Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
File:                     V-iYv0IJJPl2ta5FEQi55qAfx9w.mft (raw, json)
Hash identifier:          vszLWlrPuGPqqFR+gWMck/IxBJpBCWWPBxyqEBk2mTI=
Subject key identifier:   17:4D:C4:82:3F:E8:43:29:27:88:AD:43:C2:DB:1D:63:33:AD:67:34
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       0196884948B06A88853120A711FBD452BC8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
Manifest number:          151D
Signing time:             Wed 30 Apr 2025 20:00:26 +0000
Manifest this update:     Wed 30 Apr 2025 20:00:26 +0000
Manifest next update:     Thu 01 May 2025 20:00:26 +0000
Files and hashes:         1: JBCkmkN7TLYky4Fsa2gSyDNAKkc.roa (hash: IBbS5qZGseNgJY3l7vbqALCeu4LGMN6jlDSM2xfjd/4=)
                          2: QSbfKTjwWystyhGf93AKODi43Qw.roa (hash: QLAjdgH0y5Nvk5/OywYikq5KPIqG2c6CYLG+eQyHpSY=)
                          3: QiCIMLSQ6xUKKAhEEkWOQ1HOqUU.roa (hash: gD/soiLnkRYhC4oHF9Qb432dgDe3LXE42S5jerGuD1o=)
                          4: V-iYv0IJJPl2ta5FEQi55qAfx9w.crl (hash: nbHgkT8Q461rhbaHkzbxNtX+xj3Dvyp+E0bwPhuv6dg=)
                          5: VXKr5MEJE5Jp7H1GSfscnPHtPz4.roa (hash: PdyLurVslNPMuyqlzMjVbGBFXSDBDCQHqjLoCljfQWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:49:48:b0:6a:88:85:31:20:a7:11:fb:d4:52:bc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Apr 30 20:00:26 2025 GMT
            Not After : May  1 20:00:26 2025 GMT
        Subject: CN=174dc4823fe843292788ad43c2db1d6333ad6734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:71:5a:a7:76:a7:f1:76:be:ba:1b:fc:82:
                    6e:12:79:93:4b:a3:55:b8:bf:69:45:11:c7:46:1c:
                    2c:8c:7b:6a:91:9c:ca:9a:1b:9a:50:7b:86:08:1f:
                    bf:b0:4b:71:df:ca:10:e7:27:c3:d7:5e:41:b8:d5:
                    31:8f:5b:5f:95:c7:78:0a:1a:a6:01:17:d2:a9:b2:
                    e4:a7:84:34:14:b8:8a:34:fe:74:b2:13:b4:24:10:
                    bc:1c:48:0c:f3:3f:01:f9:55:ff:82:db:dd:a4:01:
                    e6:1d:ee:54:dc:ae:d3:4a:eb:4d:4e:95:c2:ce:01:
                    14:55:ff:a0:18:e5:86:4c:8d:5f:05:e0:80:50:70:
                    c3:c7:20:c7:60:ad:11:58:73:67:ff:64:0e:79:a2:
                    ec:bc:d9:55:51:32:2a:b8:9a:16:cd:5b:b8:b0:50:
                    89:8e:00:68:2f:42:6d:d4:5f:90:e6:7f:14:7e:db:
                    e4:df:c6:5e:91:7a:04:d3:01:f8:75:e7:a8:15:17:
                    b5:9f:28:0b:13:d7:c8:ab:7e:dc:bd:a4:6b:89:0b:
                    f6:63:a2:8c:06:d1:de:2c:9a:63:9d:40:5a:76:63:
                    84:ac:a3:9c:55:27:76:df:db:d6:76:d0:bb:52:ad:
                    88:2a:c8:ec:f2:c2:e5:48:92:55:7e:0d:c1:a8:3f:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4D:C4:82:3F:E8:43:29:27:88:AD:43:C2:DB:1D:63:33:AD:67:34
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:0c:13:08:70:8a:a2:0d:67:cf:10:61:e3:a8:12:63:67:
         48:35:1b:34:2f:37:7d:2e:7e:c2:01:48:ef:03:dd:94:15:7d:
         ed:8c:10:94:c1:8c:df:03:88:0c:74:15:bd:bf:7d:a8:54:f5:
         70:63:84:21:87:5d:58:75:aa:c6:d3:be:1d:6f:bd:9d:4b:99:
         28:fe:11:b0:05:ab:aa:99:c0:7f:0c:fa:02:24:72:10:04:07:
         ad:57:e2:4e:44:ae:f2:bf:74:53:42:9e:25:54:a9:ff:32:2c:
         4c:6c:03:0d:a5:27:15:65:65:44:ad:f7:82:b8:f7:8b:67:c3:
         3c:5e:68:8d:45:71:23:f2:54:c2:a8:1e:81:46:f0:42:bf:95:
         f0:5d:c9:58:81:3f:90:a0:13:91:4b:9c:17:91:94:66:72:1d:
         da:97:c4:73:d1:5c:4b:b8:98:4c:34:e9:8f:04:8d:2f:2a:39:
         bf:ba:dc:15:d7:83:21:76:49:06:df:91:95:26:64:4e:0f:af:
         67:e9:56:ab:dd:9e:38:65:a7:c2:0c:6d:2d:8b:9e:f6:79:e3:
         4d:76:79:5f:47:d0:36:8f:80:26:88:2f:7d:7c:35:70:be:37:
         8a:42:c0:2d:43:70:b6:2c:75:9c:0d:6f:db:4f:07:ab:1e:3e:
         aa:ee:82:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:03:01 2025 by rpki-client