Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          Rp6Z8F40rFh5g/HCceAtO9f0oTBYg0pA/9NOG6MGp9o=
Subject key identifier:   4A:BF:18:00:C3:0B:A8:6F:B7:56:AF:87:0C:C4:D1:54:D5:9C:F3:95
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       0196D0D0F8F550859F57740A09FFC3B5D7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1540
Signing time:             Wed 14 May 2025 22:01:18 +0000
Manifest this update:     Wed 14 May 2025 22:01:18 +0000
Manifest next update:     Thu 15 May 2025 22:01:18 +0000
Files and hashes:         1: a9grNvqYQZL96vSZgUaaUYW4pkM.roa (hash: UKQ9pbHuGJ7bkpOIdTsqFdrfM/n6bQ9BIxk/0hKXTX8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: amSqTOff1JDnC8SG4t+71YHhHAu1bwghVO/3NUzY4mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 17:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:d0:f8:f5:50:85:9f:57:74:0a:09:ff:c3:b5:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: May 14 22:01:18 2025 GMT
            Not After : May 15 22:01:18 2025 GMT
        Subject: CN=4abf1800c30ba86fb756af870cc4d154d59cf395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:f3:44:6d:fd:0c:ee:b5:78:7b:0a:ba:a8:
                    a2:e5:91:d6:ad:b4:80:9a:7e:76:35:0f:74:45:16:
                    87:de:89:4d:b9:fc:ce:ff:35:25:77:e8:d9:fd:30:
                    55:0f:9d:8a:49:de:26:d8:e1:aa:a0:46:1f:03:20:
                    40:69:8b:76:5e:38:2f:a0:66:78:38:1f:d5:4b:3c:
                    f0:a1:1e:32:0f:24:9c:d2:20:68:29:25:ed:70:8a:
                    3c:6a:77:45:ac:64:3c:95:79:04:73:76:36:97:df:
                    76:6e:d3:51:c5:32:c7:47:7a:59:f5:61:d7:45:81:
                    45:e7:68:bc:0e:9e:54:55:db:b7:45:45:83:e9:5b:
                    f8:03:a4:76:38:84:54:4e:88:39:e8:56:b2:67:5b:
                    48:af:f4:a7:b6:de:60:30:66:fd:f3:70:bd:17:57:
                    92:a9:d0:19:49:76:c3:80:dd:84:8d:4a:77:62:d2:
                    3d:91:be:03:de:f3:f8:ff:a8:df:c8:0e:45:17:f6:
                    c5:64:ae:ec:40:f0:d1:86:7d:eb:e7:a8:6d:19:e1:
                    23:90:bb:e9:20:f7:82:7a:75:fb:e6:47:b7:72:b8:
                    00:ff:95:2a:21:56:a2:f1:3d:fb:65:1a:6c:15:8f:
                    bc:27:e8:6a:0c:61:38:98:98:9b:4d:9c:98:1a:4f:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BF:18:00:C3:0B:A8:6F:B7:56:AF:87:0C:C4:D1:54:D5:9C:F3:95
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dd:a0:95:c3:cb:a9:82:5c:d0:31:c9:00:b8:5e:b9:86:cd:
         df:15:17:ba:68:66:2d:be:4e:9b:a2:19:b6:f9:ce:b3:fb:e6:
         28:a6:41:9e:c0:e3:90:4e:1c:8e:f1:db:c1:4e:67:c6:11:d9:
         0f:b7:4e:20:2e:34:84:58:af:dd:bd:3f:a6:5c:d2:f1:19:16:
         f2:50:25:ae:f8:fd:39:43:57:59:43:f7:46:60:52:36:5d:8c:
         e7:d7:e2:eb:bf:f0:58:df:cc:57:e6:7c:ea:a2:24:b3:a2:48:
         60:55:c7:9a:c6:5f:3a:09:f0:4b:aa:4e:41:24:f4:63:99:f3:
         2a:66:81:24:7d:1e:e4:56:7b:b9:a2:de:0c:4d:cd:f8:12:08:
         f1:e3:0f:c8:ba:8e:3c:64:8d:8c:f8:8a:0f:5e:bc:ac:ec:fe:
         71:f1:b3:09:1d:32:0a:14:ef:1f:88:18:30:93:1e:ad:73:bb:
         f7:d7:f8:31:49:f2:03:94:14:21:19:18:ea:16:52:7f:77:7a:
         1d:74:9c:8a:0f:f2:dc:20:81:04:f9:02:e9:05:aa:b6:65:4b:
         37:85:10:48:4b:f7:cf:7c:ae:b4:ad:f7:18:07:a0:c7:81:c6:
         1c:0f:db:8e:9a:75:a7:aa:a3:62:84:cb:48:95:e8:a4:db:ae:
         72:86:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:01:27 2025 by rpki-client