Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File:                     VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier:          2yd/etmYuuE7P0mG5Fjq+3vAW417hq7TKkxnW08D7P8=
Subject key identifier:   75:DA:C5:7F:EF:D9:78:F3:E3:80:C3:5E:06:31:58:64:5B:B2:D2:44
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer:       /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial:       0196C04ADBF1525EA78098993C4524930AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 17:00:53 +0000
Manifest this update:     Sun 11 May 2025 17:00:53 +0000
Manifest next update:     Mon 12 May 2025 17:00:53 +0000
Files and hashes:         1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: KlKikHhm3NF1e2xiOXjVE8e/qQTug3Wsso+7GYygli8=)
                          2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:4a:db:f1:52:5e:a7:80:98:99:3c:45:24:93:0a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
        Validity
            Not Before: May 11 17:00:53 2025 GMT
            Not After : May 12 17:00:53 2025 GMT
        Subject: CN=75dac57fefd978f3e380c35e063158645bb2d244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:6c:f1:bc:78:67:af:28:95:f2:b9:16:18:
                    00:a6:57:ce:07:18:f3:91:9a:bf:f2:3b:48:3b:d0:
                    62:47:2b:19:e3:c6:d4:97:05:1e:af:e0:21:f3:30:
                    30:a7:3f:d1:28:b6:b0:0b:e4:5a:c8:d0:64:dc:5e:
                    f1:aa:24:4d:7a:14:ed:21:bb:9d:0b:e5:9e:6c:8e:
                    e1:9e:02:c6:20:e1:a5:35:0a:ad:33:d6:e5:17:46:
                    f0:25:33:5f:b8:3d:6c:9c:7c:bd:41:88:70:99:6e:
                    6a:ef:3c:99:e3:14:e3:b2:62:7e:e6:df:bc:b0:f6:
                    39:d3:03:5e:6a:f9:0f:10:1f:c0:ae:22:04:61:02:
                    1a:07:1e:7d:f4:0c:d0:bb:2a:09:f3:11:74:37:45:
                    3b:67:c8:69:57:86:c2:d9:cf:40:e2:5e:d6:77:f4:
                    f4:cb:ea:0a:10:8d:b5:8f:a2:20:78:28:85:55:a2:
                    e5:a5:d7:80:bf:81:01:d1:5a:e0:bf:56:6e:9c:38:
                    c4:71:9e:59:ad:a4:4d:17:a0:ed:2e:6f:11:cc:44:
                    70:9c:fe:72:71:0d:67:65:96:61:d2:27:3c:38:7c:
                    fd:93:68:44:0d:46:2e:6a:6e:fc:c5:09:bd:9d:9e:
                    c5:bf:e7:d4:f0:15:1e:e0:a6:7a:8a:d0:e3:05:bd:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DA:C5:7F:EF:D9:78:F3:E3:80:C3:5E:06:31:58:64:5B:B2:D2:44
            X509v3 Authority Key Identifier:
                keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:50:78:0e:c7:0f:17:c6:02:75:22:1c:d7:e1:ed:6e:51:c2:
         65:ad:33:dc:aa:8e:3d:cf:95:d4:d4:33:e5:17:41:63:54:4f:
         64:fe:d0:9a:a6:15:8b:65:44:2b:e4:57:7c:fb:5f:d0:9a:12:
         25:a2:a0:f6:ed:e7:e6:62:a6:64:f2:ee:de:94:83:e7:82:bb:
         83:6d:9b:d1:75:c8:8f:ca:27:ec:6f:36:a4:16:80:71:c7:92:
         e5:f8:ff:fd:dd:46:f5:c4:fe:2d:8c:a9:98:98:f4:0e:71:1d:
         13:0c:25:ed:36:52:cb:43:ce:b8:28:c8:0e:c7:f6:39:71:46:
         00:5e:fc:d2:90:47:25:e7:f7:09:d7:ea:3d:18:8e:35:81:0f:
         3d:48:4e:23:b3:40:c0:e6:a5:a5:09:84:f9:1e:04:dd:7a:54:
         14:5c:21:5d:18:10:14:fe:34:5e:e0:ff:df:be:c4:9e:1d:7a:
         a1:20:e2:e3:67:3a:c1:8f:a3:4f:3b:df:7f:86:68:5b:7c:7d:
         3f:8f:96:8e:7f:ca:55:43:b4:80:0a:2e:8d:d4:0d:fc:81:62:
         a9:10:ea:77:4c:9e:d2:13:08:e3:76:d7:99:45:e8:64:42:39:
         71:a3:dd:7f:ac:f0:d5:04:fa:37:c7:4d:09:b6:c3:65:2f:3e:
         ce:af:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:57:33 2025 by rpki-client