Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          tZzkhunm54oxhDAHrq81eMC/VulDO3KYXbpohM2fCxM=
Subject key identifier:   40:00:D6:22:70:D0:05:27:2D:40:59:AA:26:BC:0B:AF:D4:23:47:BB
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       0196C314C866B0AC4E7AF1281B7C4746074E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 06:00:41 +0000
Manifest this update:     Mon 12 May 2025 06:00:41 +0000
Manifest next update:     Tue 13 May 2025 06:00:41 +0000
Files and hashes:         1: 8Ka9rxc0YKocFkWcaDXR1ONcgME.roa (hash: usLLszkWwMw6Nc8UOkM6uTFB1CmI/iSWcsPGfnYTo08=)
                          2: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: 2jGAbyUkywdaLjbfytkki9mzN/QzpPHMr7QXinPYDHU=)
                          3: Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa (hash: rqvXt2CssSw6L3PQ9/nqjpjhgnLM7ZB7CTFTgI4c5Qs=)
                          4: ajS1l9bTEjVqB1ygFPAWcG-Q9kQ.roa (hash: uL6fZ/UsSnnW3wqVpmK15xjLej5W2U7a16D6Y1oklZo=)
                          5: vukdtTF8gJW6aLYtFAgpB-1xyO0.roa (hash: m3ugJ7KMai4fpszgDOIdVX816p3QuqcOk8kPIMOxT+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:14:c8:66:b0:ac:4e:7a:f1:28:1b:7c:47:46:07:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: May 12 06:00:41 2025 GMT
            Not After : May 13 06:00:41 2025 GMT
        Subject: CN=4000d62270d005272d4059aa26bc0bafd42347bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:c0:dc:eb:e0:65:99:b8:4e:18:41:f4:4e:
                    76:9e:be:1f:db:b3:8b:1c:ba:02:46:cc:e7:da:0f:
                    4c:0a:eb:aa:06:15:4c:72:7b:49:3e:7f:87:b8:1d:
                    75:84:29:63:c2:0d:a4:17:a8:58:2e:48:66:52:b0:
                    de:d2:4b:ee:e1:98:eb:ad:b3:1d:1b:c3:14:88:df:
                    8a:d7:78:89:fa:e3:b2:7e:11:32:bc:19:dd:59:04:
                    86:9a:5b:d6:ed:76:fd:0b:61:d8:c9:51:d4:70:b5:
                    22:2a:b2:ac:2f:47:95:57:7a:6a:9b:1e:33:8d:03:
                    3d:fd:00:55:51:be:2f:1a:26:1c:cc:30:4e:1b:e2:
                    ce:7e:e9:b9:4a:e6:5e:97:6d:fa:ff:75:82:f3:e8:
                    eb:a5:c4:ed:f2:83:6b:2c:08:87:c0:a6:17:f5:5c:
                    f1:3d:f9:fc:4a:00:99:12:b9:b2:e8:32:14:94:40:
                    e2:9a:44:54:1e:77:2f:2e:cf:57:db:d7:0c:cd:e3:
                    21:af:f7:f7:82:42:ab:d7:96:e3:51:75:7c:93:ef:
                    b8:fe:f1:1f:8d:2e:d7:63:a9:97:40:c9:27:59:16:
                    76:8f:03:35:54:e1:b1:3d:b8:7e:0d:c3:7c:71:12:
                    1b:b9:96:4d:6b:b0:72:25:03:51:6d:b2:ec:8f:67:
                    c8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:00:D6:22:70:D0:05:27:2D:40:59:AA:26:BC:0B:AF:D4:23:47:BB
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:90:2e:dd:4b:ab:ed:56:fc:45:80:fb:fd:9b:3a:2b:98:18:
         b3:70:f7:bb:a6:1e:16:a0:8b:5b:11:70:c4:f0:28:66:38:35:
         04:c1:29:4f:43:dc:13:8c:2f:92:40:52:df:33:bb:87:71:71:
         b5:70:9d:02:95:e7:77:44:6b:78:14:63:ac:bc:0f:ab:2d:4b:
         0b:5f:2e:46:85:af:2e:7c:ab:84:c6:40:2c:31:6b:c5:4a:52:
         d7:77:95:91:cf:d8:84:ea:85:34:3d:af:e3:80:ed:20:d5:b3:
         0d:4a:16:e6:3a:7a:06:db:34:15:aa:10:76:5a:48:c2:4c:73:
         d2:2e:77:a3:54:8d:24:80:5a:80:26:99:da:20:e4:ed:ca:7c:
         71:23:e0:b9:eb:c6:02:cc:61:41:f6:c4:d4:57:7b:f6:2a:78:
         d4:ce:ad:cf:85:ea:5d:a8:6b:7f:f0:27:da:30:ed:fc:7a:ec:
         8c:c2:fe:5a:3c:ca:3c:40:92:a4:0d:d8:71:c8:71:7c:f6:80:
         a0:f7:e8:01:9c:4b:c2:86:d7:16:a5:eb:7d:f7:5e:d7:6f:3f:
         2b:5f:1b:23:65:a2:6c:3d:86:94:14:8f:5b:e7:08:98:eb:dd:
         bd:87:67:b5:8a:d1:26:81:e1:3b:af:e2:06:68:4b:5e:24:07:
         a4:40:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:27:25 2025 by rpki-client