Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
File:                     V04loW5dOqEQrF6DNfiPY-VLQvE.mft (raw, json)
Hash identifier:          zhF12YXdRwUdoBii9nvKArzKl4v8/A/LZmgMS9JuK4M=
Subject key identifier:   99:C7:34:1E:A1:32:CB:12:BE:16:2F:13:4F:DC:96:AA:E2:BA:9C:F7
Authority key identifier: 57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1
Certificate issuer:       /CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
Certificate serial:       019677C3E0F1E65EE475B4CFDC4C25F47E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
Manifest number:          1516
Signing time:             Sun 27 Apr 2025 15:00:47 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:47 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:47 +0000
Files and hashes:         1: 4gBDlHfraeJIeTYRGBqyZyvtae8.roa (hash: Qqj1EC36vQFgIkoRX33NjG4dXDa3mcsnpDKk5Y8xJEA=)
                          2: V04loW5dOqEQrF6DNfiPY-VLQvE.crl (hash: alabe4lDt5eyZjvGMte++LXq97jZmpN49pj7dfaLiE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:e0:f1:e6:5e:e4:75:b4:cf:dc:4c:25:f4:7e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574e25a16e5d3aa110ac5e8335f88f63e54b42f1
        Validity
            Not Before: Apr 27 15:00:47 2025 GMT
            Not After : Apr 28 15:00:47 2025 GMT
        Subject: CN=99c7341ea132cb12be162f134fdc96aae2ba9cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:93:e2:e1:d7:d5:05:48:d5:24:ae:99:a5:c9:
                    69:fa:ca:e0:45:d7:35:af:ab:3e:b3:8d:bb:31:6b:
                    21:0f:d7:c7:f5:a6:20:1a:bf:67:53:22:c9:3f:22:
                    c7:6d:75:3d:02:8a:cc:c4:58:fd:e1:59:a7:6c:b3:
                    47:e4:26:ed:99:1c:ff:b5:c0:55:d9:ec:e8:e0:e7:
                    2d:9e:a5:2d:88:47:37:37:cd:57:ac:33:c6:3b:27:
                    b8:b4:be:bb:cf:ea:10:4b:07:f0:1c:6b:56:3d:c1:
                    b5:7f:97:55:38:42:5a:2a:23:29:dd:5e:46:2e:e6:
                    dd:de:24:01:8a:6f:2a:fa:69:12:f8:2e:0d:76:cf:
                    c4:3e:74:2e:f4:38:b2:e1:0e:1b:31:5e:2b:62:2c:
                    60:a3:90:c9:f0:bb:f6:ad:6d:3c:3a:c0:ed:79:5f:
                    24:63:14:f4:63:f7:b9:ad:73:b8:46:64:43:27:1d:
                    bd:49:f7:d8:ba:fc:69:74:55:4c:fa:f7:96:32:ac:
                    b7:dd:4d:2e:3b:ec:47:45:a1:fc:71:57:e4:dc:26:
                    2c:10:d9:97:4e:e5:c1:f5:bd:af:5d:f1:f1:d1:14:
                    c9:d0:20:41:3b:be:57:d9:d7:de:4e:80:04:8a:02:
                    cb:08:93:bb:0e:d0:db:2f:77:0f:7b:32:18:9d:76:
                    0f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C7:34:1E:A1:32:CB:12:BE:16:2F:13:4F:DC:96:AA:E2:BA:9C:F7
            X509v3 Authority Key Identifier:
                keyid:57:4E:25:A1:6E:5D:3A:A1:10:AC:5E:83:35:F8:8F:63:E5:4B:42:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V04loW5dOqEQrF6DNfiPY-VLQvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/04292f-f104-417c-acda-571af066cf1e/1/V04loW5dOqEQrF6DNfiPY-VLQvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:be:30:72:05:bb:41:1b:dd:71:82:25:a2:cd:3c:a2:2b:
         ab:bc:39:68:cc:2b:d2:56:b5:fd:26:c3:ea:79:67:ce:2b:ec:
         63:6c:bf:c4:28:6f:42:74:1a:64:68:eb:a1:bb:4d:4f:27:56:
         d5:34:68:fc:29:c7:65:f6:23:02:bd:d3:9c:f4:97:85:5a:15:
         d0:7b:6b:a0:98:ed:88:4a:68:d5:b7:d7:5d:3c:3d:b5:3f:54:
         a1:ff:37:d9:63:f7:e0:d9:7c:ca:79:32:0e:2e:13:0d:9a:4e:
         9e:24:87:12:4f:df:95:8b:db:be:0b:3c:c0:f9:1d:21:5f:dc:
         fe:9c:19:70:7a:b1:bb:f6:cf:8d:5d:71:5b:87:4f:6f:ba:2a:
         bb:68:ab:c2:fd:50:49:85:41:c4:44:8a:69:3a:b1:bb:7a:c3:
         36:98:f4:ab:de:df:33:2e:bc:a0:f5:c8:3e:2e:c3:d9:6b:a3:
         f3:23:e8:77:f6:68:a2:a5:1c:05:4a:89:76:83:7c:a7:ae:6e:
         f7:88:1f:56:31:f5:7e:27:7e:cf:e1:f9:b3:2f:52:2b:1e:bb:
         28:9d:60:4a:bb:dd:e9:7d:32:9d:1c:d7:59:c2:34:00:59:18:
         91:77:1f:db:8d:6d:ac:1c:58:dd:42:01:04:39:96:ff:69:fc:
         a4:08:8b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:14:49 2025 by rpki-client