Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File:                     vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier:          dLoWgKwyRPW1hmOkvVRcK4KMovh3aaU9SNjERVY/zao=
Subject key identifier:   49:6A:DB:4F:82:29:D9:0B:D8:02:70:C6:01:52:93:3B:39:B1:3F:66
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer:       /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial:       01967DFCAB12154258F9CC1274730630A150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number:          0A77
Signing time:             Mon 28 Apr 2025 20:00:32 +0000
Manifest this update:     Mon 28 Apr 2025 20:00:32 +0000
Manifest next update:     Tue 29 Apr 2025 20:00:32 +0000
Files and hashes:         1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
                          2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
                          3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
                          4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: Tyjaa4bIhh34V30GcCvzflcIYc5oeu4bRoJumw5NsAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:fc:ab:12:15:42:58:f9:cc:12:74:73:06:30:a1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
        Validity
            Not Before: Apr 28 20:00:32 2025 GMT
            Not After : Apr 29 20:00:32 2025 GMT
        Subject: CN=496adb4f8229d90bd80270c60152933b39b13f66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:25:38:0e:f4:5b:13:64:23:a5:aa:46:fd:
                    44:bf:e8:3e:57:f6:21:3f:42:cc:3b:21:40:09:f0:
                    45:63:72:88:f1:d8:1f:40:9d:14:d3:87:e6:f8:1a:
                    7d:30:d8:1b:30:e4:fd:99:eb:e0:38:bc:a1:67:8c:
                    06:5a:7f:ae:ff:21:37:63:93:df:1d:cd:80:4f:c9:
                    7d:5d:fe:20:86:db:0d:82:d7:ef:ec:bc:1b:72:78:
                    46:ca:db:75:76:20:fe:f5:ef:e1:e0:84:2b:49:28:
                    3f:6c:6e:c8:ad:37:68:41:d4:2b:34:87:73:d3:44:
                    80:91:60:05:cb:b1:03:22:71:65:c0:63:54:5b:f2:
                    75:58:5e:96:ac:90:51:24:00:1c:50:11:06:0e:ff:
                    df:9d:68:a5:c2:1d:e0:7e:d1:eb:7c:75:85:f3:f4:
                    a0:2d:8d:74:be:bd:a1:79:95:37:f6:9b:d8:92:19:
                    e0:82:ae:18:ed:c3:cb:b6:7f:dc:35:d2:0f:a0:e3:
                    55:00:35:32:15:0f:85:f5:31:69:93:f2:57:87:21:
                    35:09:5d:e5:e9:83:b6:f4:47:17:10:83:da:f2:1e:
                    14:a0:d5:24:dc:a9:5c:e5:e5:df:f3:1d:27:e3:61:
                    ca:c5:0f:59:08:ec:b2:eb:24:6d:13:6c:25:e8:14:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:DB:4F:82:29:D9:0B:D8:02:70:C6:01:52:93:3B:39:B1:3F:66
            X509v3 Authority Key Identifier:
                keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:7a:61:c1:fd:1d:25:48:5c:b4:69:08:ba:0a:e4:80:94:
         0f:db:2f:16:0a:a6:29:38:fb:f5:76:90:8a:44:35:43:5b:f8:
         2e:ce:ba:c8:8b:78:0c:1b:67:64:f6:86:f4:de:af:07:58:93:
         1a:20:75:8e:d6:eb:7b:03:c3:7a:41:b6:ad:05:41:eb:b4:a5:
         a9:9f:d2:e8:17:50:48:a7:58:99:c6:10:52:b9:a7:7e:35:39:
         ee:09:ea:44:b2:e5:2f:83:64:07:8a:48:f1:45:8b:66:08:65:
         4e:41:c3:48:ff:4a:a4:26:6e:04:53:12:77:d6:d3:ed:d2:08:
         83:be:3a:1e:a0:01:2b:91:18:37:3a:8f:20:72:ae:50:8e:1b:
         38:ee:39:6d:8a:82:1f:74:e5:68:7d:0d:00:d8:b6:94:cf:fc:
         02:ea:d0:01:76:f3:ae:c9:8f:4e:86:95:2a:a5:4a:61:a3:68:
         a4:c6:11:bf:b6:b5:ef:e0:46:72:8d:c5:36:de:fd:b8:dd:89:
         dd:51:07:f3:17:bc:a5:e9:ba:e3:4c:98:88:ea:c1:af:5b:22:
         c5:2b:4e:f5:cd:0a:e9:4d:df:a4:8a:cc:ad:ce:15:7a:4f:14:
         7b:94:5f:1a:2e:2d:15:ef:9e:20:61:3f:c9:49:d0:c9:8e:96:
         41:08:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:19:13 2025 by rpki-client