Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          uT+08bnYjKSVRxuIFOI6AlW2rsPRQp6QhyX67ZQAHic=
Subject key identifier:   C1:B4:1F:1B:EE:9E:79:1C:9C:EA:36:8B:96:34:E7:71:B1:7D:61:87
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01969D08EF29F148A89A548B34BA600F1E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          043E
Signing time:             Sun 04 May 2025 20:42:10 +0000
Manifest this update:     Sun 04 May 2025 20:42:10 +0000
Manifest next update:     Mon 05 May 2025 20:42:10 +0000
Files and hashes:         1: 1ffahNtPZYX-N5j-O0KlFd0HH4g.roa (hash: MoHHu9VYXOcbIDzTY/tBkP4afwJz6bsnwUqB9SFua4c=)
                          2: 3YupD0E1MQgwS1xrKNs025XGrvU.roa (hash: 21HOFTvc6Ct7i0rTAQHqk7NP6aZsXA22C7NraCUFkZ8=)
                          3: 4bBbDJOy68tuNNG24n3yMr8ZLog.roa (hash: 6CCq/P9RMrSakvFqvatz29nUA1QqvoFA7GOz92KgHCI=)
                          4: Jl24RpiWW2mnZnbXdVkHkwv5Ym0.roa (hash: 9jibyw+e0hpTaQ/C5dcgmcHW+Sc46nG49PYel1M3f7w=)
                          5: PlUFC6HKWWFjpql9DijziKwkcxw.roa (hash: 4W/hkwQltLoMthbvB9BB52pdcgOpX1UVyOI2+0P/Mmg=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: l14a/wFrKsuMxVnZtI++d2GH8vTm2zJXOlETJpjt5ZM=)
                          7: fOL2wn0hbjiBWIHSHx0ol-_V10g.roa (hash: /gFNmPhq1jkVbBwjHrnp2B3jWhZTHQ03KV2Xr4G2VBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 20:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:08:ef:29:f1:48:a8:9a:54:8b:34:ba:60:0f:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: May  4 20:42:10 2025 GMT
            Not After : May  5 20:42:10 2025 GMT
        Subject: CN=c1b41f1bee9e791c9cea368b9634e771b17d6187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:65:7e:a3:3d:65:f6:37:22:a9:17:32:5a:
                    91:f2:b3:eb:b5:ce:6d:c9:e7:14:03:42:ae:b0:56:
                    ad:02:b4:49:d9:b0:8c:04:b9:53:e9:da:ec:2f:ca:
                    35:c3:2e:35:ad:b3:62:81:c9:32:fc:46:c9:39:85:
                    6a:f3:f8:c3:7b:26:70:97:ee:ef:41:a9:70:a6:7d:
                    c1:8d:f4:e6:bd:d6:05:ab:3a:ef:6a:4f:09:08:d1:
                    87:9d:a2:46:5e:39:ec:73:79:53:1e:b9:91:cc:84:
                    b6:6a:2c:6f:bb:77:2f:4e:fc:88:d2:4a:7e:ff:75:
                    99:c2:4c:78:01:19:be:22:c5:e7:ac:03:9d:d2:7f:
                    79:07:0a:b0:a0:fd:39:d8:50:db:24:11:4b:5a:0d:
                    20:3d:68:bd:ba:ed:8b:09:6b:6c:d3:dc:ea:dc:9c:
                    0c:03:1a:15:18:1a:ef:54:f7:da:ca:57:f5:99:54:
                    47:03:43:f3:ce:10:5f:0e:e3:93:c0:c0:f6:e5:7d:
                    f3:a9:d0:0d:09:f9:de:d4:cb:43:fb:67:23:9f:d6:
                    43:35:37:55:65:6e:d5:95:63:2a:09:6e:6d:67:a8:
                    aa:8d:66:c1:f6:83:52:4d:4a:c8:36:91:99:b5:9c:
                    9d:74:2e:b5:1a:27:4a:e1:02:bc:41:60:f7:e4:cd:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B4:1F:1B:EE:9E:79:1C:9C:EA:36:8B:96:34:E7:71:B1:7D:61:87
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:f9:22:34:21:a1:3e:96:71:1e:60:89:8d:04:44:1b:2a:
         f4:dc:65:1f:a9:69:41:d8:40:5b:77:b7:d1:0c:11:c4:17:29:
         1a:30:93:97:c5:c4:5a:ea:ce:3f:1d:25:0d:bd:4b:4d:46:66:
         79:ac:d3:1b:4a:5a:85:18:59:d5:6c:05:bc:2f:08:89:47:a6:
         73:aa:d2:f0:9e:94:8f:da:aa:31:d0:46:1f:52:a2:2e:f5:bb:
         fe:39:d0:ca:00:72:c2:32:e5:b1:93:b8:19:6a:1e:cc:e1:fd:
         73:a5:24:a4:fd:da:ba:c5:52:a6:1e:8a:cd:fb:1c:aa:76:ba:
         ab:e7:36:91:8f:a2:5f:b3:3e:5a:32:bd:3a:ea:f8:fa:05:03:
         f6:0b:0b:90:91:2e:2b:0c:96:30:19:73:07:b6:1d:50:2f:99:
         ad:f1:93:71:cd:9c:86:88:9b:83:ca:f7:6e:25:9c:13:96:99:
         60:e4:85:8f:67:87:5f:ad:dd:cc:2c:28:71:f4:c9:e5:e9:05:
         02:cc:4d:3a:3a:8b:5e:56:fd:06:df:bb:4d:be:92:58:3b:64:
         80:07:cf:11:09:11:3e:3f:a6:14:cb:9c:df:6b:b9:30:35:e7:
         64:2c:16:1d:71:e9:d1:5f:d0:c3:7f:b1:7c:c8:48:db:f5:7a:
         4c:d2:41:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadCO8p8UiomlSLNLpgDx4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm
YmUwOTkwHhcNMjUwNTA0MjA0MjEwWhcNMjUwNTA1MjA0MjEwWjAzMTEwLwYDVQQD
EyhjMWI0MWYxYmVlOWU3OTFjOWNlYTM2OGI5NjM0ZTc3MWIxN2Q2MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAplfqM9ZfY3IqkXMlqR8rPrtc5t
yecUA0KusFatArRJ2bCMBLlT6drsL8o1wy41rbNigcky/EbJOYVq8/jDeyZwl+7v
Qalwpn3BjfTmvdYFqzrvak8JCNGHnaJGXjnsc3lTHrmRzIS2aixvu3cvTvyI0kp+
/3WZwkx4ARm+IsXnrAOd0n95BwqwoP052FDbJBFLWg0gPWi9uu2LCWts09zq3JwM
AxoVGBrvVPfaylf1mVRHA0PzzhBfDuOTwMD25X3zqdANCfne1MtD+2cjn9ZDNTdV
ZW7VlWMqCW5tZ6iqjWbB9oNSTUrINpGZtZyddC61GidK4QK8QWD35M1grQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMG0HxvunnkcnOo2i5Y053GxfWGHMB8GA1UdIwQY
MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt
M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl
LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESv5IjQh
oT6WcR5giY0ERBsq9NxlH6lpQdhAW3e30QwRxBcpGjCTl8XEWurOPx0lDb1LTUZm
eazTG0pahRhZ1WwFvC8IiUemc6rS8J6Uj9qqMdBGH1KiLvW7/jnQygBywjLlsZO4
GWoezOH9c6UkpP3ausVSph6Kzfscqna6q+c2kY+iX7M+WjK9Our4+gUD9gsLkJEu
KwyWMBlzB7YdUC+ZrfGTcc2choibg8r3biWcE5aZYOSFj2eHX63dzCwocfTJ5ekF
AsxNOjqLXlb9Bt+7Tb6SWDtkgAfPEQkRPj+mFMuc32u5MDXnZCwWHXHp0V/Qw3+x
fMhI2/V6TNJB7w==
-----END CERTIFICATE-----
Generated at Mon May 5 06:27:06 2025 by rpki-client