Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File:                     veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier:          n5g4sQMXpzB4mwxQbyFKmhl5ZI9tbRlKyeEI0y38agA=
Subject key identifier:   D6:6A:84:0B:7E:AD:D3:E4:AD:CE:48:41:57:B1:B3:E0:87:FC:48:58
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer:       /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial:       0196BCDBF228705ACD016C7EAFF1204BB73B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number:          0C1A
Signing time:             Sun 11 May 2025 01:00:52 +0000
Manifest this update:     Sun 11 May 2025 01:00:52 +0000
Manifest next update:     Mon 12 May 2025 01:00:52 +0000
Files and hashes:         1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
                          2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
                          3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: 1BsVNKxsyYrMiToHliEN0Vy8tU5R6v2aXtBPvnd+/y4=)
                          4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:db:f2:28:70:5a:cd:01:6c:7e:af:f1:20:4b:b7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
        Validity
            Not Before: May 11 01:00:52 2025 GMT
            Not After : May 12 01:00:52 2025 GMT
        Subject: CN=d66a840b7eadd3e4adce484157b1b3e087fc4858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:f9:1c:49:7c:f4:d5:22:1e:48:7a:5e:d6:
                    8b:e0:3b:9f:e3:1f:ac:66:e3:27:45:66:b8:ee:d1:
                    98:d1:ee:5a:32:4d:1a:d2:86:b8:d3:2f:f0:42:80:
                    3c:1f:6d:1d:11:8f:04:4b:e7:48:9f:42:4b:a5:02:
                    5d:55:a0:29:f9:a9:87:9d:7a:04:41:42:49:8e:bd:
                    cf:13:03:ae:d4:46:bc:c6:37:31:3a:0b:0b:f7:34:
                    73:7e:40:1b:fd:0f:39:83:b6:64:69:67:79:ae:c2:
                    c7:bf:ba:7e:e1:11:91:2c:91:17:70:f3:8c:fe:eb:
                    5c:bc:4b:69:73:35:b0:8f:38:e5:e6:57:3f:06:bb:
                    df:86:3f:00:9f:33:87:ae:ae:7d:0c:65:bb:6c:ba:
                    e2:9e:07:fc:b0:28:b9:14:61:63:10:6d:6c:a6:de:
                    32:33:90:00:ab:4e:02:3f:33:8b:11:1d:53:e7:e4:
                    03:64:34:5c:8b:dc:23:1a:53:0b:cb:d4:43:49:fe:
                    84:f3:d2:5f:fe:75:ea:17:21:d7:82:a4:24:70:c0:
                    94:6c:b2:6f:1a:1c:d0:81:2f:5f:95:25:19:1d:30:
                    9a:05:a6:eb:cf:1a:9f:51:cc:9f:d2:7c:70:9d:3e:
                    17:86:59:89:92:be:fb:67:da:e1:a4:f1:8a:28:c1:
                    d1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6A:84:0B:7E:AD:D3:E4:AD:CE:48:41:57:B1:B3:E0:87:FC:48:58
            X509v3 Authority Key Identifier:
                keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:93:e8:48:ba:96:32:7c:41:0e:b2:a7:71:14:0b:ac:1c:b3:
         9e:5e:d5:92:7b:ae:b8:cc:7d:cd:d6:50:42:08:7e:15:35:a6:
         3a:74:95:93:84:79:51:85:17:25:26:98:bc:db:53:cc:cc:1a:
         32:c8:d2:8f:6c:a9:98:f4:2e:37:16:d2:02:be:c7:02:19:45:
         82:ba:53:9b:71:e3:fa:e3:88:3d:91:59:19:47:0d:37:5e:53:
         a1:4c:c3:c0:e5:29:b8:f9:5a:96:46:1b:89:17:c6:37:54:77:
         d4:bd:71:7e:fc:61:47:a7:9e:59:80:c0:38:f9:38:a2:34:6b:
         ed:88:5e:bc:f7:01:ae:85:aa:94:24:1e:4c:a5:b2:1e:22:cb:
         bf:b5:66:b6:21:e6:b5:1a:2e:c3:c7:03:fa:fa:be:f1:c8:33:
         b2:eb:6a:2b:3f:2c:6a:c3:6f:e2:06:76:a7:bd:82:a6:84:20:
         79:da:d8:7c:71:15:7d:8f:68:9c:c6:3c:01:91:83:8b:62:ad:
         52:ee:78:71:36:64:a8:c2:71:b9:3e:69:64:24:a2:08:7b:3e:
         51:3a:8e:bc:b4:01:d8:24:4a:30:80:74:e7:5b:b3:d9:3b:1b:
         70:16:2e:36:c8:3d:5c:57:53:af:bb:f9:3a:a3:b9:8d:a8:65:
         91:7d:bc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:39:36 2025 by rpki-client