Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File:                     vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier:          3kCJCyMdp5+E7K+IRxqtpl2mL8UVGaJ6lWw4jIZissY=
Subject key identifier:   B2:AC:0C:68:39:68:1A:06:4D:BD:1D:D6:DA:9B:FE:E0:EA:C5:BE:B4
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer:       /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial:       0196944E017F8FE1304FE6CE0D621F558348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number:          14B1
Signing time:             Sat 03 May 2025 04:01:02 +0000
Manifest this update:     Sat 03 May 2025 04:01:02 +0000
Manifest next update:     Sun 04 May 2025 04:01:02 +0000
Files and hashes:         1: NciqB0nxRsKsgl_dqrGriZqOS10.roa (hash: A4v1pKF3O59HRDDkByw4kog7MAnROAkCPMI/UYgkXRo=)
                          2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: vAc6fbj7liM9H75doWBixGlKGMlZ6Ex57qhgqF/bSYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:4e:01:7f:8f:e1:30:4f:e6:ce:0d:62:1f:55:83:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
        Validity
            Not Before: May  3 04:01:02 2025 GMT
            Not After : May  4 04:01:02 2025 GMT
        Subject: CN=b2ac0c6839681a064dbd1dd6da9bfee0eac5beb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:a5:b0:17:e1:96:db:7d:08:d4:f7:49:0c:
                    76:2e:2d:61:9c:64:51:66:4a:9b:7d:77:ce:b8:b0:
                    e0:26:ca:a8:e2:ee:96:ed:c4:40:9a:39:10:5d:a0:
                    14:94:63:df:cc:ef:46:d6:12:e4:7e:0d:98:41:cf:
                    2a:4d:bc:16:79:a9:ed:51:3a:d4:70:37:93:03:2e:
                    99:cd:5f:5d:a0:43:e1:ca:b6:f0:df:9e:57:ea:29:
                    32:a0:23:62:3a:66:0f:dc:80:2d:9c:b0:c4:66:e3:
                    51:94:28:fc:af:28:d0:0a:49:e2:ac:51:eb:14:35:
                    18:1c:3e:b4:f8:6e:ca:7e:75:dd:42:50:d1:51:a7:
                    02:c1:fc:13:c0:1a:5a:15:79:29:7b:06:ee:ae:a1:
                    1c:b3:8d:0b:d1:9b:da:85:12:40:7a:97:d8:35:bc:
                    af:83:85:33:20:ae:1b:20:12:31:d8:36:ea:a8:52:
                    12:01:63:23:0c:fc:63:8a:46:8d:2b:59:ab:af:d2:
                    91:02:a5:88:ac:41:7e:66:17:0a:18:a5:91:70:b9:
                    a3:f6:6f:40:f3:51:e6:11:6b:35:2e:17:15:35:68:
                    74:fb:86:dc:1a:5d:45:e1:3f:d8:b7:00:b7:dd:6d:
                    ec:15:bc:0b:2a:f9:31:f8:8c:5a:b5:3f:64:52:89:
                    9f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AC:0C:68:39:68:1A:06:4D:BD:1D:D6:DA:9B:FE:E0:EA:C5:BE:B4
            X509v3 Authority Key Identifier:
                keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:03:a7:f9:59:c6:6b:9d:f4:5f:c8:79:5a:6e:14:b7:e0:4d:
         9b:b5:e1:c7:94:9f:48:f4:7c:3b:13:5c:08:3b:85:e2:bc:bb:
         ab:2c:25:85:69:a2:70:d0:db:7b:58:f3:a7:c6:f0:03:a8:10:
         19:56:12:21:fd:1d:bc:ee:3f:57:47:1d:6d:db:08:8e:18:88:
         c2:50:07:47:ca:ce:9f:87:c4:ab:6f:ea:66:32:07:0b:62:24:
         6b:bc:23:2f:d0:b3:f3:4f:7e:71:b3:a5:90:6a:89:48:f5:05:
         22:a1:45:02:0e:47:00:19:a5:5b:16:d5:f7:00:7c:45:2e:c6:
         80:d2:1a:a6:ef:6b:a8:ae:92:7f:d8:ba:bc:be:ee:ac:9f:aa:
         1c:1c:01:a5:3e:b1:12:47:2f:a2:c7:cb:8f:19:fa:6b:f9:66:
         e3:03:d2:7b:43:21:6c:b9:53:61:27:fd:cd:13:e1:51:8c:0a:
         fe:7c:be:c6:18:4f:c8:62:8f:31:e7:72:ea:0e:c0:e0:68:4d:
         57:f8:dd:69:8a:5d:45:3b:cf:a6:06:53:d1:3f:d1:ce:39:b7:
         53:df:92:f0:0c:a4:bc:ef:b2:d9:d7:a8:3e:41:b8:cb:a6:36:
         fd:a3:60:55:f1:d0:1b:f6:c0:ea:01:f3:52:32:01:0f:60:95:
         8a:f3:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:12:11 2025 by rpki-client