Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File:                     vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier:          HTkTW/SUQ9tgrnFhSgryj8jTKWt9+mIriwdl5/LNNUw=
Subject key identifier:   61:CA:F9:87:8C:79:AC:E3:5D:52:B4:99:28:95:D0:2F:2B:68:D3:93
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer:       /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial:       0196BCA4786092A640E0A842373FD792C4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number:          046F
Signing time:             Sun 11 May 2025 00:00:17 +0000
Manifest this update:     Sun 11 May 2025 00:00:17 +0000
Manifest next update:     Mon 12 May 2025 00:00:17 +0000
Files and hashes:         1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
                          2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: mPkCYGb72L0kmkgLIhxb1ElEv2vdHzmmZN84Er5c12Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:a4:78:60:92:a6:40:e0:a8:42:37:3f:d7:92:c4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
        Validity
            Not Before: May 11 00:00:17 2025 GMT
            Not After : May 12 00:00:17 2025 GMT
        Subject: CN=61caf9878c79ace35d52b4992895d02f2b68d393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:aa:c2:4b:69:d1:50:4a:5d:44:15:f1:c7:
                    18:c1:22:f1:9d:73:2a:8c:af:55:2f:ff:22:29:0b:
                    cb:8d:96:0b:83:7a:18:62:c3:e2:82:7a:8b:bb:e1:
                    be:ec:c8:a8:73:72:93:f8:df:29:13:77:40:4d:90:
                    76:93:a5:25:2c:e3:c0:10:3b:9c:a5:f3:c4:49:d3:
                    3a:4c:73:2a:ef:b5:53:24:f2:28:d4:e2:25:af:0a:
                    f7:3a:a8:04:30:d0:45:9e:a2:b0:51:dd:3b:53:09:
                    d3:43:be:8c:e1:47:58:0a:41:b5:0f:78:40:be:02:
                    79:6d:a6:7d:77:06:bd:68:2e:a6:10:22:87:37:ec:
                    4b:94:f6:ff:7c:89:1f:92:9a:0e:e9:56:a5:03:f5:
                    7b:df:84:41:90:92:69:d4:95:bf:9e:40:89:5a:15:
                    e6:d1:80:b2:06:b6:62:ca:51:99:af:52:4e:b0:06:
                    f8:49:9d:33:d4:fe:a8:b0:d8:f5:80:d2:7e:cc:f1:
                    d9:0b:ce:45:50:da:8f:82:5a:c8:8e:1e:cb:da:05:
                    cf:9f:65:b6:af:25:cd:93:cc:bb:30:80:6b:5c:51:
                    24:04:2e:04:0c:1a:25:a8:02:01:ca:5d:c7:1b:8a:
                    42:6e:10:52:f9:bc:52:36:e2:fa:e4:50:74:66:70:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:F9:87:8C:79:AC:E3:5D:52:B4:99:28:95:D0:2F:2B:68:D3:93
            X509v3 Authority Key Identifier:
                keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:90:9b:52:48:7d:d9:44:5c:c7:76:2b:97:80:b2:67:de:44:
         33:c4:3f:79:a0:0d:05:2e:32:c7:2f:6a:80:78:35:28:fc:aa:
         67:13:bc:80:9d:d5:a9:e6:b4:04:ec:72:25:82:18:27:3a:79:
         c0:8f:7d:ea:2a:93:5e:46:41:b6:92:cb:d3:e3:07:02:b4:c7:
         b5:92:2a:9f:46:ab:0c:68:0b:8f:0b:5f:a9:7f:0f:cd:02:62:
         58:da:c0:17:7f:ca:0d:5d:dc:c8:a0:ee:0c:18:17:65:a5:9f:
         91:9b:e2:0a:19:ab:8f:0b:99:26:f8:be:13:e0:3d:75:55:5e:
         0a:0a:6c:b3:21:30:e6:91:20:1a:8b:0c:74:eb:0e:c2:c9:18:
         32:44:a5:8a:1d:9c:d4:ae:12:44:b0:6b:f7:4d:7f:1d:8f:64:
         f5:6d:05:19:75:e5:fb:4f:b4:87:71:5c:d5:07:2d:eb:70:8e:
         8b:00:99:17:1c:13:43:17:6f:47:59:3c:ef:45:b6:b9:eb:ec:
         08:72:ee:40:f5:34:ca:03:d5:c0:54:00:c7:e3:50:a8:17:cd:
         4b:73:30:25:80:45:04:79:73:bc:f6:c1:62:f2:40:ca:c0:ba:
         1e:d5:d1:aa:4b:3f:32:ea:7d:79:93:3f:84:54:b0:32:2c:f5:
         ca:87:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:10:05 2025 by rpki-client