Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
File:                     vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft (raw, json)
Hash identifier:          PQpUgeMxNeg7Ck++yf560T366rvtzo89tn62OkAI1cs=
Subject key identifier:   24:3A:B9:BC:87:9F:F0:BC:C9:22:51:09:7F:70:BF:0B:5A:28:C3:D5
Authority key identifier: BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08
Certificate issuer:       /CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
Certificate serial:       0196764300A58BA2147EAE9127C3E6490183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
Manifest number:          0D37
Signing time:             Sun 27 Apr 2025 08:00:24 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:24 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:24 +0000
Files and hashes:         1: UTTH-IaK-KygVMC3443mlQMx1tE.roa (hash: KaccohMbQWCa0xUtmGU3VvPQYUMzJjUZd1bKqbI3gbU=)
                          2: vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl (hash: EHK+42fM4C4eAG5VcuInJ8vl5XJ5KIiHV0z+nOuDVaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:43:00:a5:8b:a2:14:7e:ae:91:27:c3:e6:49:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f159bab83661fd93ead430c3bdb1eaa7eaf08
        Validity
            Not Before: Apr 27 08:00:24 2025 GMT
            Not After : Apr 28 08:00:24 2025 GMT
        Subject: CN=243ab9bc879ff0bcc92251097f70bf0b5a28c3d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:fd:0f:25:ae:49:c8:4c:a6:26:14:2c:87:
                    cb:68:a5:e5:6a:88:d6:68:4e:27:93:62:fc:86:0e:
                    f2:6f:52:f2:b0:aa:c0:c9:11:2e:61:86:5d:98:1c:
                    78:b1:16:6e:57:c8:d9:d7:b1:c0:b3:33:c1:ac:7b:
                    51:4b:67:11:a1:d4:7f:51:2c:65:82:e0:a2:57:81:
                    70:59:eb:71:6d:19:a1:1a:de:50:bd:cf:e9:49:ec:
                    36:f0:57:03:e8:01:bc:44:df:61:2f:90:28:68:72:
                    b2:e3:5e:16:78:61:b7:98:22:78:69:ad:4e:3d:6e:
                    cb:e3:6a:87:8c:03:08:01:84:b2:d0:f7:81:74:39:
                    9b:c6:37:ec:90:01:0d:89:b0:71:12:f8:12:8c:d5:
                    7f:a9:dd:dc:75:97:a7:21:89:e5:4e:63:70:ea:58:
                    8b:a7:52:0f:a9:27:46:94:95:1d:60:c6:cc:a4:de:
                    bf:0d:af:6a:17:1a:f2:3d:79:8b:64:47:97:ae:3f:
                    45:b3:7e:4d:8f:69:8d:e4:89:57:20:7b:73:c2:78:
                    d9:53:e9:03:f6:1e:ba:69:81:63:72:74:fe:7c:40:
                    2d:3b:e9:24:61:12:f2:29:ed:15:b0:5d:83:a7:09:
                    fc:29:2a:00:1a:5c:80:e3:6f:73:ce:82:66:dd:bd:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:B9:BC:87:9F:F0:BC:C9:22:51:09:7F:70:BF:0B:5A:28:C3:D5
            X509v3 Authority Key Identifier:
                keyid:BE:9F:15:9B:AB:83:66:1F:D9:3E:AD:43:0C:3B:DB:1E:AA:7E:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a481fa-2d0d-4e8e-b2d3-28d8248b5b61/1/vp8Vm6uDZh_ZPq1DDDvbHqp-rwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:02:2f:11:24:1f:41:ea:87:d2:4c:10:7f:e9:bc:12:2d:b0:
         cc:f2:84:47:bb:a5:d4:84:7d:bc:11:e5:f2:07:65:82:de:2c:
         7a:0d:0b:a4:ad:72:11:e1:01:5a:54:df:b6:f7:93:71:18:6c:
         f8:40:9d:70:c5:5f:cc:2d:66:bd:2f:3f:88:d1:e4:32:fe:96:
         83:53:06:b8:ce:e5:00:de:79:4e:e3:62:ff:41:07:8a:d0:54:
         50:96:ed:08:b9:47:45:a8:c6:9c:b9:ff:86:a9:42:6a:cc:7e:
         e2:1b:1e:8a:50:b2:e3:d9:80:02:07:35:bd:e2:0e:f5:69:b0:
         1a:3a:8c:96:80:6f:cc:89:ba:16:96:1b:ad:5a:5f:64:2f:6c:
         23:29:94:94:e6:d1:bb:fe:f8:9b:61:d9:bc:b5:75:8b:52:f3:
         93:5d:90:25:bc:d5:30:8f:03:f9:b6:1d:c2:89:ef:43:3a:71:
         03:9e:87:6b:96:2b:63:b7:57:19:f4:92:4e:b1:f2:43:3c:da:
         81:71:38:73:9f:c1:f3:74:6e:d3:99:1b:3d:59:a8:de:ac:ec:
         8f:c8:7d:1a:0a:38:f1:a1:1f:1a:1b:6e:3d:f6:70:36:09:e0:
         ff:9e:1b:17:05:b1:79:f0:77:a2:52:7d:46:13:ca:6f:49:cc:
         ad:41:6b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:14:27 2025 by rpki-client