Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
File:                     VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json)
Hash identifier:          lGkycyBs7i2ggUtu6HYsmTxC8ojkXaPh1Qan9wl5sRE=
Subject key identifier:   0C:C9:74:77:5D:A7:C5:97:C5:6D:CD:34:CE:2B:DF:68:BA:9C:83:E5
Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
Certificate issuer:       /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Certificate serial:       01969861227EB6ADBF9EFEA8E7F8A15F3C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
Manifest number:          79
Signing time:             Sat 03 May 2025 23:00:24 +0000
Manifest this update:     Sat 03 May 2025 23:00:24 +0000
Manifest next update:     Sun 04 May 2025 23:00:24 +0000
Files and hashes:         1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: /Z8D6qQdkRfbusSDXseMHAEH1qeGA8pIx2rP5MzwNLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:98:61:22:7e:b6:ad:bf:9e:fe:a8:e7:f8:a1:5f:3c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
        Validity
            Not Before: May  3 23:00:24 2025 GMT
            Not After : May  4 23:00:24 2025 GMT
        Subject: CN=0cc974775da7c597c56dcd34ce2bdf68ba9c83e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e0:5f:a6:ba:de:b3:29:25:e3:76:22:13:d4:
                    ea:ed:71:6e:fd:9d:53:c7:a7:b4:9a:ab:76:56:14:
                    3d:a1:a7:3b:3c:e2:61:e5:1d:57:59:91:ac:eb:4d:
                    40:12:57:77:37:9c:1d:c5:1c:a6:8b:2d:f4:d7:4a:
                    74:fd:60:01:db:3b:c6:40:95:7e:4c:5a:60:6a:b4:
                    36:a4:5a:bc:2f:d6:87:b4:0b:d2:9e:fd:0f:93:4d:
                    2a:9b:07:21:4a:4b:e0:fb:7b:d4:0c:89:92:8d:ee:
                    fd:b8:bd:08:36:27:ad:dc:8a:62:11:46:a2:3a:84:
                    e9:5b:1a:57:26:0a:7a:35:bf:a7:dc:0c:69:08:18:
                    77:05:54:c7:c1:59:8a:04:a4:af:87:a0:b6:00:a8:
                    ca:38:4f:73:a7:4b:5a:a2:f2:ec:a2:61:00:a7:9b:
                    cb:c7:fc:27:49:20:f5:b3:3b:9d:f9:8a:b4:3b:30:
                    b6:42:2e:18:22:cc:09:cd:bd:e4:b3:46:75:ef:1a:
                    3f:df:9e:1b:28:0e:55:95:f3:82:a8:c9:11:1a:b9:
                    8d:00:17:1e:ba:73:e4:f9:ed:b0:ca:b9:ed:c8:e6:
                    8d:ff:38:f2:d7:70:02:e8:a8:18:85:6b:4c:8b:70:
                    93:8b:1d:25:a5:4f:77:59:0d:47:5c:ac:1f:ac:5f:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C9:74:77:5D:A7:C5:97:C5:6D:CD:34:CE:2B:DF:68:BA:9C:83:E5
            X509v3 Authority Key Identifier:
                keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:3c:b6:f4:cc:00:85:0d:71:2f:d7:38:ab:60:d7:83:85:
         40:6f:04:03:df:46:8c:b9:45:5d:0a:2b:4e:5b:39:d0:91:5d:
         de:8c:10:bf:38:cc:47:49:44:d9:99:8c:d3:f4:56:11:ff:69:
         cb:41:22:62:b3:a0:30:a0:7f:8d:0f:4e:55:a7:e6:bb:11:e4:
         b5:05:6d:01:50:4f:5c:dc:61:64:e5:b7:e0:ff:b5:ae:26:12:
         56:e2:55:1b:1c:6a:59:4d:20:93:f5:ba:af:67:6a:44:a2:0a:
         22:17:80:68:58:01:de:e7:26:b2:26:0b:87:12:d8:1d:c5:92:
         84:de:cf:0d:c4:92:5e:9d:80:14:93:60:f8:0c:16:5c:da:db:
         27:35:4c:53:7f:66:c9:38:12:d1:8c:52:48:8c:83:da:37:be:
         e4:69:6b:ab:6f:26:4d:fe:fc:11:a7:3c:9b:a5:6a:3a:c3:95:
         2f:b6:a2:27:ef:82:9b:07:8b:49:f3:ed:c8:99:8b:ab:f5:8a:
         54:64:0b:de:3e:67:d5:1a:99:ba:01:d4:df:9e:8e:ed:d6:5c:
         24:fb:c7:40:86:e2:ad:82:b3:0d:12:34:0f:8e:24:79:c3:b2:
         6c:82:0a:95:25:1a:25:86:9b:34:86:c0:c2:8a:5d:0c:60:80:
         66:88:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:56:37 2025 by rpki-client