Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File:                     vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier:          X2pFqsoTvlF6VjK7AECKQDR0xTshUdKxfpVV7VyiDmM=
Subject key identifier:   63:46:DF:B9:0F:D9:C4:7D:A9:B8:1F:A3:A8:33:D1:E2:05:9A:45:20
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer:       /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial:       01968FCC18EA5B8A056DE30F6EB5869D895E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number:          10FE
Signing time:             Fri 02 May 2025 07:00:39 +0000
Manifest this update:     Fri 02 May 2025 07:00:39 +0000
Manifest next update:     Sat 03 May 2025 07:00:39 +0000
Files and hashes:         1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
                          2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
                          3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
                          4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: ZkyyWh3JCQI8msHmQ0xuGb53xDqEyVOPPC9tkOORHic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:cc:18:ea:5b:8a:05:6d:e3:0f:6e:b5:86:9d:89:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde75079618691bae1f47bcbed52314496963891
        Validity
            Not Before: May  2 07:00:39 2025 GMT
            Not After : May  3 07:00:39 2025 GMT
        Subject: CN=6346dfb90fd9c47da9b81fa3a833d1e2059a4520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ca:3a:f7:2e:6a:9f:30:0b:85:ad:a3:38:bd:
                    70:87:91:4d:84:dd:2f:5c:9b:79:49:fd:c0:08:e2:
                    3d:b9:c9:3e:4e:6a:a7:4c:e1:c4:47:4a:57:dc:7e:
                    70:66:8f:13:4b:1d:c4:dc:cd:ec:05:da:df:c3:b9:
                    e6:34:a5:27:90:0d:5e:0a:75:04:9b:b8:64:29:4d:
                    8e:e5:54:a4:cb:15:69:c2:97:8d:ef:83:0a:e8:02:
                    1b:6a:39:04:fb:cf:1f:b0:8e:82:41:73:e0:86:7e:
                    04:40:48:bc:30:ed:56:ee:5d:97:9d:85:95:57:7f:
                    71:e8:a1:e4:65:14:4a:9a:0b:11:48:00:cf:a1:c3:
                    dd:f1:7f:3d:c3:b8:f4:ac:88:28:b5:65:06:38:e6:
                    b5:53:46:a4:c9:81:33:2e:54:43:a1:d2:c7:c2:84:
                    6d:d0:88:04:ea:59:6d:0f:ef:46:e9:07:e4:15:fb:
                    fd:48:f8:ea:b4:d5:d3:ba:e9:7e:40:b8:13:b3:35:
                    d2:02:be:61:98:2e:c7:9a:27:17:57:51:62:ee:bb:
                    22:9f:22:d7:ef:17:0e:64:1f:4f:86:bf:32:b8:a8:
                    d0:5b:25:77:f0:be:96:41:fe:5e:e4:6f:d2:72:d4:
                    16:44:b2:54:dd:16:87:5f:3c:a4:4d:ec:22:bb:60:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:DF:B9:0F:D9:C4:7D:A9:B8:1F:A3:A8:33:D1:E2:05:9A:45:20
            X509v3 Authority Key Identifier:
                keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:64:a5:1f:ff:c8:3c:f9:40:d4:57:b0:fc:bc:9f:97:3f:
         4e:95:58:55:6a:6a:0a:7f:de:08:c6:e6:ef:24:68:26:87:8e:
         83:aa:12:5d:a0:75:97:2d:51:62:7f:1a:5a:7a:65:08:b8:ed:
         4f:72:d2:ba:ff:a4:21:1f:0a:93:40:8e:0f:33:dd:ac:63:b9:
         75:97:4f:9c:7a:15:83:b4:45:36:6c:da:cb:29:85:83:72:4f:
         26:e6:8c:11:68:27:42:99:33:ca:ff:09:39:61:02:e6:1a:44:
         b7:40:88:ac:28:e1:b4:a9:ff:ba:8c:54:fc:9c:4e:59:01:78:
         28:02:bc:a8:d0:af:c8:e6:10:65:b0:b9:8b:78:4d:91:25:5a:
         49:78:b9:de:b7:81:72:0a:bf:5e:17:34:3c:6b:12:9b:2e:6f:
         bd:4b:f1:c2:f1:d9:e8:20:f5:c9:f6:33:59:e9:a2:a7:1f:4f:
         48:d8:94:f3:ad:4f:c7:a5:09:01:3e:39:6d:0b:1e:70:b7:b3:
         ea:ab:f6:a4:b4:07:d9:eb:b7:38:ff:4c:32:6a:68:ec:d5:07:
         9a:94:51:81:c6:44:80:2f:c3:ce:9e:26:12:e0:6f:ea:51:98:
         e7:28:1f:99:e6:95:7e:6d:a4:e2:24:d7:fb:b0:a5:cd:27:de:
         b5:79:ed:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:29:52 2025 by rpki-client