Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File:                     VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier:          rHEEZ+D7lCespJnnpo/ZUNufHOpQlaIlXY0vCYURIyY=
Subject key identifier:   7C:82:CE:68:DC:2D:53:3C:F2:53:DF:06:17:5A:02:15:94:C4:DC:9B
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer:       /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial:       0197B89042C235A58B4809C8E287646D1AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number:          0C07
Signing time:             Sat 28 Jun 2025 22:02:31 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:31 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:31 +0000
Files and hashes:         1: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: YrqBQNjVsCVU6yIOIDdf+dm4U104PsWx0hVW7CLFfso=)
                          2: aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa (hash: G/7B1VXAASY7QAsDWedOiKdkvLm/fHkdhD3zP6wIl7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:90:42:c2:35:a5:8b:48:09:c8:e2:87:64:6d:1a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
        Validity
            Not Before: Jun 28 22:02:31 2025 GMT
            Not After : Jun 29 22:02:31 2025 GMT
        Subject: CN=7c82ce68dc2d533cf253df06175a021594c4dc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:fc:67:f2:37:db:12:4b:98:eb:b9:55:88:
                    5d:e5:ab:46:14:35:ed:82:22:47:f7:58:22:16:04:
                    f3:c6:1b:ba:a7:8f:d9:2d:19:ab:fd:25:f5:00:ca:
                    14:d7:01:4d:6f:4b:82:84:3c:41:8c:71:e7:d0:66:
                    d2:67:b8:ae:fe:90:6e:42:c6:be:45:be:ea:98:ad:
                    41:cb:ac:97:a4:50:28:5b:4b:7e:84:02:bc:a4:7f:
                    84:46:cb:b8:b6:f5:9a:51:a3:38:0e:76:e6:5f:7a:
                    c9:de:1d:a9:e2:b2:2f:bc:6b:fa:1c:c9:83:7d:c6:
                    8a:cf:bb:de:83:dd:99:75:4f:bb:c5:96:c4:2d:94:
                    d8:a2:a3:f5:c1:a6:fe:eb:b4:d8:33:78:5f:6a:61:
                    56:82:3b:71:d1:10:da:b4:e1:d8:73:00:f0:0b:70:
                    b9:81:7d:03:15:2c:c4:71:5f:20:70:f3:48:e4:50:
                    eb:83:73:46:53:8e:11:16:24:69:9f:a6:1d:22:7b:
                    13:13:e9:09:75:81:60:b6:1a:23:da:9e:61:fd:75:
                    05:28:4b:e7:44:ac:7a:d1:62:5f:40:19:9d:38:e1:
                    42:81:0f:b2:85:48:4b:9f:1e:49:87:ec:c8:fe:44:
                    8f:ef:5f:27:de:8c:3b:89:61:09:82:94:36:02:1e:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:82:CE:68:DC:2D:53:3C:F2:53:DF:06:17:5A:02:15:94:C4:DC:9B
            X509v3 Authority Key Identifier:
                keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:b2:81:6a:c9:83:df:f5:20:d6:4d:66:06:3f:44:07:7e:
         7e:76:f1:4d:f3:c5:69:e2:5b:de:03:ef:3f:ef:a0:b3:7f:3b:
         49:56:2b:6f:8c:fb:f8:a9:61:b2:87:c8:8a:80:98:06:35:cd:
         0d:9f:c7:06:13:1e:57:92:26:83:99:d8:43:ac:a7:55:2b:e2:
         a2:91:48:bc:15:a8:66:26:ff:bd:26:07:14:99:f3:81:1a:81:
         5b:58:ef:be:b6:ca:50:56:ec:5d:30:40:10:03:c2:6c:40:b5:
         ad:19:bf:6f:cb:51:79:06:d2:ac:c5:cf:74:ec:ad:3e:f8:0a:
         9c:01:a5:72:a9:72:0e:e2:b8:5e:80:5a:59:0f:94:31:ee:fb:
         72:61:7b:63:83:16:64:85:f1:9a:18:61:4c:29:d3:65:00:a0:
         d6:31:43:42:46:a4:4a:e5:c9:f2:fe:0f:0f:7e:76:f3:2a:21:
         67:5f:b1:71:24:ce:c0:30:e8:6a:ba:84:30:f6:53:8b:10:cc:
         ba:79:e9:b8:de:b4:68:05:e8:2d:ee:80:13:21:e7:59:1f:a9:
         d5:90:70:2a:14:8e:19:28:89:fb:08:bd:ba:b6:d0:c2:67:df:
         08:ad:c4:e5:07:14:dd:6f:0f:c7:10:d3:2c:34:1a:4a:bc:be:
         fc:34:44:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:09:23 2025 by rpki-client