Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          qNeOvQ+bpjeBdQdCMj6ZBXXnHmjgnlB18dBk0dCuaZc=
Subject key identifier:   18:26:4C:F2:29:E6:FB:F2:07:A7:47:12:32:92:C1:F9:D8:6A:42:B1
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       0196B7EC5281B2B18F7B4C581CFA2CDDACE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          11A1
Signing time:             Sat 10 May 2025 02:00:40 +0000
Manifest this update:     Sat 10 May 2025 02:00:40 +0000
Manifest next update:     Sun 11 May 2025 02:00:40 +0000
Files and hashes:         1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: /hm3lO1sFQRjkKfcYlrMlvypyXKZAu6IRhfR1UDs3aM=)
                          2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:52:81:b2:b1:8f:7b:4c:58:1c:fa:2c:dd:ac:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: May 10 02:00:40 2025 GMT
            Not After : May 11 02:00:40 2025 GMT
        Subject: CN=18264cf229e6fbf207a747123292c1f9d86a42b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ba:55:41:63:6b:8f:91:23:97:09:78:dc:68:
                    70:ac:7c:32:f2:b0:f9:8c:c6:9b:66:c2:58:39:9b:
                    43:86:24:50:6c:28:19:1e:ff:a6:1e:63:b3:db:1c:
                    69:8d:8d:5b:75:90:85:82:cd:5f:a7:63:d8:33:ef:
                    ee:a8:ed:f2:af:5d:40:e9:ee:ce:d2:e2:05:ae:75:
                    b0:95:b1:f3:0b:9d:87:69:ac:ad:7f:6b:82:f1:ba:
                    cb:b9:34:c2:31:a7:d2:06:ba:a9:96:1f:f5:4f:32:
                    df:45:2a:48:7d:9f:b3:8e:b0:5d:6c:fe:b0:dd:a6:
                    d9:7c:b9:6a:46:18:30:e1:ff:a8:0f:f3:d8:bf:d2:
                    71:d3:51:df:56:96:1c:23:2a:19:b6:63:24:b5:81:
                    41:e1:7f:ed:46:38:87:c4:13:98:9f:81:c8:57:81:
                    f8:2f:04:b0:d6:cb:bd:0b:53:b6:91:e3:86:2e:f7:
                    9e:59:11:7e:f5:9c:4b:8e:2e:ad:46:a8:39:e8:c4:
                    54:16:23:f5:d9:5f:e2:eb:75:11:3d:99:88:72:81:
                    0b:22:c7:f5:f8:35:3f:0f:05:ba:4f:6a:e6:c9:be:
                    26:99:4f:17:93:f4:ca:51:30:6b:6a:2e:83:13:5f:
                    7e:5d:f9:dc:44:c4:6f:eb:46:ca:e4:d7:d6:a7:f6:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:4C:F2:29:E6:FB:F2:07:A7:47:12:32:92:C1:F9:D8:6A:42:B1
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8d:79:a4:01:a5:22:de:5b:cb:83:b1:4a:b0:49:f8:df:a7:
         34:de:63:bc:f7:cc:cb:ec:60:5a:2c:dd:24:0b:7b:96:0a:9e:
         0b:4a:38:97:fa:b8:83:57:5f:a4:04:2f:56:0b:f7:26:b9:5e:
         d1:5f:f8:39:b9:03:75:18:7b:de:bf:51:cf:b7:0e:a5:a6:de:
         20:13:ad:0f:43:69:2d:68:ec:79:e2:09:73:af:d0:ee:5f:11:
         04:91:3f:fe:33:e5:6c:0f:9b:de:f6:2f:a5:87:b1:88:a4:28:
         89:ed:df:dc:00:bc:17:ea:c0:2d:ab:48:c9:97:4d:5f:16:81:
         f1:65:5b:c6:c2:dd:d9:54:96:aa:56:f2:8a:6f:09:ec:dd:7e:
         e3:05:f2:9e:c2:80:d8:57:a2:d5:9a:32:a1:d9:95:fb:c9:cf:
         4b:b0:9b:9e:20:7b:43:6c:30:15:c8:eb:d2:63:8f:7c:8f:14:
         31:58:7e:dc:91:8a:bd:21:a6:c1:3b:c3:0d:3c:7b:32:1b:70:
         24:af:bb:51:5b:66:88:35:f2:0d:88:51:35:87:69:b0:d2:49:
         15:25:c0:e7:e0:ba:49:fd:89:33:10:21:2b:cc:1c:53:20:7b:
         04:ea:b8:94:ab:ce:02:e9:54:46:7a:09:1a:b7:b5:0d:e4:3d:
         4a:ed:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:43:22 2025 by rpki-client