Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          XyLo6ymbn4nZV4fdW7HREosZyOFIliA5FFhX8l9qf/o=
Subject key identifier:   0C:06:6E:AD:92:E0:B3:35:99:63:2D:E1:5F:A8:59:60:41:3E:89:20
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       019677FBD55D4A685F3267B02371DF8291CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0CD7
Signing time:             Sun 27 Apr 2025 16:01:54 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:54 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:54 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: eKbvKEw2HA3V5T5sI0btz6DtZqc8Biw7/YtNh27lWpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:d5:5d:4a:68:5f:32:67:b0:23:71:df:82:91:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Apr 27 16:01:54 2025 GMT
            Not After : Apr 28 16:01:54 2025 GMT
        Subject: CN=0c066ead92e0b33599632de15fa85960413e8920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:15:69:35:82:c2:aa:50:d3:ec:d6:eb:59:
                    91:1b:90:ac:f2:3b:9d:b9:2d:72:ef:45:cd:9f:8e:
                    87:24:ab:a1:68:11:6b:46:63:4f:25:4f:76:07:f3:
                    0f:71:c9:d2:f4:a7:1f:a5:20:00:ad:15:44:33:8d:
                    74:1e:9b:95:61:c6:40:e2:8e:d9:7a:d5:3c:d6:cd:
                    76:4f:4f:34:83:26:5d:fc:56:8e:a5:9e:18:5b:8b:
                    07:76:8b:51:13:1d:1f:9c:67:eb:0a:19:89:10:fa:
                    e7:66:03:8c:d0:ac:72:44:94:79:58:31:7c:bf:c0:
                    c5:8e:e8:f8:69:5c:d0:a8:fb:6e:2d:67:b6:b3:3d:
                    b9:79:43:1a:8a:61:43:de:65:4e:43:c2:60:1f:10:
                    cc:9a:c4:87:55:ae:1b:93:9c:5d:06:12:44:2b:08:
                    bd:fb:a6:35:df:19:e2:b4:6b:e1:e3:72:da:8f:c4:
                    61:32:f5:89:50:7b:0d:6d:1e:d9:99:2d:da:66:58:
                    0f:5a:09:76:da:fb:ad:4d:ea:8b:1d:43:a2:72:1c:
                    ed:d9:b7:5e:01:9a:64:70:1b:65:fa:50:36:1b:b8:
                    06:8f:5a:8f:76:50:a3:98:64:41:e4:7b:90:46:03:
                    66:3c:a3:0a:0c:7c:2d:08:ed:9a:73:13:ed:f8:9a:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:6E:AD:92:E0:B3:35:99:63:2D:E1:5F:A8:59:60:41:3E:89:20
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:7d:4f:32:13:11:d0:6e:94:cb:cc:41:63:37:64:3e:8c:
         6c:33:0f:8b:9a:36:a6:16:98:48:b9:68:b7:bc:8e:cc:46:f7:
         7f:56:2b:ef:57:7b:d3:9c:9a:58:c9:76:76:ad:c0:3f:d4:4a:
         59:2d:ee:3b:9c:21:66:33:ea:e9:f2:4f:14:1f:03:eb:ca:82:
         bf:4b:98:08:20:ec:94:e9:23:59:c1:54:95:a3:7a:ce:61:3d:
         fa:3a:23:6f:58:d7:f3:24:c3:b9:c7:cb:95:52:36:0d:84:b2:
         de:a7:51:36:1f:52:1f:84:c3:9c:11:24:cc:19:ef:fc:1c:e1:
         6e:dc:5d:df:4b:42:74:ed:91:fb:0b:9c:c1:7e:1e:50:3d:b2:
         22:d8:41:01:a6:60:51:47:16:cb:0a:e0:74:35:26:26:37:d8:
         d8:1a:c7:28:f0:f2:21:c6:ad:f2:46:22:21:63:01:bd:0e:99:
         43:38:23:48:9b:fe:14:d3:7c:64:39:f5:db:84:f3:9a:06:16:
         4d:33:b8:57:83:fc:7f:c9:c3:f3:64:80:82:2e:27:f2:2f:26:
         5a:c9:e0:23:ad:63:b0:85:00:94:0f:f7:49:bc:89:8d:e4:ab:
         c4:34:53:3c:1f:9e:f3:7a:4e:64:5d:5e:95:99:e8:40:1a:27:
         15:98:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:04:17 2025 by rpki-client