Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
File:                     Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft (raw, json)
Hash identifier:          ux6jsRVNwwRcmWprmNWpf/zffOTrob+7P1BSRJTo2nk=
Subject key identifier:   6B:15:03:D3:79:57:DF:43:4B:19:AE:EE:AC:FF:71:AC:E2:FB:29:53
Authority key identifier: 56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4
Certificate issuer:       /CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
Certificate serial:       01969CE3048C4804E6DD1E86D0F95779D5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
Manifest number:          1448
Signing time:             Sun 04 May 2025 20:00:45 +0000
Manifest this update:     Sun 04 May 2025 20:00:45 +0000
Manifest next update:     Mon 05 May 2025 20:00:45 +0000
Files and hashes:         1: Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl (hash: BVlDvmBmVswpUnH2LM99HnOmHkBJzjF5ZRDWjlSIbMI=)
                          2: xE3UCINMnG0RCT_m2jFifz3YI_I.roa (hash: 4ag6h9vHiKl6oco6jDKbi/mumQRgQeuzaOi8WereNNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:e3:04:8c:48:04:e6:dd:1e:86:d0:f9:57:79:d5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56cc7f4ac700bb5ad7f4b21c11111493ff6977a4
        Validity
            Not Before: May  4 20:00:45 2025 GMT
            Not After : May  5 20:00:45 2025 GMT
        Subject: CN=6b1503d37957df434b19aeeeacff71ace2fb2953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:c6:9b:4e:d4:f8:a7:84:19:19:68:54:09:
                    b5:29:16:43:19:4f:20:6e:b1:70:32:15:19:cb:6b:
                    b5:17:c5:e8:32:e3:62:dc:97:a0:78:f9:c0:23:c5:
                    33:0f:d8:32:1c:32:0e:83:0e:39:a1:fa:e4:dc:e0:
                    27:4e:87:c7:78:2e:f6:22:f2:a3:f3:17:59:6b:89:
                    dd:99:22:64:8b:e7:e6:52:7e:ae:4b:73:8b:73:89:
                    f9:ff:4a:9e:75:6e:d5:6e:3f:3d:85:24:fe:55:ae:
                    66:5d:55:19:dc:7a:d5:51:b2:2b:be:23:ef:36:eb:
                    1f:69:26:5b:28:a4:73:34:a7:6d:4e:ba:ab:12:c3:
                    28:b9:3a:55:b8:34:09:5a:af:c6:4a:c5:65:82:c7:
                    73:65:4b:c7:b1:be:9c:70:34:7f:4a:cc:5e:93:d1:
                    2a:e1:51:db:06:77:60:d0:65:17:5e:ce:75:04:4e:
                    92:b5:1b:c7:be:3f:26:0a:ea:f2:77:49:64:76:18:
                    cf:57:db:f2:5f:f2:e4:c5:a1:47:b0:f8:58:0d:7b:
                    f2:ba:0c:88:84:c6:ef:72:1a:60:88:24:6a:c3:30:
                    0a:eb:03:80:ed:97:7d:17:b7:53:f6:77:63:1a:e7:
                    99:72:3c:fd:76:40:fc:33:4f:dc:1a:54:83:58:03:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:15:03:D3:79:57:DF:43:4B:19:AE:EE:AC:FF:71:AC:E2:FB:29:53
            X509v3 Authority Key Identifier:
                keyid:56:CC:7F:4A:C7:00:BB:5A:D7:F4:B2:1C:11:11:14:93:FF:69:77:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vsx_SscAu1rX9LIcEREUk_9pd6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/09bf98-590d-4ad5-9eb3-9b86bffc833c/1/Vsx_SscAu1rX9LIcEREUk_9pd6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:7d:2e:ad:f9:b1:ad:9e:9a:c5:d4:56:64:86:e6:af:e6:
         26:be:ff:1b:51:56:d8:33:90:53:42:be:05:53:fb:f4:78:8e:
         ca:94:78:c0:94:e5:ac:f0:ad:82:b9:1a:80:cc:fe:26:ac:fa:
         8d:9e:ac:1a:c6:96:67:54:d2:84:7a:47:6e:0d:0a:6a:aa:4a:
         ad:59:07:b6:b0:f0:c5:6d:dc:53:91:e0:05:15:c5:e6:76:5e:
         de:bd:b0:ff:89:8c:4c:6e:a4:91:5d:0f:3f:15:67:ad:85:29:
         75:73:e3:79:6c:18:a6:97:5a:ca:2b:fc:ac:c4:f9:f8:1d:41:
         9e:40:86:e9:d8:f7:ab:0e:5e:bc:c5:5d:15:8b:86:99:84:a3:
         2b:d0:2a:1f:ec:92:c4:63:2e:02:74:6f:49:eb:2c:e4:83:42:
         a3:8f:51:6b:72:8e:07:80:12:3e:f6:77:9f:0b:b6:78:80:a4:
         46:38:2b:e8:3c:46:ea:09:d1:32:65:ea:78:f0:43:03:80:7e:
         a8:fa:12:7f:2a:58:37:52:69:53:65:e7:63:ec:f9:42:78:44:
         e0:ed:be:62:b2:b4:1b:58:23:cc:68:49:64:59:87:2d:ad:1b:
         12:89:43:ff:3b:98:6b:60:2b:5b:e6:8f:17:ec:48:f5:ec:a6:
         1c:f9:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:34:57 2025 by rpki-client