Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          2aQgU6vW18Did4RiDZM/lIi/qnbQHCQefA/X4INsfjE=
Subject key identifier:   D4:40:75:21:72:33:FD:8E:78:62:30:65:E8:05:C4:B9:E4:47:27:4A
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       01968322BEC7C418EFDCC98B5178B7AB3A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          1530
Signing time:             Tue 29 Apr 2025 20:00:14 +0000
Manifest this update:     Tue 29 Apr 2025 20:00:14 +0000
Manifest next update:     Wed 30 Apr 2025 20:00:14 +0000
Files and hashes:         1: 1-fqkV7JZgJxycvSPusdfWjnU1xQ.roa (hash: QONebl1+/LHi2kQ7q9RN/wwgttq2CVHi0V6T+dpI+kM=)
                          2: 1-xYWEWhRA8nM0__wgU5vRp_QcU.roa (hash: bnYzR+tYP6QenME6qvGbnZ7/wPK7R1RpQJzzDie5Khc=)
                          3: 9_Mv9ZEtP5jzBp-veVmAU5Me26w.roa (hash: 7xIRl7rk4EGTHFHDXuf8JFK1gbSXSJDUaqeJThSJ4B0=)
                          4: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: Rmj1rdLfKlcppuiomJQMOYHFY58e40YhuNnJRIQpqeE=)
                          5: W8VYUTscWXm_5fPXK391Lev4Y8I.roa (hash: jqzmOKHuREPVfrtcJ/0te/zL0kTBbKMBx+WS1zBrGeg=)
                          6: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:22:be:c7:c4:18:ef:dc:c9:8b:51:78:b7:ab:3a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Apr 29 20:00:14 2025 GMT
            Not After : Apr 30 20:00:14 2025 GMT
        Subject: CN=d44075217233fd8e78623065e805c4b9e447274a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1d:ed:20:40:bf:5c:5f:3e:a4:2e:39:aa:1a:
                    8c:98:2e:6e:21:4a:4d:0f:87:c6:e4:b8:62:93:e9:
                    a1:cc:17:3d:1d:2f:15:d9:09:3e:15:b2:e4:ca:39:
                    39:67:a4:04:15:c5:93:2b:dc:66:e6:58:c9:8c:f7:
                    d2:6a:3e:af:0e:7b:c9:1f:c1:49:02:75:e3:c6:cd:
                    6b:04:ee:ca:24:7c:24:d5:36:23:d3:51:5f:31:7c:
                    20:c0:5d:94:8a:01:45:34:8a:17:69:e3:4e:83:9c:
                    95:30:e6:64:c3:fc:07:92:46:09:fb:d7:cd:9f:b0:
                    12:f6:e9:92:21:a0:f4:8a:98:48:d4:3e:71:f1:e1:
                    3d:2f:66:d7:54:38:e3:fd:18:c6:b7:e9:76:34:16:
                    de:63:ba:19:01:e5:45:6f:ab:39:11:59:6e:40:e7:
                    aa:2d:2e:1d:69:b5:ff:c9:41:bf:bf:06:19:a8:1a:
                    9a:1f:aa:f1:1b:df:94:6c:d3:e3:53:b9:ea:8b:92:
                    e7:72:5c:81:a4:5f:7c:4e:40:ce:6a:9e:10:14:62:
                    1b:b6:97:b4:28:02:2c:6a:46:14:12:3c:ad:3f:af:
                    e0:c5:4c:74:27:ec:af:81:70:c4:e1:e0:26:08:a0:
                    12:cc:94:b8:b5:a6:88:91:88:4a:7f:c9:d3:75:a7:
                    15:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:75:21:72:33:FD:8E:78:62:30:65:E8:05:C4:B9:E4:47:27:4A
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:dd:6c:bb:be:ce:74:9a:5c:26:4c:34:2e:63:32:e0:dc:
         57:8e:22:e4:17:98:e3:05:31:14:ea:f1:1b:0d:90:b3:99:94:
         e0:e2:47:db:9a:54:29:9e:7e:ba:ad:9a:53:26:88:f7:36:cd:
         cd:5d:b2:a4:16:90:23:d9:d1:e0:30:fd:2f:ed:95:97:1b:8b:
         d2:0b:25:e8:7a:38:ab:dc:b2:0e:d6:c2:9e:c9:04:cd:f9:fd:
         53:4a:fb:5b:10:cd:ff:d7:1f:cd:be:c9:8e:19:48:82:85:4f:
         f4:33:19:66:45:43:80:96:9a:b7:37:41:6a:b2:17:b2:f0:fa:
         6f:52:21:14:61:ba:15:63:7e:73:5d:bc:35:3d:d1:3a:60:5d:
         89:ea:48:e8:f4:c9:3c:f6:e4:11:38:b8:20:1a:cb:f5:5c:bb:
         16:c8:6e:23:a6:92:cc:57:cc:a8:25:5c:48:20:7f:43:6a:4b:
         d1:1c:5a:c7:80:92:07:43:2e:ae:d4:86:5b:b1:8d:ad:07:26:
         7b:d6:cd:d0:05:97:01:45:60:bd:1a:de:2f:12:07:e2:33:29:
         4a:d1:8d:e6:97:22:cb:b6:fb:58:03:98:58:8c:81:66:b3:3f:
         32:ce:59:16:54:2e:5c:d3:d2:c3:0a:bc:49:9f:94:dc:80:f9:
         bc:91:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:07:06 2025 by rpki-client