Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
File:                     vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft (raw, json)
Hash identifier:          zr6jz7dDjadLuK/RkEZMr6geGZOt9qx+5Hfiq969tVs=
Subject key identifier:   18:D3:FD:36:9D:6A:D5:46:B5:37:B7:7A:DA:25:56:A4:09:C3:CC:CC
Authority key identifier: BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87
Certificate issuer:       /CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
Certificate serial:       0196A352E8CF24857B7457BBCF4FC9663EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
Manifest number:          10F4
Signing time:             Tue 06 May 2025 02:00:41 +0000
Manifest this update:     Tue 06 May 2025 02:00:41 +0000
Manifest next update:     Wed 07 May 2025 02:00:41 +0000
Files and hashes:         1: Lrevspx8pK8iAQPmN_WzVm7Uz8g.roa (hash: rJO6XBbSiJFNojO75GzhljDBEykmJAUvcojH0FS1+Mc=)
                          2: vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl (hash: LE/TdwqP+JFYEboOI9o8FKq+RQtJuX6X8nHEzwIlDPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 02:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:52:e8:cf:24:85:7b:74:57:bb:cf:4f:c9:66:3e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc36b4cae090d0f49c5483f7b2f93fb92fd0ff87
        Validity
            Not Before: May  6 02:00:41 2025 GMT
            Not After : May  7 02:00:41 2025 GMT
        Subject: CN=18d3fd369d6ad546b537b77ada2556a409c3cccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:ce:bd:00:59:07:9b:3b:ba:b9:47:5e:c4:
                    64:39:fa:6b:3e:2e:aa:83:fb:65:14:6a:13:cf:78:
                    40:e1:4b:69:65:94:80:58:e9:9e:c4:da:02:fe:0f:
                    d6:53:3f:7a:68:4b:01:67:60:83:40:36:93:b2:38:
                    a1:00:75:94:13:4c:07:f0:50:23:44:db:41:45:a6:
                    86:22:66:08:82:27:d7:95:15:ca:5e:a3:00:b9:c1:
                    a3:8e:14:55:0e:9b:53:f8:22:e8:0a:86:30:28:14:
                    e0:3e:6c:06:fc:30:7d:56:1f:19:d3:0b:e1:e9:8f:
                    fd:4a:c3:a2:6f:1e:73:33:d2:95:92:75:23:00:0c:
                    49:bc:fe:b0:45:29:f1:78:8c:50:6c:f2:a1:0c:3a:
                    73:81:c1:2a:d6:cc:78:98:33:29:21:5e:b6:24:c5:
                    0c:70:31:e0:e4:c1:08:92:73:48:3b:a6:a3:c0:7e:
                    01:00:d4:c3:d0:3c:d2:61:4a:ad:63:a6:dc:1e:8d:
                    fc:9b:a7:7c:1d:f1:a0:65:b0:66:98:6d:26:e3:43:
                    b2:78:33:9b:73:db:8e:59:89:b8:54:9b:0f:14:04:
                    08:7d:58:63:65:c3:65:5c:58:c2:ad:cd:dc:43:41:
                    4c:59:e2:4c:96:11:10:4f:36:29:9c:5d:5b:e4:12:
                    47:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D3:FD:36:9D:6A:D5:46:B5:37:B7:7A:DA:25:56:A4:09:C3:CC:CC
            X509v3 Authority Key Identifier:
                keyid:BC:36:B4:CA:E0:90:D0:F4:9C:54:83:F7:B2:F9:3F:B9:2F:D0:FF:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDa0yuCQ0PScVIP3svk_uS_Q_4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3891f-4dc7-4f4c-b519-6107eb7c48d2/1/vDa0yuCQ0PScVIP3svk_uS_Q_4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:72:f2:d5:77:d0:09:a7:e2:51:0e:e1:5e:d0:f9:5a:49:99:
         82:3a:6e:0e:22:74:38:9b:19:6a:c9:36:9a:db:18:ee:7d:33:
         70:40:32:11:34:a2:b3:b8:18:b5:02:00:46:5e:a3:0c:33:f6:
         2d:ff:42:b8:65:50:e7:ea:cb:8d:62:2b:83:06:df:4e:41:38:
         f1:e5:04:82:ea:7c:91:48:90:68:b8:e4:a3:3b:89:ba:7d:9a:
         0d:a9:79:13:60:6c:58:7f:9f:82:83:f8:8c:c8:9d:bb:15:b3:
         87:f4:83:00:7a:a8:53:e7:fc:9b:f1:ce:96:6b:f8:ed:06:2b:
         35:c6:2a:5b:db:25:c3:0f:01:be:d9:c0:1f:f6:de:43:1a:37:
         15:f9:84:ab:52:dc:cb:56:1a:53:e9:67:e4:e6:eb:55:e9:13:
         47:57:60:72:9d:de:d9:03:ea:a9:ce:d7:27:1b:9b:73:8d:9f:
         a3:c0:2a:12:87:9e:75:1f:31:c7:af:ed:83:5c:e2:f3:d3:b9:
         24:39:71:b8:c3:d0:c5:fe:1f:29:4d:cd:72:a5:df:c7:e6:47:
         e2:9a:d0:36:09:64:d2:72:5c:6f:d6:b3:44:72:62:7b:98:11:
         33:ff:6c:87:12:ac:76:41:0b:57:fb:04:08:38:4c:9a:22:e3:
         c6:6f:a5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:02:08 2025 by rpki-client