Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          5IzC2nO9rco+EpeoJyxyU1TQxexrS/ViUQ+MopghuP0=
Subject key identifier:   FE:0F:EF:24:5D:F0:EA:55:5F:4C:A7:FA:B9:DF:89:86:6D:89:03:51
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019676E8006BBE77D2F102482976F5F87103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          115E
Signing time:             Sun 27 Apr 2025 11:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:38 +0000
Files and hashes:         1: N4kdXs6oJ2OgpmlrmSJfyNKzdiQ.roa (hash: 4gywf4SeDVtAzz5fsjo6F/Rz+kjvjVxtwZB0jmDDSZU=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 3WPBRb8SxUgs/T+T/ztOxPmJUN6qlwRMjjx5Bi0cmNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e8:00:6b:be:77:d2:f1:02:48:29:76:f5:f8:71:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Apr 27 11:00:38 2025 GMT
            Not After : Apr 28 11:00:38 2025 GMT
        Subject: CN=fe0fef245df0ea555f4ca7fab9df89866d890351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:cb:cb:1f:da:78:bb:85:76:d5:86:31:bb:
                    29:96:14:ba:6c:80:30:fd:b6:6c:02:fd:b3:30:ce:
                    c1:89:21:37:b8:13:1e:b6:88:2f:e8:f3:68:c5:53:
                    0d:d0:38:da:b2:36:71:cf:c2:c6:03:1a:ad:1b:86:
                    4a:3e:c5:c1:63:0f:e0:e0:c3:c9:9d:c3:0f:46:d8:
                    88:4e:40:c3:6f:14:fd:b9:d0:dc:a9:f1:49:02:47:
                    1f:26:26:20:02:4c:de:4f:d1:10:81:0d:c5:f4:36:
                    e1:17:4b:df:7e:c5:a5:4f:b9:34:3c:5d:0b:b1:06:
                    47:0b:1a:8f:59:56:41:1d:a7:98:79:a6:16:c0:13:
                    5a:59:1e:9d:2e:e9:78:af:42:3d:3f:53:e0:d8:da:
                    e3:1b:46:3e:59:2b:ee:3c:4b:2f:bc:7a:5e:31:33:
                    63:40:80:10:5d:24:24:a8:fa:27:37:4e:c4:0a:0c:
                    20:d5:5b:7a:d8:31:7c:d0:68:38:0d:6e:4f:0f:72:
                    73:0c:06:8b:74:ff:af:bc:34:c5:99:27:80:ee:50:
                    47:98:b6:0e:96:39:63:1a:95:b6:1f:b8:3e:d7:77:
                    30:38:94:6c:10:6d:7e:80:2e:5b:f2:6d:db:11:51:
                    ba:2d:59:65:3f:b3:a5:49:db:b8:15:3d:71:8e:e6:
                    cd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0F:EF:24:5D:F0:EA:55:5F:4C:A7:FA:B9:DF:89:86:6D:89:03:51
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:51:00:1d:37:49:0e:92:83:ca:2d:85:3f:60:c8:1b:f6:9c:
         35:b5:47:68:90:ee:a0:c0:26:fa:36:fc:34:73:8d:18:26:39:
         3f:36:1f:27:a8:61:1b:f2:5e:97:38:aa:8c:22:95:c1:28:ca:
         dc:df:ea:04:35:f6:83:1a:8f:13:52:1a:e4:d1:af:f8:2d:21:
         5b:c9:df:fc:d1:48:7c:ef:a9:98:3b:7e:fb:f7:a5:4b:ec:52:
         de:7d:17:6b:74:67:24:5a:50:03:dc:b4:12:80:f7:33:0b:59:
         eb:41:0c:be:71:ad:4f:b1:0e:13:ad:94:86:64:d1:c2:a0:cd:
         7f:42:23:f5:a8:27:7b:50:e1:cc:f8:2a:ff:53:c9:ef:b4:eb:
         31:24:fc:c4:c6:1f:d8:ef:3f:f0:94:47:c1:8e:48:71:e0:84:
         f9:ba:24:c8:c4:75:de:db:60:4c:66:78:b2:a6:51:68:a8:b5:
         51:c8:83:4d:77:ad:b4:05:2b:a1:c0:1b:4d:12:56:04:39:4c:
         f2:90:7c:81:ec:31:31:b3:0f:f7:df:64:4b:1f:08:9e:01:59:
         6e:39:d3:b6:35:55:a7:a9:14:2b:26:d0:e0:8e:a8:c4:56:29:
         41:2b:75:a8:85:cb:8f:76:6d:65:a7:55:dc:f3:85:53:37:6c:
         96:c5:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:41 2025 by rpki-client