Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          eYs8Vd2XPz1DahZdyFHdCemHM/jUTIxrRB/T2zPoTY8=
Subject key identifier:   58:87:04:4E:A0:35:76:1B:A7:7C:A8:9C:7B:92:C1:A5:0E:31:8D:B0
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       0196718B039A4CDA8A96E1F0BA70262FE243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          05EC
Signing time:             Sat 26 Apr 2025 10:00:57 +0000
Manifest this update:     Sat 26 Apr 2025 10:00:57 +0000
Manifest next update:     Sun 27 Apr 2025 10:00:57 +0000
Files and hashes:         1: 1CaegB4ICZuefzj1JAi6Fx1wj48.roa (hash: T0rQumC0QZuqnoQo7aHNCuhZoTyqS5IfWn7/EsAtMu4=)
                          2: 3dGwkRWWpILiTjLEIwVgV4YgfXQ.roa (hash: X7GuBDiiZxLUWcKwRJTyK80YMGSo7Qt/ARffBe3wJbU=)
                          3: GWYPtxB8TBBSQsuwwtMs1KGGll4.roa (hash: Qc8LqozNkByx2tI097ii70x80sDBr19R1Ta+ZsAdPPE=)
                          4: L-zOPzmtsqDfMHwda_RhlWweurM.roa (hash: K+Qa6SDk+P9jfEXGeQPbkFjUDkOGmN/t+jWt6LVdbCI=)
                          5: PaCBtCf1bBa5INu63KTKIVy_4RQ.roa (hash: sqT5Z5CawOs1D78edXoiBkc2bZwUDVzlQBLxb0miSK4=)
                          6: SQdli5SNglGHDotHhFa3ePaF_ws.roa (hash: 0EyufiMDxA/CMj9L5zfJI0+7IZVo81G4EUH1nYlF9h0=)
                          7: VnNqBCs69mw3KKPb6Vb8kFHyox8.roa (hash: 7rIPU6+3Skn9EHd7NCmjus3+fpG9f70YdMuRczX9f04=)
                          8: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: pHkv/Z2Zk/3yphKpNkXbxsZlIDRKxhmVMxCMviJj1Pc=)
                          9: XD6U-BS_eNFZzoJpRnUZ_qNwIdw.roa (hash: DlG1wQai3RqUFNuIZyugTTJbkaLegQwGywk2uo56jWc=)
                          10: Xzxm2m2lSYLOXMu8jPLJvcVK6s4.roa (hash: az8lAnoR3vH/kIzQL3X68c5aD3ctZ/UYmcfVMiDjOcs=)
                          11: ZFNPpkJjAEJqP0LzaHCbcOYgV2Q.roa (hash: Zl0lVHMtT1Mdxmi4wDwpl3L8wvugA65MrAmdD5x0BTQ=)
                          12: bEnGjclY-_QlGRE7ZiztgqZ66uY.roa (hash: 7ckrGHEYIH7GQYIRDaFhef6A6QyoadZsL9wCvlLcghQ=)
                          13: b_otylVy-2-ZaxqS63ImTnqN5XY.roa (hash: 497dF0dLgdp1YY0zONF+uPLOwSZ1FCeF9z4sWNvPg4M=)
                          14: cdUHvSSzeVk2kQzX1mHqKxhfmZg.roa (hash: 2xANcXQ2qVWXH5fAbLpWYBlwCCDXMuV3fNwWKA7y19g=)
                          15: g-eSNmxl9KJXyyFof1Ifq2xZrDc.roa (hash: 7DCfQNnD6m5doJfTkuXxMDXDOCaKuX2x1GEToJT36wo=)
                          16: gr1QABwrnutvYqTsmMvHeD4z8Zs.roa (hash: 8oqaZVGE+ETInAY17RGzyDJuW9fVUcpN8TRFq8wBOLE=)
                          17: hbiqB0P-ZoFBn9K3zFxrvk7ikOw.roa (hash: Xx9dMlHq95OiWVklB54nFVbDwniDAuE72y398DJB8bo=)
                          18: jvLhOE4GhVC-9VyAb5JcZ56RExc.roa (hash: drB0jmJEjYSoqaHbydAj762zJVYIpu78kjvKUQO9WC8=)
                          19: odhCBvokoh0WXwcofdlY-9c6Mjc.roa (hash: 6FUauXvZ5DA+U95gldy5cTQLRLVBO8DuwG+KLSPveUQ=)
                          20: p3FhpinCSj-rmEiEA_PXClarb5w.roa (hash: +aQSgPjdV4Re9DLgVF2PaIa3K9Hjm/0/oFlfmTVd5zA=)
                          21: yAZag9oMcpotNbW95r4i0DWUNlw.roa (hash: odIiM0uaNRWGdTfVD8PHA01ilNibg2j6v2oJ6cN3BEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:8b:03:9a:4c:da:8a:96:e1:f0:ba:70:26:2f:e2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: Apr 26 10:00:57 2025 GMT
            Not After : Apr 27 10:00:57 2025 GMT
        Subject: CN=5887044ea035761ba77ca89c7b92c1a50e318db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:32:34:44:2f:57:b7:9c:94:b8:9c:fa:29:40:
                    55:53:11:93:7f:79:d5:4a:0f:cd:ef:c9:1c:d4:4c:
                    55:3b:cc:f0:33:14:33:fe:4f:16:04:80:3c:21:77:
                    6c:07:62:b9:1e:93:b5:66:29:32:2e:7e:63:d7:ff:
                    32:62:bc:e1:f7:98:b8:ac:64:5f:de:00:dd:bd:84:
                    6e:e7:88:54:ac:45:66:00:a8:9e:17:4a:7e:4f:62:
                    70:5f:06:cf:e9:55:c8:f9:7a:0a:49:3c:6e:9f:bc:
                    89:fc:bf:d2:dd:a4:91:fa:52:b4:c6:9f:d3:cd:a5:
                    f8:48:9d:97:45:18:77:a6:9f:28:76:9c:4b:7d:88:
                    fc:41:fa:6a:fc:60:18:de:d2:89:f7:3c:c5:c2:55:
                    16:92:fb:56:25:60:60:1b:e6:58:80:97:fc:a8:16:
                    44:92:5e:e1:a4:6a:19:95:8c:7e:3f:d0:37:f3:71:
                    9a:9d:d4:14:f1:62:c3:40:5a:0b:e7:9d:fc:19:65:
                    88:00:31:9c:09:48:9c:d7:a5:15:90:7f:ad:a0:4e:
                    69:45:39:d9:0d:bd:5c:16:b6:09:7c:5d:1d:10:32:
                    dd:da:5c:50:9f:e3:72:71:50:cc:01:4e:ff:78:c6:
                    22:fb:34:6c:be:37:ef:a4:09:d1:d4:a6:e3:28:e9:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:87:04:4E:A0:35:76:1B:A7:7C:A8:9C:7B:92:C1:A5:0E:31:8D:B0
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ef:f8:d3:5c:23:35:ec:b2:81:85:cc:2e:e9:84:7e:49:fd:
         d5:bc:7f:ee:ae:14:53:10:fc:17:8d:d8:a4:27:11:d5:4f:5b:
         ba:bf:57:3f:93:f7:42:9d:91:73:71:d8:a2:75:ca:1a:d4:04:
         fa:67:68:85:9a:a8:34:05:d1:09:82:62:98:bf:a6:97:29:c9:
         0f:c7:e4:7c:54:29:81:79:6e:8c:ca:2f:90:bc:8c:61:79:82:
         05:d8:83:0f:ab:5c:07:df:19:d1:2c:56:43:b2:c8:fd:4a:93:
         fa:09:9c:a9:9c:74:1b:bc:bb:4e:2b:47:35:9e:04:7e:b5:f7:
         27:b0:53:19:88:f2:06:90:58:86:95:8f:6b:0a:80:df:3a:16:
         bd:ef:b3:92:aa:ff:12:38:d2:9f:12:20:20:c0:4a:f9:76:02:
         52:84:07:e2:1b:6d:8d:21:1f:15:65:71:ce:5b:2e:7d:8a:1f:
         7a:b1:dc:76:32:cc:73:35:01:e7:7d:72:23:5d:4a:1a:a0:88:
         d2:a8:78:76:e2:3e:94:e1:fb:77:10:33:12:8b:e2:f2:e8:c3:
         be:05:a0:d8:99:b7:d8:6b:22:92:d4:ed:a9:ab:b2:b0:59:e6:
         ed:c0:25:04:6c:d2:4f:de:5e:ad:93:11:a2:61:3b:47:05:be:
         bb:59:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:15 2025 by rpki-client