Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File:                     Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier:          o6PaDwraNnHAullHULB9rvUUmD5/wH1O1FpPLWjvQGQ=
Subject key identifier:   AD:C8:63:0F:3F:5D:18:EC:F2:C9:62:D6:EB:BC:E4:D7:E1:37:CB:70
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer:       /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial:       019695CEA5D0C2CD2FAC3574027EB907605A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number:          1522
Signing time:             Sat 03 May 2025 11:01:09 +0000
Manifest this update:     Sat 03 May 2025 11:01:09 +0000
Manifest next update:     Sun 04 May 2025 11:01:09 +0000
Files and hashes:         1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
                          2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: T5hNNnY8+MMgz/7zx8UGFkMq4OEAXyTTFxYzBH+xPf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 10:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:95:ce:a5:d0:c2:cd:2f:ac:35:74:02:7e:b9:07:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
        Validity
            Not Before: May  3 11:01:09 2025 GMT
            Not After : May  4 11:01:09 2025 GMT
        Subject: CN=adc8630f3f5d18ecf2c962d6ebbce4d7e137cb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:5d:2f:d0:39:56:06:46:ce:3d:a4:2c:8c:
                    13:60:a3:0c:7e:4d:30:8e:56:6a:af:4d:3d:a1:dc:
                    86:9e:18:00:56:4a:1c:91:96:b5:ca:9f:e0:d8:7b:
                    6e:18:13:c8:b8:bd:85:82:ca:be:6c:aa:54:cd:bc:
                    1b:36:20:41:82:25:d1:0a:1a:ac:6c:34:08:1c:1a:
                    3a:2f:6c:3a:ec:ec:6a:97:4e:2c:19:d3:48:b6:30:
                    fc:40:6a:f8:fe:e7:49:21:64:46:d5:ae:e6:fe:2f:
                    9f:a8:e4:21:ab:38:7a:83:49:44:75:51:42:3a:31:
                    e7:86:ea:79:f9:fe:da:bb:15:fb:40:63:7d:66:de:
                    f6:f1:15:60:18:06:c2:f7:58:c0:5a:e8:38:df:17:
                    49:f1:c4:c4:e4:20:23:db:7e:94:09:94:6f:3e:0c:
                    35:6a:cf:19:24:3e:ce:9d:6c:9f:93:c0:eb:fe:e2:
                    5c:30:c7:eb:e0:fa:84:87:17:7a:02:62:52:ec:09:
                    69:b5:a4:bd:ac:bb:30:04:32:03:93:db:06:4d:b5:
                    b9:12:11:27:f0:b8:e5:79:d9:f4:bd:17:7f:66:ac:
                    b9:f0:82:03:71:ab:7b:29:b7:fd:1e:e6:fe:21:2a:
                    b9:5d:06:99:5d:39:54:03:fc:ff:7f:1c:d8:bc:d9:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:63:0F:3F:5D:18:EC:F2:C9:62:D6:EB:BC:E4:D7:E1:37:CB:70
            X509v3 Authority Key Identifier:
                keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:af:7b:92:55:59:4d:64:6e:74:68:fc:b2:ac:9e:88:97:
         ea:dc:8b:6e:e4:f4:28:f3:79:0e:c1:65:04:1d:05:be:ed:1c:
         13:c4:eb:ca:bd:8c:b3:f3:a7:3d:39:80:ca:a8:9f:84:71:cc:
         96:23:74:e3:10:a1:d4:84:69:c8:96:df:5c:4f:a1:c1:80:b4:
         e5:27:11:d5:31:85:54:2c:d6:90:fa:7a:bd:67:59:79:3b:8c:
         1f:f1:2f:37:fd:20:b8:18:e4:98:f9:76:3b:6b:f1:49:09:cc:
         17:3a:25:1d:d1:d3:56:50:93:7d:f4:40:2c:c6:bf:3c:94:80:
         44:80:76:26:93:70:e1:1e:87:87:f2:31:08:9c:63:a3:c1:b1:
         07:40:e1:d7:41:8e:1e:73:61:58:80:b1:04:c7:5d:a6:39:ba:
         bf:54:65:c5:a7:82:0d:e1:f5:e0:68:95:ba:83:7e:8d:8f:3f:
         90:98:64:e5:d2:fb:a3:22:fa:d6:6e:65:36:ae:49:d5:57:35:
         0e:6e:64:e8:f8:ce:1c:7a:c2:29:27:bb:b0:5d:7b:02:9f:03:
         30:dd:69:ca:24:f4:00:1c:81:47:eb:18:41:9d:4c:06:96:1b:
         50:f4:3c:95:b5:76:bf:b8:84:da:8d:31:cf:71:67:1f:ff:32:
         48:7b:78:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 15:32:29 2025 by rpki-client