Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          sOhXaUGM6xGeSG5FIXCze0rTsKjonjgmtihYXq1NRUY=
Subject key identifier:   75:77:69:76:B2:67:DC:4E:C5:62:E9:9E:B6:7D:8B:0B:D4:D4:5D:06
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       0196760C2071BECFFF2EF5A4BE392AA8854E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          0EA8
Signing time:             Sun 27 Apr 2025 07:00:28 +0000
Manifest this update:     Sun 27 Apr 2025 07:00:28 +0000
Manifest next update:     Mon 28 Apr 2025 07:00:28 +0000
Files and hashes:         1: 1-546Kti0lJhdCgM2BGLPJH8tB7A.roa (hash: DZKGU1PUOmodvcooBnReEnL3w/IZk9xJ+ihgar9xlKQ=)
                          2: DAWuOXIzShKngVeAXIk14zxR1_o.roa (hash: BRexZQjukSfkz0NX2Zg92MIjIVuvAgUDzsMd3Qrzxp0=)
                          3: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: Ns1rOtyUDKGxMtvNxhPXFHa5S06Jpr8eEgV65d4iVmc=)
                          4: kc4z2zzYiTW0GaLmTuuhDE91d5o.roa (hash: g/g6twuj787QLJVbdboV8m3Ts06Is1fDi161w4I+b/0=)
                          5: zB4VR8eQ-BQowrZBeMtlvY4zfQ8.roa (hash: /Tu77k3GY/MF6l/555p9Pg+IHa6U4tx0rpsWT2I4Xao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:0c:20:71:be:cf:ff:2e:f5:a4:be:39:2a:a8:85:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: Apr 27 07:00:28 2025 GMT
            Not After : Apr 28 07:00:28 2025 GMT
        Subject: CN=75776976b267dc4ec562e99eb67d8b0bd4d45d06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:40:f4:fe:40:fb:40:46:c3:5c:4c:ee:95:
                    cb:41:91:41:ed:a3:2f:43:67:50:1b:13:f7:78:08:
                    5d:30:03:9f:cd:a1:b6:4a:90:48:47:52:95:4e:e1:
                    4f:1e:36:d5:af:fb:d0:03:48:00:46:c0:24:c7:7c:
                    cc:de:9d:2b:97:87:e0:60:6d:76:bf:27:d2:4b:65:
                    1d:0a:06:22:5e:41:63:32:6c:01:cc:a7:38:95:60:
                    c1:c2:e7:3e:7c:54:26:60:11:88:4e:17:bb:2a:17:
                    6b:22:ed:53:86:d7:c6:de:9c:ab:15:c6:c4:9f:64:
                    b4:67:33:7c:42:9c:16:55:58:e1:9b:6c:bf:9a:36:
                    e6:7d:3f:ba:a3:4a:2e:b8:2c:9b:34:fe:95:37:f4:
                    81:df:08:aa:09:4a:dc:65:fc:2b:e8:dd:fe:d4:4c:
                    5f:36:cb:1d:e4:c0:ac:d5:ff:44:a0:4f:23:10:fa:
                    b5:18:43:33:26:2b:97:a3:c9:d5:f1:2f:a8:d1:db:
                    ea:77:00:25:31:16:86:34:2c:bc:36:f6:5f:83:b1:
                    b6:f1:a1:c3:26:5e:6d:00:1a:8f:c2:83:ee:b7:da:
                    c4:c6:d6:7d:eb:e3:cf:f2:31:b2:f7:bd:56:32:ed:
                    bc:2e:55:c5:06:e5:d7:dd:00:4b:3c:a6:ff:f7:08:
                    0f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:69:76:B2:67:DC:4E:C5:62:E9:9E:B6:7D:8B:0B:D4:D4:5D:06
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:22:cd:56:bd:f0:94:a9:13:2b:85:cb:b0:2c:cb:d8:05:af:
         b9:03:18:fb:bd:0d:31:4f:f5:c0:cf:09:a3:d6:d9:0c:9e:d1:
         96:37:58:8e:41:e4:2d:0e:b4:97:4f:3e:73:58:4a:47:75:f6:
         88:ad:7e:a1:80:15:6e:46:55:cd:93:3e:96:46:d9:de:f1:de:
         c2:9c:a2:1f:8d:95:46:14:bd:16:63:2b:dd:42:27:f1:97:02:
         95:e6:5e:be:70:90:3f:6e:44:c7:25:29:fa:bd:03:89:79:c4:
         74:d1:c3:e9:6b:2f:70:34:b0:1b:40:f7:51:d6:35:e8:ee:7d:
         1c:8f:91:f9:12:ec:bc:ca:28:f3:10:9b:53:c3:62:21:81:b8:
         a7:87:c2:a2:8c:f0:d6:18:11:86:c7:78:95:25:50:19:47:90:
         18:80:24:4d:46:4a:1a:5a:46:d0:66:4f:dc:9a:75:93:9e:dc:
         82:4f:10:83:50:02:77:d8:58:00:60:bc:6e:5d:a9:95:85:63:
         1e:9d:b1:ec:aa:35:6d:e5:04:ba:58:91:f0:67:7b:18:8c:60:
         8f:87:01:4a:65:58:ae:34:0e:4f:eb:a2:92:65:5d:29:3f:52:
         46:71:31:05:d0:41:d6:b9:02:ce:ff:8a:4e:4a:31:e1:36:e8:
         88:94:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:01 2025 by rpki-client