Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
File:                     V9ChyazkChsBcJn_Y-Tgh-scvds.mft (raw, json)
Hash identifier:          GbPFZDslh+7Csw1Ate+1nk43RW1OhcsF0PoWJuQOqoY=
Subject key identifier:   CB:72:D0:3D:CE:E7:9D:F4:0D:8C:8F:46:14:3B:EC:98:7E:D5:E9:3F
Authority key identifier: 57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
Certificate issuer:       /CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Certificate serial:       0196A2092DBBB07721EBF2A5C071E5CFDAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
Manifest number:          03C5
Signing time:             Mon 05 May 2025 20:00:32 +0000
Manifest this update:     Mon 05 May 2025 20:00:32 +0000
Manifest next update:     Tue 06 May 2025 20:00:32 +0000
Files and hashes:         1: V9ChyazkChsBcJn_Y-Tgh-scvds.crl (hash: KwXOV8tOf74PK3oNeDbwoWFwFPgr4LgT1DE8KNy+coc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:09:2d:bb:b0:77:21:eb:f2:a5:c0:71:e5:cf:da:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
        Validity
            Not Before: May  5 20:00:32 2025 GMT
            Not After : May  6 20:00:32 2025 GMT
        Subject: CN=cb72d03dcee79df40d8c8f46143bec987ed5e93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:cd:01:a2:0c:ef:21:db:6b:52:0f:b6:c4:
                    57:67:32:f5:19:fc:0c:fa:9b:4f:27:c1:88:0d:ae:
                    95:56:03:1f:c2:f7:dc:c5:e2:6e:f9:18:7a:0b:9f:
                    67:0b:ca:64:47:f0:18:d0:f7:03:fa:2c:9e:2f:37:
                    5a:86:a4:ae:97:f3:2b:81:fe:d9:17:fc:84:72:0b:
                    ef:c4:2c:f7:d8:93:8c:dc:1c:99:d4:98:09:c6:c5:
                    ac:06:31:76:9c:d3:8f:c6:21:b6:35:5c:50:7f:c5:
                    4b:74:30:8a:97:21:88:91:61:4d:7d:24:00:fa:3c:
                    cc:df:31:12:b9:62:16:7b:c6:13:e2:58:e5:60:be:
                    f5:74:de:e3:b8:83:9f:0e:8c:34:cd:cd:d4:a8:c9:
                    63:9c:af:bd:9e:66:89:85:91:4d:e6:f1:e2:a0:9f:
                    31:24:93:72:2a:50:c4:4d:e3:8f:62:a2:e9:d9:a5:
                    c6:cd:e4:c4:51:44:ff:9e:35:21:5f:84:6a:60:bc:
                    ab:b7:91:f8:b2:37:ca:dc:c6:5e:ca:f7:db:dc:31:
                    d5:b7:ff:50:d6:15:5b:15:e7:6b:4e:95:3b:3d:24:
                    06:61:47:f7:c1:2b:d0:ed:87:e5:f6:e9:a9:dd:3d:
                    a6:ee:72:fa:c8:76:c8:bf:e7:40:6d:1e:21:29:63:
                    ae:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:72:D0:3D:CE:E7:9D:F4:0D:8C:8F:46:14:3B:EC:98:7E:D5:E9:3F
            X509v3 Authority Key Identifier:
                keyid:57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:95:61:30:e0:14:7d:c6:a6:22:95:5c:76:d1:e8:06:b0:
         42:47:19:17:14:e2:10:8d:26:71:03:66:f2:73:18:5b:7f:6e:
         08:f6:ac:db:b0:df:5a:47:8f:b1:72:49:a5:66:15:3e:f7:7b:
         1e:8a:59:06:b9:1f:e0:12:aa:94:b4:45:6a:49:d6:11:f9:f1:
         b7:9a:2d:7a:5b:20:87:6d:eb:09:ef:40:ed:83:19:d6:0c:cf:
         82:dc:4f:f2:6f:04:fc:cf:46:44:33:47:e1:52:70:0f:00:82:
         02:f1:fd:2f:22:82:ea:34:c5:6e:24:49:a5:db:95:bf:d2:b4:
         0f:89:3c:49:f6:1e:a9:93:4d:8b:9e:82:c1:cb:be:a6:22:8d:
         5e:4e:64:59:6b:5c:ae:4b:aa:bb:17:cf:b1:c6:33:e9:25:fd:
         79:b9:56:83:1c:a8:b5:5c:80:4e:a5:fc:00:55:4f:8a:4c:b9:
         fc:15:89:e2:ce:28:67:21:7b:b2:07:d7:93:99:4b:c7:41:70:
         a8:b8:07:70:b5:03:a3:68:5b:a2:a4:8e:24:3a:d0:2e:54:1e:
         33:e2:82:13:26:6f:3f:9d:a3:85:70:2c:bf:96:34:35:8d:80:
         0c:e1:7f:3c:33:72:68:80:38:28:26:2b:f8:04:db:94:11:c3:
         59:b3:2b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:11:15 2025 by rpki-client