Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File:                     vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier:          mY6qssx1rjHyapiM4RoSUndksgTHyJeVlup//I8mUPc=
Subject key identifier:   DA:58:75:11:3B:18:C2:84:49:D3:11:7A:3A:CA:AF:DE:39:0F:FE:17
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer:       /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial:       0196DC9D75118D66A34ABF7EC1F5F9CFD255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number:          10A1
Signing time:             Sat 17 May 2025 05:00:28 +0000
Manifest this update:     Sat 17 May 2025 05:00:28 +0000
Manifest next update:     Sun 18 May 2025 05:00:28 +0000
Files and hashes:         1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
                          2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: 8APCfdiZrtXVSoBpiRTAhscxOhS3TLhblEZRu2+zfcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 May 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:dc:9d:75:11:8d:66:a3:4a:bf:7e:c1:f5:f9:cf:d2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
        Validity
            Not Before: May 17 05:00:28 2025 GMT
            Not After : May 18 05:00:28 2025 GMT
        Subject: CN=da5875113b18c28449d3117a3acaafde390ffe17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:9d:ba:68:4a:21:80:e5:fc:c5:05:83:74:
                    6b:ae:9a:3e:10:32:70:6b:b5:15:50:98:81:3b:2b:
                    8f:4f:ea:74:58:0a:6b:67:f7:c1:4e:6e:3c:29:54:
                    e8:74:04:be:cb:c7:a8:5c:c2:50:f3:6d:83:2e:f7:
                    8d:38:82:19:bc:6a:e1:e5:f1:06:8d:e4:f4:ea:5e:
                    22:ba:7d:3c:f5:23:cc:d7:77:40:d7:77:da:3e:b3:
                    cd:bc:08:fa:8c:65:6e:a1:a8:fc:91:9a:b1:f5:ad:
                    9e:98:d2:c2:e6:96:fe:85:68:57:05:68:93:54:a5:
                    5b:bc:f6:b7:f0:85:2d:a7:1f:67:e9:1b:36:eb:14:
                    21:08:14:d1:d5:a7:42:45:41:99:39:36:e5:82:99:
                    25:25:cd:b1:4d:d7:01:b1:2b:16:e4:fc:fc:6d:e7:
                    0d:29:a1:05:65:c6:d4:43:8e:d5:e2:de:a4:d7:fd:
                    0d:67:4a:23:05:61:20:32:8f:97:82:49:80:07:99:
                    2b:d9:d1:17:70:86:6e:b3:aa:c3:fa:32:96:32:97:
                    27:2c:0a:2f:23:d9:d0:62:02:fb:8a:be:c4:bc:6c:
                    7c:94:e6:bf:06:7f:be:cc:54:52:a5:16:65:16:21:
                    5f:24:4a:34:a4:1e:22:0b:30:cf:1e:a2:b4:21:55:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:58:75:11:3B:18:C2:84:49:D3:11:7A:3A:CA:AF:DE:39:0F:FE:17
            X509v3 Authority Key Identifier:
                keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:c2:bc:29:ee:3f:19:ef:22:39:c8:f4:d8:b9:a7:80:f9:
         f7:16:81:e1:0e:0c:a2:9b:9a:b6:9e:b3:03:7b:0f:b3:b0:36:
         ef:15:3c:5b:a8:6d:51:70:3d:74:a5:6b:71:49:fe:d2:db:06:
         51:cd:1d:1a:8b:8a:05:f2:cb:c1:7d:6d:54:00:6a:84:83:51:
         20:08:b9:69:98:f9:4d:e3:7b:cb:f8:21:13:65:56:d5:79:72:
         13:1c:9a:5b:b9:2c:ec:1a:08:ff:fe:7b:53:29:99:4c:62:f9:
         b9:67:56:2d:12:99:ff:9a:e2:3a:ff:c6:9d:6c:65:bf:e9:11:
         de:3b:af:75:6b:29:32:ad:ce:31:9b:9f:ad:99:aa:93:38:ed:
         7f:88:25:e8:67:83:02:02:f8:df:3e:30:9c:97:96:77:ca:33:
         fa:ff:4b:53:14:df:1d:3a:3c:60:2f:e6:c8:1b:39:29:55:09:
         a6:33:d5:6f:a7:a2:02:85:7d:c4:2a:bd:dc:5d:28:ce:61:25:
         81:4a:16:f0:fe:6c:b1:c2:a2:2b:99:ef:32:f7:75:f1:21:13:
         42:67:15:75:71:c6:71:53:5b:08:06:33:27:f1:4f:ed:31:cb:
         18:c0:e6:49:b5:89:74:d4:1e:1d:ce:ac:08:36:19:57:92:07:
         4b:2d:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:19:21 2025 by rpki-client