Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
File:                     RgVeggAswL17mYfl1zZUIOr9SXA.mft (raw, json)
Hash identifier:          OCp8JFFvQQ78a+2V6YOyL1X+yIzWxa+wQ8KNqcKK/tY=
Subject key identifier:   5F:4A:76:05:9A:07:C1:49:7B:8F:EB:FE:B1:44:38:5D:09:29:04:76
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Certificate issuer:       /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial:       0196AEB23CFB11ECF10464C26BE792CFA25B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
Manifest number:          1530
Signing time:             Thu 08 May 2025 07:00:38 +0000
Manifest this update:     Thu 08 May 2025 07:00:38 +0000
Manifest next update:     Fri 09 May 2025 07:00:38 +0000
Files and hashes:         1: RgVeggAswL17mYfl1zZUIOr9SXA.crl (hash: NlFbp/c9W0/fYwT0yoMSqhiAgX6nVBwBrZodcTZ9g4M=)
                          2: VJnm1AkHiE7SuesA5idFH1REQdA.roa (hash: 1LlBKB7vOsPJ8FvhzoxofY1Pd+poAd3OYPCwf4CTRNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:3c:fb:11:ec:f1:04:64:c2:6b:e7:92:cf:a2:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
        Validity
            Not Before: May  8 07:00:38 2025 GMT
            Not After : May  9 07:00:38 2025 GMT
        Subject: CN=5f4a76059a07c1497b8febfeb144385d09290476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:9d:50:0f:19:96:b6:6b:cc:bb:d3:8f:5b:
                    63:26:c1:8f:85:d6:b7:58:d1:2d:53:81:b1:df:34:
                    74:ab:d2:c4:6a:65:d6:04:3f:98:c2:fb:28:b4:1d:
                    88:ef:2c:b7:ff:54:0a:36:eb:8f:fa:20:d1:81:84:
                    89:ef:87:c2:05:e1:dc:33:1a:5e:da:6f:b7:e3:69:
                    c2:b8:01:cb:ef:34:f3:15:00:de:8c:2e:66:eb:e9:
                    4d:6d:fb:b1:81:ae:1d:e2:d2:c1:18:17:82:fe:d4:
                    83:d9:88:81:b9:d7:26:db:ce:0b:6d:a2:61:3b:bf:
                    9d:07:94:f0:49:30:f1:99:3f:6f:5e:5c:3f:9d:7a:
                    5f:46:41:69:2a:9f:25:b4:43:4d:6f:71:64:3d:7a:
                    4f:0c:37:11:ab:ce:46:f3:41:6a:54:20:83:46:8d:
                    58:a1:5d:9e:b6:d6:f2:a0:f4:8f:40:9f:39:5f:67:
                    e9:fa:bc:b8:c2:1e:d7:33:3a:45:92:b2:3e:da:8c:
                    06:0c:be:bf:7c:00:35:ee:b5:07:03:25:94:c2:eb:
                    11:21:08:b2:61:c3:ae:ee:db:e2:2a:74:ac:2b:3d:
                    04:d9:c3:8f:a6:51:9a:cf:41:52:5f:43:18:46:57:
                    7b:a0:73:a9:5f:9c:3c:b6:31:5b:bb:4a:9f:0c:82:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4A:76:05:9A:07:C1:49:7B:8F:EB:FE:B1:44:38:5D:09:29:04:76
            X509v3 Authority Key Identifier:
                keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c7:dd:d8:51:53:a4:82:52:33:ab:f0:e4:de:8e:08:8d:bd:
         b3:8b:5e:69:a9:60:a0:55:f5:d7:68:05:8f:56:7c:c8:2d:f5:
         7e:af:ba:b1:d6:d3:a8:5f:ab:46:2c:57:95:9e:92:ee:61:59:
         fc:0d:bc:87:6e:d5:46:77:6d:7c:b2:0f:0b:d5:f6:e1:41:2e:
         5f:e8:c2:49:e6:7f:3e:a4:21:ee:2c:22:60:f9:69:fe:f3:b5:
         87:15:50:ac:ad:2e:43:07:dd:00:fe:b9:8d:8d:39:83:4c:26:
         a3:2d:65:26:6f:68:49:62:a5:21:be:d8:49:c9:ae:e8:11:ee:
         e6:73:9e:44:6a:3d:de:b9:cb:27:78:93:93:7a:fd:97:26:cc:
         2e:d1:78:bc:b0:96:f4:b2:49:35:e3:67:76:96:46:f9:7e:f2:
         c0:ec:93:9b:6f:f6:d2:0b:41:1a:fb:76:80:48:ac:55:15:38:
         4a:c3:2a:e0:81:8f:4d:ec:4d:4e:1b:6e:ee:bf:7f:a1:80:8f:
         0b:e9:a4:05:b3:97:0e:28:3a:bc:85:46:03:8e:ac:a9:e8:4e:
         89:81:1c:d0:42:31:53:3f:95:5c:88:89:55:29:19:7e:93:0a:
         57:1d:03:5a:b4:ab:d5:d0:d9:4f:e8:ee:95:33:d4:c0:14:9d:
         8f:ea:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:33:28 2025 by rpki-client