:1C:FB
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       0196C53A943C236E226E92DBFFB01731505C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 16:01:12 +0000
Manifest this update:     Mon 12 May 2025 16:01:12 +0000
Manifest next update:     Tue 13 May 2025 16:01:12 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: DRQandZIEr+qU+dkTJKpVOziWDqwhAoQitsl4J0MDJo=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:94:3c:23:6e:22:6e:92:db:ff:b0:17:31:50:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: May 12 16:01:12 2025 GMT
            Not After : May 13 16:01:12 2025 GMT
        Subject: CN=6a2f49b383152f848b49294f93eaaeb001f71cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:f8:08:ed:c4:ee:9a:8a:e2:d9:73:c0:49:
                    18:d3:65:0f:38:6a:3e:15:f8:89:da:4e:f7:8f:81:
                    95:24:84:5c:51:1e:00:c3:32:71:bc:31:c6:c9:b1:
                    a5:a2:21:ad:37:e0:45:c4:33:42:a7:03:24:a8:8f:
                    2e:92:a0:3c:b3:19:a3:17:86:82:89:f2:09:a0:d3:
                    2d:5c:3f:c8:05:ae:30:c8:58:87:6d:d2:50:a6:15:
                    ac:6d:71:e3:0d:1f:87:f7:10:9b:8b:1b:30:4c:10:
                    ef:47:c9:5a:21:ba:c1:94:44:72:41:26:0a:ab:ca:
                    6a:a4:01:ee:fd:8c:7c:af:43:1f:fa:70:1d:11:a9:
                    00:19:ca:6c:ad:e3:03:97:7c:3f:f3:3a:6e:c4:e7:
                    96:3b:ce:87:80:8b:d1:61:77:65:b1:46:8d:08:e9:
                    4d:1f:0e:3a:8b:47:35:a1:62:52:e8:fa:f8:c3:4d:
                    32:96:31:0f:f6:2f:2a:85:ac:05:f3:08:b3:26:92:
                    a5:4a:b1:91:f2:de:ee:9a:02:ce:81:3b:05:2e:5b:
                    4a:bb:95:7e:9a:43:cc:3c:67:d9:cf:40:58:01:b5:
                    13:17:f7:71:69:b4:84:05:4e:2c:3c:ae:82:91:b0:
                    8e:eb:d1:f4:14:8f:8a:40:e9:cf:93:45:f1:48:58:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:49:B3:83:15:2F:84:8B:49:29:4F:93:EA:AE:B0:01:F7:1C:FB
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ad:fa:53:c7:4c:40:be:39:e0:ae:b5:79:ac:01:74:11:00:
         ef:d9:99:26:ad:48:84:cb:db:17:e4:5c:8a:2e:a2:c1:b4:a9:
         2e:64:14:6b:07:0d:29:c2:14:d6:fd:ca:c4:41:07:86:a5:f7:
         01:84:15:42:a7:68:bb:1e:40:f9:2f:58:7b:5d:f6:5e:02:84:
         ff:6b:f8:1a:6a:78:6c:75:c8:45:3c:08:72:9c:0a:6c:6a:64:
         52:cb:22:ff:e8:51:db:9d:82:7e:a9:48:62:e1:80:44:b6:c1:
         e9:d5:55:d9:5e:01:e8:5b:c5:25:9a:40:d1:3e:b3:a5:e7:3a:
         10:ee:6c:95:94:db:4b:68:0b:9e:19:6c:41:bd:3d:87:a3:fe:
         dc:90:df:50:3c:2f:b2:cc:9d:31:44:cd:a3:5c:29:17:4e:8e:
         df:6c:60:91:98:a3:95:7b:9a:56:62:32:7a:45:8c:f3:35:7d:
         61:80:39:5d:35:7b:bb:da:96:df:00:f2:6d:65:29:58:82:2a:
         08:b4:71:37:d4:3c:5b:0f:66:b7:93:e8:8f:fb:68:ea:e9:0e:
         81:99:09:c5:3e:b2:d8:1d:28:80:f5:e4:f8:70:12:ff:c8:cc:
         88:25:fe:d6:5b:31:7d:e1:87:64:22:52:6d:1b:c7:9e:f9:2d:
         03:ba:ac:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:13:49 2025 by rpki-client