Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          c44pxYKgOP0XgSwxF00SlGg8l2pkcciMYhTHeTRRy2M=
Subject key identifier:   75:8A:47:FB:DC:AC:84:EE:B0:A9:31:19:E1:D9:59:FA:F0:4F:16:82
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       019673793E46D088C28F991B8C09DBFA7DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          01CC
Signing time:             Sat 26 Apr 2025 19:00:47 +0000
Manifest this update:     Sat 26 Apr 2025 19:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 19:00:47 +0000
Files and hashes:         1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: Er8+HCiPtHBc3ALU+hnlKM6tbS2Nkw+ktJa+pNFDTOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:73:79:3e:46:d0:88:c2:8f:99:1b:8c:09:db:fa:7d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Apr 26 19:00:47 2025 GMT
            Not After : Apr 27 19:00:47 2025 GMT
        Subject: CN=758a47fbdcac84eeb0a93119e1d959faf04f1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ef:75:86:a0:2e:7d:b1:e4:7a:87:27:bd:57:
                    2e:cc:87:b3:b5:7b:50:67:80:d2:28:eb:d1:76:c7:
                    49:9a:17:53:6d:cb:5c:12:f0:2e:01:40:78:12:43:
                    c3:3f:3e:06:df:69:ef:44:2e:66:f4:4a:72:00:84:
                    d5:b7:68:16:d1:fb:4a:51:22:c5:37:fb:76:27:37:
                    72:7d:b1:98:8c:fa:de:d8:37:be:95:9c:4d:43:88:
                    6c:59:38:d4:7a:43:05:83:fa:1f:4e:75:bc:66:66:
                    3c:6a:56:75:83:fc:a0:55:b2:f9:20:ea:88:41:85:
                    48:45:e6:33:77:87:6f:15:d0:b6:ad:1f:d1:73:ed:
                    8c:cb:1a:f6:7d:c4:7e:27:29:3f:db:38:29:c9:b2:
                    e9:23:7d:03:6d:93:ee:6a:2a:91:68:39:b2:d1:0c:
                    ac:85:c8:6f:b4:a6:09:aa:6f:8b:ba:ff:bc:40:58:
                    81:2b:52:6d:31:7f:a5:64:d4:73:54:8f:a6:a3:a2:
                    34:dc:41:51:a1:1d:4e:24:3a:77:82:f8:bb:8a:19:
                    09:10:1e:20:d4:4d:55:34:af:3c:dc:35:cc:f3:06:
                    e7:9b:1c:6e:c8:ee:e3:32:59:cf:63:8a:50:a0:6a:
                    c0:36:7c:3b:20:17:94:cd:c2:fe:14:be:b8:cb:71:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8A:47:FB:DC:AC:84:EE:B0:A9:31:19:E1:D9:59:FA:F0:4F:16:82
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:54:3d:a9:9d:a1:b8:aa:21:fd:18:97:6d:a5:76:5f:c4:d0:
         cd:25:70:69:e7:01:11:33:1e:04:75:52:5c:9e:8c:32:c7:84:
         5b:2f:48:1a:74:33:a2:cb:53:b2:c3:86:52:d3:50:22:84:5c:
         4e:6a:5a:eb:c1:06:11:94:52:8a:49:35:ff:19:4c:7d:e5:e2:
         94:73:ea:b1:01:69:c4:35:82:70:aa:8c:ba:d7:61:3a:90:91:
         7c:11:35:39:8d:aa:4f:d7:68:61:03:10:5e:10:8c:76:43:20:
         b3:ab:0d:2b:76:69:f6:e5:3f:99:ab:96:36:5d:6b:90:e2:ea:
         78:10:f4:bb:d5:ab:8c:a5:4d:40:1e:b0:19:2c:b9:96:30:d5:
         83:37:28:62:d9:55:56:3e:da:76:92:73:db:17:e4:40:a8:4c:
         61:76:bc:21:86:c3:84:9e:c4:ea:aa:63:74:c7:2b:4a:43:b0:
         76:3a:88:7e:45:a2:e9:e1:82:71:82:49:9c:d2:2c:4a:6a:61:
         f4:40:4f:fc:50:2c:33:f1:e3:da:33:97:48:bb:34:5e:ac:47:
         4f:38:5f:30:a2:ee:ea:63:48:39:93:62:f8:6c:8d:2f:6b:62:
         04:03:45:71:ad:90:ff:cc:3b:97:64:84:9c:63:2d:e9:18:4a:
         e5:6b:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:30 2025 by rpki-client