Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          JavPiEZezmU1tFc5PKEts2Z7pW2+UGO+4YDzUzy1W0c=
Subject key identifier:   CB:77:FA:13:23:85:57:15:AF:34:FA:A8:BA:51:18:EE:18:59:70:A3
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019694166FEC80FD59CFED8A86156F0D5295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          10B7
Signing time:             Sat 03 May 2025 03:00:20 +0000
Manifest this update:     Sat 03 May 2025 03:00:20 +0000
Manifest next update:     Sun 04 May 2025 03:00:20 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: hzxkVJEbOgJkWwZRLP9J212J/4WsDXyFm3CHxFdPvsM=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:16:6f:ec:80:fd:59:cf:ed:8a:86:15:6f:0d:52:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: May  3 03:00:20 2025 GMT
            Not After : May  4 03:00:20 2025 GMT
        Subject: CN=cb77fa1323855715af34faa8ba5118ee185970a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:7c:14:7c:b4:0e:79:f2:61:73:89:74:a4:
                    05:6b:05:7b:53:94:a4:1b:c7:32:17:b0:9d:4a:c8:
                    e2:79:7d:96:52:4f:2f:d2:de:a1:12:26:28:10:37:
                    71:16:48:b9:a7:ae:5e:17:da:3f:69:c0:cd:7c:f8:
                    0d:10:f8:f3:fb:f4:7a:d4:79:b6:87:23:23:77:bc:
                    f0:ce:55:f9:fc:28:2f:d5:e0:3f:42:2b:fa:f0:a0:
                    d9:ab:88:d5:79:b5:c2:50:3d:04:6c:e3:19:8d:47:
                    18:61:b3:6f:e8:36:6b:09:f9:64:4c:f3:9c:60:34:
                    ab:d5:b1:55:6c:ff:29:4d:05:30:c5:e5:9c:ac:74:
                    8c:8d:5c:52:40:80:eb:1e:71:78:4a:85:eb:ab:e9:
                    91:8e:83:e6:23:10:85:05:e8:29:69:d7:bb:25:7e:
                    43:45:ee:78:70:7c:ae:50:9c:f5:5b:a9:d4:19:34:
                    63:e3:8d:1f:70:be:6b:eb:45:62:c7:d8:b0:1b:97:
                    90:ef:d8:c7:51:41:f2:19:3d:2b:0c:02:ce:95:28:
                    fc:99:f8:a3:0f:f4:da:d4:b7:c5:96:fc:79:e4:13:
                    c3:9d:59:54:29:f8:60:1d:8a:d4:9c:ab:f8:2c:b2:
                    b0:ca:72:a0:16:8b:28:85:68:46:cf:c3:79:57:50:
                    60:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:77:FA:13:23:85:57:15:AF:34:FA:A8:BA:51:18:EE:18:59:70:A3
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:18:80:f8:8b:bc:08:a9:61:bf:f4:19:94:b9:c4:db:73:
         99:6d:63:60:61:7f:1d:f8:a1:c5:38:09:4a:06:2e:95:29:ff:
         d7:56:e2:18:9c:f7:dd:30:dd:5e:15:b8:28:26:6d:17:f2:e1:
         5b:d2:95:f2:5d:45:c4:1a:9a:ae:38:b5:4c:1d:f7:b4:60:3e:
         65:c5:4e:f6:ee:b4:ac:71:f6:df:41:05:28:61:25:d8:e0:5b:
         31:4d:9b:23:55:0f:fe:9c:34:59:72:64:9d:10:27:4d:09:26:
         61:7d:77:8f:84:b0:56:5e:ca:18:19:a0:a9:1d:13:32:3e:98:
         01:89:67:a9:32:a7:fe:ea:fd:4a:9b:b1:9d:29:4f:f2:83:ab:
         13:d5:00:b9:69:d1:f3:dc:d2:aa:20:d0:e3:af:26:4b:c0:9f:
         52:16:87:4e:50:16:74:23:84:b5:86:ff:03:9f:ac:ad:93:dd:
         df:e7:b1:96:2f:90:1d:11:54:21:0f:35:78:a4:a0:27:2d:d7:
         0d:55:68:71:33:07:86:65:83:2c:a8:af:3c:b7:3a:37:da:c4:
         17:2c:24:fd:43:fb:22:4a:1d:7d:e9:65:dc:6c:55:8f:43:8d:
         1c:67:6c:d7:3f:6c:c7:70:11:9e:e1:53:3c:6d:e8:17:b6:10:
         c0:77:02:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:25:13 2025 by rpki-client