Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          k0DBgPd4vUgKxe2AQkejKFryI+Ld3HjcpQ1I8DwQ3hE=
Subject key identifier:   6A:DA:2A:5D:DB:38:07:6D:C6:6D:42:D1:C1:A6:3F:F5:B2:4C:C9:2D
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       01969CE28F6E118E4C85EB74991E94129AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          0D4B
Signing time:             Sun 04 May 2025 20:00:15 +0000
Manifest this update:     Sun 04 May 2025 20:00:15 +0000
Manifest next update:     Mon 05 May 2025 20:00:15 +0000
Files and hashes:         1: UTTH-IaK-KygVMC3443mlQMx1tE.roa (hash: KaccohMbQWCa0xUtmGU3VvPQYUMzJjUZd1bKqbI3gbU=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: lZOx11S0FwwLLljGlFJJLslDwfdoja0P9m4RAcCM+fk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9c:e2:8f:6e:11:8e:4c:85:eb:74:99:1e:94:12:9a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: May  4 20:00:15 2025 GMT
            Not After : May  5 20:00:15 2025 GMT
        Subject: CN=6ada2a5ddb38076dc66d42d1c1a63ff5b24cc92d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:94:9a:7b:38:14:2f:c0:f7:b7:fc:90:58:
                    38:92:33:cc:21:33:7e:d9:87:57:c6:58:29:93:b1:
                    c0:09:5b:a0:bf:66:59:63:14:eb:c4:8a:00:38:59:
                    c8:81:89:42:19:cc:e7:ce:db:95:f7:6b:84:c0:53:
                    f6:5b:a6:5b:84:d2:c3:be:ae:c7:1b:aa:cf:db:c5:
                    cb:3d:08:93:9d:6a:5b:0c:b5:3c:1f:6b:bb:67:05:
                    73:e7:a6:7c:65:0c:2e:c3:46:42:5a:62:41:18:12:
                    57:ab:e7:53:6f:55:b1:45:36:6c:5d:af:6a:f6:f8:
                    eb:00:52:4f:c4:7d:b7:5b:91:3e:04:c6:28:3b:5c:
                    c6:24:f3:a2:f4:e8:eb:95:44:cd:1d:56:e6:c0:f6:
                    b0:77:e8:1b:16:ef:26:43:9b:cc:91:85:cb:9d:99:
                    91:2f:63:76:73:bb:d7:38:58:78:3e:aa:3d:58:75:
                    4a:d4:13:4e:78:4e:ad:90:ed:80:1d:32:71:c4:33:
                    0e:4f:8e:73:80:41:b4:f3:7e:25:1f:7d:d3:fb:54:
                    e3:73:82:10:a7:4d:fe:cf:69:43:f4:eb:88:5b:f3:
                    f7:95:fb:47:df:d4:d1:36:9e:71:fa:62:f8:a0:1d:
                    eb:98:f9:6f:f1:bb:07:d9:ed:c2:4f:30:70:cc:d6:
                    ba:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:2A:5D:DB:38:07:6D:C6:6D:42:D1:C1:A6:3F:F5:B2:4C:C9:2D
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fb:a6:c7:1e:ce:6d:3c:6d:e4:20:b2:dc:8d:b3:4d:29:28:
         7e:2c:ed:37:2d:f2:4c:dd:dc:27:e6:56:25:cf:2a:92:91:8a:
         62:cf:2a:48:5e:b3:93:65:e5:56:94:98:dd:53:d0:2d:4d:ac:
         6e:7f:68:42:20:0a:91:df:d3:bf:18:1d:4d:c5:b6:3f:77:15:
         0c:0a:f8:b6:83:cd:f9:c9:b2:df:26:c9:c0:24:dc:c1:e2:f9:
         a2:d4:06:11:a9:25:24:44:d6:79:a9:18:01:bf:59:3c:1f:b3:
         02:5e:fe:4a:7d:6b:49:77:d1:89:75:c5:8f:f2:2c:21:cd:6c:
         3c:d8:f6:28:f5:98:9a:30:90:e7:ac:9a:66:80:9d:ea:e6:16:
         36:e6:3f:04:23:2e:ea:26:ab:39:3b:70:12:97:dc:b3:97:a5:
         c3:3a:b1:21:81:06:4e:a5:cb:53:39:bf:c8:10:7b:7f:89:b7:
         1d:26:66:d4:fb:ba:be:7f:a4:75:d3:22:69:aa:10:08:f9:e7:
         2e:76:31:8c:58:d8:e7:7a:f2:f0:46:f9:70:75:86:c0:19:51:
         ba:83:55:47:6c:5c:a6:4d:fb:bf:a2:9f:49:5d:c0:a3:44:b2:
         3d:0e:75:86:bb:ce:a6:2f:f5:ee:8c:ac:c6:82:a9:be:53:bf:
         eb:87:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:14:22 2025 by rpki-client