Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
File:                     vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft (raw, json)
Hash identifier:          rTQ3aZ8pub1GkMxMWATd83f4LSjWRnwLM8SkFVN2Q30=
Subject key identifier:   C1:48:30:E7:C8:4D:C9:66:8E:7C:AB:43:F4:48:FB:FD:1A:CE:92:F1
Authority key identifier: BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9
Certificate issuer:       /CN=bd82e60d072e5185435a900e323f463806d433c9
Certificate serial:       0196BC00475B320070EB6B3DB8914FBE3C0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 21:00:56 +0000
Manifest this update:     Sat 10 May 2025 21:00:56 +0000
Manifest next update:     Sun 11 May 2025 21:00:56 +0000
Files and hashes:         1: vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl (hash: p6ct60wyK4Dtj+3Jt+BPoz+POQ/Te++9RGq5Zs+jpyA=)
                          2: zHFsSZojvy_X7uL-vPL2okM6zhI.roa (hash: n8rylT6z4CcEms6K9HKeeDe6KPQo1phvGPnzqc1vlUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:47:5b:32:00:70:eb:6b:3d:b8:91:4f:be:3c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd82e60d072e5185435a900e323f463806d433c9
        Validity
            Not Before: May 10 21:00:56 2025 GMT
            Not After : May 11 21:00:56 2025 GMT
        Subject: CN=c14830e7c84dc9668e7cab43f448fbfd1ace92f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:dd:a9:bd:25:92:84:11:76:83:c9:70:33:
                    44:08:89:4a:f8:02:f8:af:3c:56:b2:36:7f:10:48:
                    5f:ae:8a:e5:f4:f9:43:37:32:32:73:46:8e:44:00:
                    86:88:ae:66:83:f7:72:05:cd:06:52:36:2a:e2:c0:
                    42:d6:bf:f1:c9:c6:09:88:f1:df:8b:01:37:88:a1:
                    67:c9:b2:f7:a3:5a:85:ef:29:15:e9:8c:3e:38:23:
                    49:91:3e:26:1c:49:eb:6e:c5:dc:06:7a:14:f1:da:
                    65:ec:79:fd:e7:cf:18:e0:07:97:fe:1e:92:2d:14:
                    e4:79:d3:64:c1:db:44:fe:b1:e4:7b:8e:5a:d1:9c:
                    37:6a:9a:46:0d:7d:1d:4a:a0:15:b8:10:52:42:4f:
                    df:51:16:60:58:10:3f:ba:fc:3e:85:fa:8a:75:04:
                    8a:aa:f3:cf:0c:42:3f:c5:5d:1b:6a:59:24:ad:f5:
                    74:c9:15:73:ec:01:52:c5:84:f6:76:00:95:4f:30:
                    0a:29:f2:2f:17:d8:11:29:83:d3:7f:bc:65:3b:94:
                    14:b4:68:7c:76:8d:1f:f6:96:e0:06:4f:f6:7a:c3:
                    86:a1:85:40:26:a0:92:ec:30:22:6a:94:3d:88:01:
                    9c:da:c7:dd:de:39:09:48:aa:eb:7c:76:28:7e:20:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:30:E7:C8:4D:C9:66:8E:7C:AB:43:F4:48:FB:FD:1A:CE:92:F1
            X509v3 Authority Key Identifier:
                keyid:BD:82:E6:0D:07:2E:51:85:43:5A:90:0E:32:3F:46:38:06:D4:33:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYLmDQcuUYVDWpAOMj9GOAbUM8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e3bbc9-78c3-43a2-b9b0-48acef672e4a/1/vYLmDQcuUYVDWpAOMj9GOAbUM8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:69:8f:66:1b:db:00:92:89:65:5b:4c:15:5a:ef:ab:42:26:
         ba:e9:f3:4a:78:bf:2f:b3:35:67:68:3f:b4:a5:da:d4:7d:d8:
         68:d6:0d:8d:90:2c:a2:f0:b4:d4:22:d4:04:c3:cf:9a:74:0b:
         ab:07:01:c4:72:5f:2a:a0:44:0d:48:f2:c4:77:9b:de:1c:d5:
         82:bd:2b:81:a1:dc:ba:66:57:ca:e2:c0:ec:d3:67:97:89:e2:
         cd:ee:ba:0a:04:1c:6c:6e:78:94:2a:60:69:80:05:b4:70:b6:
         af:24:e9:3b:66:9b:00:48:8c:fa:79:eb:16:63:eb:a9:44:5d:
         12:c3:97:34:ed:72:fc:ae:26:3a:4a:7f:0e:a7:ff:0d:21:5d:
         39:9f:76:bc:cd:1e:bd:12:e6:89:01:d7:59:08:bd:e3:c1:3c:
         c3:af:ea:60:f0:2a:b2:07:ee:48:96:e2:fb:3f:21:5c:0a:cc:
         1e:05:1b:c1:14:a5:d0:5c:c1:29:4d:b5:54:4e:da:2c:2f:1c:
         01:23:d7:b1:f1:b7:66:81:03:70:95:6a:a4:ee:92:5c:3d:e5:
         4f:0a:77:a0:78:82:00:8b:66:97:7a:e3:02:53:3b:e3:6d:ac:
         ba:f1:c6:3c:c7:58:ce:72:fa:ab:eb:18:ea:5c:1e:e1:c2:ce:
         b1:a0:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:23 2025 by rpki-client