Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File:                     VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier:          fadChXcAHJopA3F40hQGP36QnU9ALI/U9HxWRm9/hVQ=
Subject key identifier:   E2:86:14:E5:1C:97:B6:D5:B7:B1:53:BB:11:A5:47:1F:AF:D0:1C:A0
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer:       /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial:       0196CDCF80E6056FFC0FFB939E1EB2117F0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number:          0156
Signing time:             Wed 14 May 2025 08:00:50 +0000
Manifest this update:     Wed 14 May 2025 08:00:50 +0000
Manifest next update:     Thu 15 May 2025 08:00:50 +0000
Files and hashes:         1: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: xF9n2xYDKX5Ml+4CKZCj3wOFUF4goYkqy2dUNQ0YfPw=)
                          2: gz5Fn0iYS2J-2PWlXPOubZS66_c.roa (hash: 3ZNULpIUwqK52p1xdQUbvRyZUixjUvhEv6tYcx6J92Y=)
                          3: zfYBzyR4XCbBgM1ilkxfdwCQIbQ.roa (hash: ZQ37lZflawjbgxhO2eI1Uv+5KVEl1Uecz8BJ0COt2xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:80:e6:05:6f:fc:0f:fb:93:9e:1e:b2:11:7f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
        Validity
            Not Before: May 14 08:00:50 2025 GMT
            Not After : May 15 08:00:50 2025 GMT
        Subject: CN=e28614e51c97b6d5b7b153bb11a5471fafd01ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:3a:7e:62:8e:db:9e:17:6f:66:d8:03:b5:
                    cd:cf:e7:71:78:fa:f8:a0:02:23:44:ee:e9:dc:e5:
                    18:e2:31:2c:1e:45:70:86:c5:0e:e6:17:97:36:9c:
                    ea:62:d0:25:45:72:10:c2:eb:72:e4:e0:e1:01:0f:
                    2d:53:79:c0:09:83:6b:b3:a5:e6:a4:75:58:a4:9c:
                    5f:13:2b:e5:0c:82:34:86:fe:a1:0a:0d:53:c3:9f:
                    ae:e9:6c:d5:61:61:90:51:72:ad:4e:f0:ce:4d:08:
                    08:69:f0:b7:5f:3e:76:84:a8:fa:6c:e9:4b:4b:e9:
                    53:c7:19:e1:36:30:92:91:5e:ce:4e:e4:00:64:b0:
                    c4:24:bd:11:b6:34:dd:1f:eb:71:29:3a:7b:bb:3c:
                    0e:d6:ba:69:f6:c4:e0:21:f0:8c:2c:9d:09:06:79:
                    c2:9d:db:1d:31:35:27:7c:fb:28:2a:84:4b:87:bc:
                    af:1f:29:97:b3:cc:58:59:83:cd:0c:83:5d:a4:05:
                    42:ce:e6:2b:a7:95:e2:c2:2a:4e:6d:19:85:c2:ec:
                    b3:13:80:0d:4c:73:2c:8b:75:e5:1b:a5:32:7d:a1:
                    85:9d:42:dc:5d:f5:09:8a:b0:b8:7c:8f:61:ee:50:
                    ab:54:0d:6d:c4:e2:08:88:5e:32:1c:d8:ed:00:8e:
                    b8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:14:E5:1C:97:B6:D5:B7:B1:53:BB:11:A5:47:1F:AF:D0:1C:A0
            X509v3 Authority Key Identifier:
                keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:5b:eb:6e:32:fb:0f:90:3d:aa:13:f6:b7:da:4a:f4:70:
         6c:37:30:92:19:87:1b:69:6e:51:2b:1b:01:3a:7d:7e:92:16:
         b6:1a:cf:1e:8f:5c:71:ab:19:b5:5c:f4:43:9a:de:15:d5:38:
         26:58:61:b5:83:58:51:42:9c:2e:21:e4:49:17:84:58:61:82:
         ff:71:fa:a7:0c:6a:d2:ec:27:55:03:b9:f3:7f:6c:0c:f6:8f:
         57:c6:07:97:25:b8:d1:82:85:07:5a:42:9e:41:27:ec:78:0e:
         8f:6d:1d:c4:b8:29:77:d6:30:a2:a6:bb:2b:01:53:01:f4:15:
         b9:f6:1f:98:30:30:1c:40:24:f2:8f:63:cb:57:7b:71:75:82:
         99:83:1b:ba:28:9a:c7:6e:44:50:fa:73:65:f1:38:d5:90:8b:
         b3:8a:00:80:fa:a8:2b:a5:f5:79:b1:72:d2:e3:25:0f:2b:4b:
         02:d9:da:58:f9:41:7c:25:55:79:89:e2:38:a7:65:05:ba:6f:
         7e:03:16:b3:22:72:00:ce:05:59:59:cd:8d:0d:1b:45:ee:76:
         d4:8e:39:00:c0:3f:4f:ac:6a:70:8d:eb:b1:00:09:4e:e2:be:
         fd:a9:d3:03:44:47:86:91:6f:d4:8d:9d:12:eb:0b:3d:0d:fd:
         3b:d5:40:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:42:17 2025 by rpki-client