Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File:                     Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier:          oSpGwIRm9ImM+vz4aptzaPWGkcUd4Fcb46FT1snuQeY=
Subject key identifier:   49:A5:52:34:F8:F6:C1:72:B7:22:13:B7:97:3E:8C:96:2F:96:97:C1
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer:       /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial:       0196767A588B0097C35EEECF69428DE6F976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number:          0563
Signing time:             Sun 27 Apr 2025 09:00:51 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:51 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:51 +0000
Files and hashes:         1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: 7MEqIajf6ahcC5gBzv0kQQnIRAsSMEzgVSCOMc2vCqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:58:8b:00:97:c3:5e:ee:cf:69:42:8d:e6:f9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
        Validity
            Not Before: Apr 27 09:00:51 2025 GMT
            Not After : Apr 28 09:00:51 2025 GMT
        Subject: CN=49a55234f8f6c172b72213b7973e8c962f9697c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:d4:3b:75:a8:91:21:16:99:68:0e:fa:43:
                    61:46:ae:7d:f8:a5:49:ee:7f:aa:8c:0b:0f:4b:59:
                    70:a1:81:80:0e:5c:90:0a:e4:12:e4:a9:ea:fc:e9:
                    2b:9c:81:a0:11:83:b4:80:5d:9c:05:6b:24:f8:22:
                    38:56:b1:c2:be:7e:e0:95:b6:2c:38:38:4e:92:fc:
                    b9:db:38:dd:f9:d6:d9:8e:8a:40:16:0f:7a:19:1b:
                    88:2e:e6:2a:2e:a1:cf:a1:11:21:6b:0e:21:06:2e:
                    18:88:d1:7e:d7:14:83:10:a4:36:ae:04:ba:a6:e1:
                    85:e9:11:4a:88:5f:a2:64:93:57:b5:72:ab:5a:0d:
                    33:e8:6d:2f:69:0f:8b:7b:e4:c6:1b:bf:e0:9e:c0:
                    a5:24:0a:6d:37:b3:4d:49:22:1a:ff:06:17:74:74:
                    47:a8:d5:06:76:73:7c:05:85:8c:46:28:5e:ff:a2:
                    8c:19:a4:e7:73:35:16:19:ac:ab:f1:7f:76:0d:33:
                    82:24:f8:4c:3f:26:28:85:3f:5b:88:c4:ae:74:33:
                    21:33:91:03:8d:e3:65:37:0d:cc:a2:3d:8b:a3:fb:
                    03:de:65:83:c3:4f:2e:7f:65:74:8f:e4:f3:25:fe:
                    f7:48:fd:6a:53:07:bb:42:41:96:f3:f8:99:96:ba:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A5:52:34:F8:F6:C1:72:B7:22:13:B7:97:3E:8C:96:2F:96:97:C1
            X509v3 Authority Key Identifier:
                keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:0d:ea:80:0c:72:af:83:aa:c0:4f:dd:f9:b2:31:98:df:
         ef:03:23:43:b4:80:fe:6b:2f:94:99:31:73:45:cb:68:85:6e:
         20:8d:c8:54:86:60:af:01:6c:65:8e:51:f1:f0:97:12:92:e3:
         26:d5:81:38:40:c8:d2:af:0e:71:72:37:f6:a9:8f:97:1a:40:
         48:07:1c:ab:35:18:76:4e:52:19:86:9d:3b:86:7d:6e:f8:4f:
         ed:60:d6:31:a8:b8:fd:5f:fa:32:dc:22:d9:0b:81:71:64:c1:
         2c:b5:2b:7e:d9:a6:c0:61:ff:5b:ef:ca:0a:71:0f:e3:2f:58:
         d1:7b:d7:fb:48:58:67:49:5d:15:e2:44:81:61:82:00:2e:62:
         c9:ac:00:61:24:5e:02:7c:49:a1:ac:27:36:33:6c:05:dc:f3:
         0b:47:af:32:d5:88:00:eb:1f:a8:e8:9a:29:b1:16:fe:99:9e:
         b0:20:90:9d:e3:43:b3:d5:a1:86:4c:3a:f9:ba:80:98:16:17:
         14:f0:5d:b8:08:97:05:1b:e3:3f:ab:41:db:89:b3:a6:1d:ab:
         bb:ee:e8:7d:ba:8a:3e:0c:e4:0d:30:63:38:d0:3b:63:5c:40:
         96:b0:3d:6e:8c:e6:01:4e:9d:58:52:3a:ea:33:3b:37:12:cc:
         a9:36:94:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:48 2025 by rpki-client