Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
File:                     VUrbcrguz6_FcF4l_ryrXILXbuY.mft (raw, json)
Hash identifier:          rUGBQkMiKkhCXxoiIeZG1efZuDHeg6E7M3g0Rr3SKHs=
Subject key identifier:   85:A9:BA:C5:5F:AD:41:38:93:B6:7B:ED:98:92:A9:45:C8:2A:6F:1D
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Certificate issuer:       /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial:       01968C5CC63FC3E80C65AAD18B0C1E485698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
Manifest number:          151D
Signing time:             Thu 01 May 2025 15:00:12 +0000
Manifest this update:     Thu 01 May 2025 15:00:12 +0000
Manifest next update:     Fri 02 May 2025 15:00:12 +0000
Files and hashes:         1: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (hash: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=)
                          2: VUrbcrguz6_FcF4l_ryrXILXbuY.crl (hash: gFcW/V9rw3RTfnOEyTK4LDQ84yX38QDK6o1yNiq4Z4w=)
                          3: dWNiEP0LUD7dSvktQv2INrJGJiM.roa (hash: WMIYaY37kYwm6mWlb4q4EjyFluke1DA8FS5pDir6lhY=)
                          4: nl5ocY3BJbGiAB69YV_PvWbBg1U.roa (hash: hRVRtYdD/fYVrabwKGY5ApsAw5vF5xmgF582IeAo/0g=)
                          5: w6mGOoQojvsniraRaXbmULybcGI.roa (hash: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 15:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8c:5c:c6:3f:c3:e8:0c:65:aa:d1:8b:0c:1e:48:56:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
        Validity
            Not Before: May  1 15:00:12 2025 GMT
            Not After : May  2 15:00:12 2025 GMT
        Subject: CN=85a9bac55fad413893b67bed9892a945c82a6f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8f:ad:78:2b:07:d7:f4:cc:fe:99:82:36:1e:
                    a3:f4:89:a1:26:60:3a:9b:c7:ff:c8:4f:02:15:4f:
                    9b:b6:b5:ac:c4:e2:f8:e8:c9:d0:3c:fc:68:35:ed:
                    20:52:87:f8:ed:5b:34:ec:75:1f:28:ba:a3:19:b2:
                    7b:ea:97:47:7f:b8:1f:af:1a:ca:8b:2b:1f:9d:15:
                    77:d4:ea:76:6b:9b:52:54:5e:31:e9:3c:ce:35:bc:
                    b6:5b:ff:4e:2b:4b:8a:f1:79:b8:0b:97:9e:d0:06:
                    6a:17:75:59:74:3b:8c:55:ad:5b:41:31:45:a3:8f:
                    06:d4:67:71:c7:71:36:0a:bd:73:9a:1d:cd:32:ce:
                    09:85:7b:7c:e8:66:ef:0c:44:31:b6:a3:10:c3:90:
                    de:78:4f:f4:ea:98:77:dc:55:dc:ef:1b:bf:3f:db:
                    83:b3:cf:22:21:be:55:aa:25:a2:58:74:03:43:94:
                    62:97:de:e2:4a:bf:da:3b:af:d3:ca:1b:f9:4f:4e:
                    64:9a:59:62:3e:f2:c6:9d:a9:e5:47:5d:75:8d:96:
                    88:1a:2c:b4:57:de:07:a6:26:75:c8:65:c1:5c:9d:
                    39:fc:c3:14:bb:9a:1d:52:33:ec:a5:0a:6d:33:38:
                    f0:4e:4a:23:6c:e9:2f:06:10:88:df:98:9b:98:c7:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A9:BA:C5:5F:AD:41:38:93:B6:7B:ED:98:92:A9:45:C8:2A:6F:1D
            X509v3 Authority Key Identifier:
                keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:51:ec:32:57:9e:20:22:c5:86:0c:fa:87:98:5d:f0:fa:1d:
         ac:bc:50:64:ee:d1:da:fe:d1:67:34:6e:9b:ae:9a:b7:93:d2:
         93:ca:10:45:f8:9d:bd:c7:2a:8d:d7:1d:d1:13:47:c3:d9:e0:
         de:a6:2c:74:b1:d9:8d:5f:9c:e7:a1:28:79:58:8d:0c:fb:02:
         a6:75:46:e6:43:ac:60:8f:21:cf:fd:72:7f:52:b5:fd:a8:fa:
         59:ce:d3:fc:dc:78:14:4e:f5:5c:09:56:55:20:b0:ae:18:d7:
         6a:b1:43:aa:a0:78:ac:db:32:83:95:2f:25:f2:12:0b:86:5c:
         ca:ac:7d:4f:a2:ab:de:41:65:48:b3:4a:6a:ae:ef:7d:aa:dd:
         47:6f:29:6e:cf:76:21:56:7c:72:c5:53:b3:f7:ca:0e:91:24:
         4b:40:3a:bc:4d:d0:fb:f1:8a:bf:94:e1:26:fe:aa:50:b2:48:
         96:b4:85:00:90:e5:45:8a:4b:5d:c7:73:fd:29:0a:7e:c9:67:
         a1:28:78:32:db:1a:ff:98:ca:9d:a6:b4:fd:50:88:ed:d5:a5:
         9e:a2:fb:d8:ce:b2:3a:a7:92:46:51:c9:7b:2b:ec:63:6b:e8:
         f3:95:ff:8e:59:ea:0a:28:ed:51:46:2a:22:4f:78:24:36:cc:
         ef:6a:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:24 2025 by rpki-client