Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          9IUAB+rDBNUYocyVPU/ixV5L/j8GmutqP9qfgSk6MZo=
Subject key identifier:   2B:E1:04:19:4E:CB:62:38:0F:FE:EB:29:F1:BB:FD:C6:B1:D6:80:AF
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       019671F8A7C8CF3B880CF5C1B0B13307FFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0E0C
Signing time:             Sat 26 Apr 2025 12:00:43 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:43 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:43 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: LGI2Vj9BmvFcVCxRsW/bWiIZNyiO1GtdoaMXxTehbis=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:a7:c8:cf:3b:88:0c:f5:c1:b0:b1:33:07:ff:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Apr 26 12:00:43 2025 GMT
            Not After : Apr 27 12:00:43 2025 GMT
        Subject: CN=2be104194ecb62380ffeeb29f1bbfdc6b1d680af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:55:c5:35:eb:ea:25:b4:9a:5b:78:7f:20:
                    8b:4f:1d:8c:f0:93:20:04:7c:70:d4:24:61:40:63:
                    00:79:cb:13:40:e6:65:6a:d6:0a:f5:75:9e:c5:61:
                    cc:da:80:67:4b:89:a7:64:7c:c3:8c:ad:e3:74:5c:
                    f5:6a:28:f5:54:13:66:3d:b7:2c:b9:d5:6b:65:0e:
                    07:bc:ae:51:68:65:8f:0e:2c:e2:45:fd:07:98:5b:
                    53:2c:27:60:e7:18:15:4e:ff:42:f4:2c:5c:89:2f:
                    fc:39:71:6d:4e:a5:42:1e:d4:28:f4:6f:87:89:49:
                    b5:3d:1e:06:14:f7:5c:0b:94:79:68:38:4d:10:4c:
                    29:0a:9e:51:e6:ee:1f:ac:bc:91:46:b4:c9:97:68:
                    1c:17:28:ff:cb:fd:2a:2f:68:fe:8c:92:10:dc:fe:
                    e6:bc:62:93:2d:ca:2b:d6:a6:ac:fd:6d:69:cb:c3:
                    b0:c0:56:bd:9b:45:93:e9:3b:af:98:5b:06:85:40:
                    65:ff:9b:d1:76:28:8b:11:f0:8b:24:d4:a7:3b:da:
                    d9:9f:02:e3:2d:83:cc:1b:5c:a3:ba:89:91:01:39:
                    d1:78:90:98:76:25:e4:cc:06:5a:9c:09:8c:67:ac:
                    22:3c:94:91:5a:8f:5a:2d:b5:c9:9d:d9:fe:cd:65:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:04:19:4E:CB:62:38:0F:FE:EB:29:F1:BB:FD:C6:B1:D6:80:AF
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:40:82:12:e3:fa:e1:7c:2e:a5:37:4a:04:56:e5:5d:19:
         59:5c:7a:31:8c:90:a4:c6:31:bb:b3:a7:e5:e1:c9:68:ea:88:
         ca:c5:41:28:b7:3b:d6:fb:0f:64:40:d0:0e:f6:c3:67:46:14:
         53:d6:57:e0:c0:70:da:18:61:89:fb:78:54:0f:c8:89:26:09:
         6f:db:ef:1b:92:ea:84:1d:98:36:7d:62:f1:70:69:7e:6d:8a:
         ba:2c:e1:b2:47:08:db:8d:58:40:27:6b:be:bc:a3:bd:6c:30:
         5b:52:12:20:65:7d:64:c0:47:68:1e:94:eb:e9:5d:58:06:6f:
         3c:f3:d1:b2:fc:32:de:18:70:54:c1:a0:4c:9f:fb:f4:b9:86:
         bd:37:45:28:c4:b1:b2:a3:8c:53:d7:3a:60:3c:e6:6a:dc:d1:
         f4:76:7c:f3:1f:42:c1:55:fc:46:29:09:2a:ec:f5:aa:42:bc:
         f6:e1:f0:d6:a9:b7:bd:cc:99:b2:14:cc:80:48:8e:2a:20:78:
         21:e8:9d:6a:e1:fb:db:5d:4e:04:cf:d3:0a:0d:52:c6:3b:98:
         eb:12:b9:0f:83:94:ef:ef:99:ad:0c:dd:cc:a5:aa:fe:5d:8f:
         0f:71:3f:68:60:9d:92:f4:44:22:e5:a6:76:bd:5d:a9:5d:bc:
         ae:f4:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:57 2025 by rpki-client