Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          wv+4Yr4qFQW7bwo//DJI216+9jJsAJHmoZvxS7+v4uM=
Subject key identifier:   F2:6E:F6:4A:87:6C:5F:C9:49:44:6B:B3:59:AB:5B:C8:10:66:68:89
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       0196A54112E31985737C5A1812F56330F79D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          1455
Signing time:             Tue 06 May 2025 11:00:27 +0000
Manifest this update:     Tue 06 May 2025 11:00:27 +0000
Manifest next update:     Wed 07 May 2025 11:00:27 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: n2LZBnA0YSKRo1LFHmLY36AOhsQUU23hQLtQYl9e9og=)
                          2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:41:12:e3:19:85:73:7c:5a:18:12:f5:63:30:f7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: May  6 11:00:27 2025 GMT
            Not After : May  7 11:00:27 2025 GMT
        Subject: CN=f26ef64a876c5fc949446bb359ab5bc810666889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:68:97:b6:bd:6d:49:4d:9c:3d:05:30:67:
                    24:8b:c7:15:44:53:fd:e1:ed:d6:03:da:96:3e:f7:
                    9e:df:9d:db:6e:bf:a0:fa:e7:d1:37:fa:0a:91:10:
                    fc:85:bb:34:4e:b4:a7:9a:94:a6:96:d1:20:4e:0e:
                    82:92:1a:fb:92:0e:b4:30:04:b9:5b:1a:01:ad:4b:
                    17:be:59:fc:7b:34:1a:34:6a:ce:05:45:86:47:a0:
                    57:d0:b8:3a:e6:06:c7:b7:cc:9c:c7:d8:af:ac:4f:
                    cd:e4:74:82:1d:7c:65:eb:56:9c:6a:b0:84:15:a2:
                    3e:6d:9e:e3:7e:65:47:1f:c5:75:73:e3:88:dd:c8:
                    3a:ec:9e:27:3d:54:15:12:8c:8d:0e:f4:e2:80:d9:
                    af:b6:80:c1:a5:61:12:3d:4c:6c:a4:ab:a4:c8:cc:
                    77:39:39:6b:bd:8a:25:6f:cc:ef:67:19:73:0c:f7:
                    b3:3d:cb:5d:d8:a0:e0:de:0e:46:76:a3:93:ce:dd:
                    cd:f3:30:39:56:c7:76:82:e4:d9:ee:0d:a9:6c:ab:
                    5a:bf:82:53:86:1f:b1:d6:dc:12:35:7f:44:d8:69:
                    be:77:fb:bc:bc:90:a1:99:23:6a:5b:2d:48:1f:60:
                    f9:1c:74:ef:c3:f4:b4:36:f9:1d:a0:df:84:72:a0:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:F6:4A:87:6C:5F:C9:49:44:6B:B3:59:AB:5B:C8:10:66:68:89
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:85:a3:ea:75:fe:64:51:19:80:b2:76:20:0c:5b:3f:03:d2:
         66:07:98:95:60:3d:c0:25:2a:58:ef:f8:9d:8e:9a:3a:11:7e:
         30:c0:45:97:09:3a:47:da:2e:8c:44:1d:45:1f:05:79:22:44:
         41:76:73:67:ee:3a:fa:1c:2e:2d:5a:48:4f:70:93:47:d7:96:
         80:4b:99:bf:cc:d6:68:2b:b2:93:38:00:68:9b:32:79:5c:12:
         51:9a:8c:97:d4:fd:d2:46:3c:f9:6f:59:c8:f5:a3:5a:25:f3:
         2d:5d:83:71:69:52:2f:11:c5:78:f9:23:de:2e:ac:a5:b1:ba:
         3b:1d:06:80:1e:cb:bf:8e:62:29:e6:d8:93:d0:9c:6b:ce:37:
         e3:6c:0f:db:2c:e4:c9:08:19:6b:93:98:10:0f:4e:a2:2b:90:
         fd:29:bf:6d:65:56:8e:47:5f:e3:b5:3d:c1:5b:ae:b2:b6:df:
         6c:e2:42:09:1d:d1:ad:52:b2:40:1b:80:04:17:29:a5:ca:df:
         c4:e1:d8:c5:89:e3:7b:dc:72:ea:e9:08:8c:5c:13:0e:ef:0e:
         69:6a:63:a3:1c:43:3b:47:3d:d6:ce:f0:85:a0:88:c9:fd:63:
         c8:fb:7d:69:10:e9:01:b4:f9:a2:e5:39:36:82:8e:19:7f:b8:
         ba:43:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:32:31 2025 by rpki-client