Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
File:                     VW7RG7bV4tam6roZ2vY3tT92ftU.mft (raw, json)
Hash identifier:          pUa67DgwKfWztRQdnasnXchqPmWSu0pLiRRtxaCVbjs=
Subject key identifier:   73:7C:18:FE:65:C7:52:86:6D:AE:D3:C8:03:4E:80:33:C9:1D:E6:7E
Authority key identifier: 55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5
Certificate issuer:       /CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
Certificate serial:       01968247A0F8F592768FE577F9F0994E1734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
Manifest number:          039A
Signing time:             Tue 29 Apr 2025 16:00:54 +0000
Manifest this update:     Tue 29 Apr 2025 16:00:54 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:54 +0000
Files and hashes:         1: RlHwhR54JFo3eiYjQ0HNmngGq1c.roa (hash: Zd+He0y/cu8f6yOcHa/4lo5/3/FYNL3U25I+7MQxDIs=)
                          2: VW7RG7bV4tam6roZ2vY3tT92ftU.crl (hash: 34VfGw4OGSBEbphQoGQiuRiiLxoGERxYfynqDqlPd5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:82:47:a0:f8:f5:92:76:8f:e5:77:f9:f0:99:4e:17:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556ed11bb6d5e2d6a6eaba19daf637b53f767ed5
        Validity
            Not Before: Apr 29 16:00:54 2025 GMT
            Not After : Apr 30 16:00:54 2025 GMT
        Subject: CN=737c18fe65c752866daed3c8034e8033c91de67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:ad:48:a6:b8:1d:a6:8a:ad:9d:b2:d3:27:
                    98:16:b1:de:85:4e:ff:b7:7b:2b:29:73:8c:b1:cd:
                    0c:78:43:57:2a:d4:fc:59:c0:1f:5a:3a:95:2b:6f:
                    d9:d7:5d:e8:44:b6:0b:5a:25:a7:bf:7c:6d:e4:77:
                    e9:ba:01:24:0f:39:3f:34:09:30:f0:0c:39:8e:19:
                    1a:00:f0:69:1f:90:7e:1b:32:c5:fa:80:19:ab:4c:
                    83:f8:96:77:8a:9b:c1:ed:80:9c:5d:65:eb:d0:49:
                    49:a4:b3:7c:44:b5:4b:3f:f1:77:5b:9e:b4:d7:6f:
                    82:a1:1f:83:20:dd:fc:a4:95:a2:5c:14:73:32:a9:
                    24:f1:86:7b:62:3a:bd:22:83:f7:e0:57:c6:34:ac:
                    e2:32:0a:43:7c:57:d6:ca:47:55:36:db:e3:45:cf:
                    ff:d5:45:e4:5c:27:78:1e:83:6d:ca:7c:20:43:cb:
                    72:f7:85:a0:7d:70:30:b5:48:59:62:96:b3:c0:9c:
                    df:0b:84:20:dd:b8:d8:8e:6b:4e:58:88:fe:60:d7:
                    f7:37:bb:d4:fe:98:4a:7e:82:d2:08:f6:e8:60:7b:
                    b8:bd:8c:e1:a0:97:6b:e6:1b:68:9c:c0:da:47:c8:
                    94:87:66:48:4d:5b:64:52:41:4d:2e:0a:35:1f:f6:
                    62:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7C:18:FE:65:C7:52:86:6D:AE:D3:C8:03:4E:80:33:C9:1D:E6:7E
            X509v3 Authority Key Identifier:
                keyid:55:6E:D1:1B:B6:D5:E2:D6:A6:EA:BA:19:DA:F6:37:B5:3F:76:7E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW7RG7bV4tam6roZ2vY3tT92ftU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/22bf9f-c0c8-4750-b1bf-1998665bd793/1/VW7RG7bV4tam6roZ2vY3tT92ftU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3e:12:c4:2f:1b:48:a0:35:c8:d5:73:e9:07:00:25:23:1b:
         73:bf:49:cc:8a:93:b1:29:26:e8:4d:72:e4:1b:6d:a5:88:90:
         71:7a:bb:a9:93:c2:80:dc:d5:e6:bf:5f:42:7a:2a:a2:52:ce:
         3c:97:fb:8c:d0:0c:e1:82:29:3d:21:8f:fa:f1:50:82:c6:0a:
         1b:45:a4:51:d7:03:9c:64:e1:2d:24:89:ed:ef:03:20:ae:03:
         23:e7:02:71:b6:67:5e:00:6c:05:67:6d:59:12:02:1a:0b:1b:
         73:0f:5e:01:c1:c5:12:28:eb:7e:0d:61:39:48:46:88:87:4b:
         57:4a:91:b0:01:6c:1d:23:42:b6:f5:23:c9:19:1a:46:ab:ca:
         87:78:50:55:08:70:b7:9f:09:e6:6c:fa:d1:36:99:9c:89:0d:
         ec:56:67:28:2f:ed:9f:5d:5e:75:18:6c:6e:7b:cc:25:45:ed:
         27:6c:28:99:12:33:bc:de:30:99:45:2a:8e:97:e3:9a:f3:28:
         31:d0:b6:27:a2:c3:f0:64:c2:e9:35:9f:62:38:06:24:2e:f7:
         b8:e4:b0:c3:ce:e7:ec:93:e1:c9:5f:6a:40:a8:8d:8c:dd:53:
         dc:71:46:d8:2f:79:c7:71:6d:3c:56:d8:7e:3b:7a:c2:1c:09:
         e2:af:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:50 2025 by rpki-client