Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File:                     VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier:          T1xpG+nI/3otnqobYyRX+P9YOCKdk32ZMlHT/TqkfwI=
Subject key identifier:   04:5F:D8:B6:F2:7C:4E:07:54:A5:C7:5E:C4:E1:10:AA:AC:E2:14:2A
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer:       /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial:       0197B5FBD5A883368C7D4058420B278AD041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number:          0979
Signing time:             Sat 28 Jun 2025 10:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:09 +0000
Files and hashes:         1: C1sfui3_F27EORD1FFTIF_PXuck.roa (hash: L6fwO735NsCUbgUMMTGbvgV3NoYMTpTeYzX/vL5LjfM=)
                          2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: ea5SurOiy2yC7kivhGlmjuC9khktjnqdSZ0Ip8AhrN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fb:d5:a8:83:36:8c:7d:40:58:42:0b:27:8a:d0:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
        Validity
            Not Before: Jun 28 10:01:09 2025 GMT
            Not After : Jun 29 10:01:09 2025 GMT
        Subject: CN=045fd8b6f27c4e0754a5c75ec4e110aaace2142a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:cc:b1:e5:bd:f7:8f:d0:a2:c5:40:7e:77:
                    32:94:dc:b2:ad:a8:9f:55:31:c5:a3:01:e5:59:55:
                    87:cd:5f:a3:9c:fd:9e:99:7a:9e:0c:cc:07:25:6f:
                    14:09:64:80:b4:60:13:d0:63:32:4a:11:70:0e:9f:
                    4b:a6:a7:33:c0:50:ed:d4:5d:03:62:8d:4e:80:49:
                    95:b4:4a:42:19:03:ae:ba:23:33:b7:9e:d6:ae:8f:
                    9e:29:66:c6:42:3b:d3:b7:03:4b:58:d9:2c:d6:a8:
                    bf:79:0c:35:fc:a2:24:19:b8:80:76:d8:97:6d:72:
                    69:48:80:af:ac:23:56:27:7c:30:a8:7d:e5:7a:f0:
                    37:8b:c3:76:17:17:68:91:d1:46:a2:ae:23:e3:f4:
                    06:ee:e8:17:c0:f0:f8:00:67:e7:e1:91:0f:72:cc:
                    48:89:69:41:f3:28:ba:18:55:11:6b:8d:3e:0b:e7:
                    86:4f:81:14:fc:6d:27:f0:3f:8d:bc:f8:74:1b:b3:
                    12:22:6b:4a:ab:2f:a8:26:2a:17:e3:16:2e:b9:14:
                    ac:31:15:47:9c:f7:b1:ea:eb:1e:51:67:1b:3f:15:
                    3a:71:88:05:23:61:84:02:b7:ae:80:b3:e2:f0:49:
                    2c:06:dc:b3:8f:12:98:2b:f8:ce:b6:22:c0:f7:11:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5F:D8:B6:F2:7C:4E:07:54:A5:C7:5E:C4:E1:10:AA:AC:E2:14:2A
            X509v3 Authority Key Identifier:
                keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:c3:41:fd:74:90:fc:a5:fe:07:b7:7c:8e:79:94:ca:74:
         3d:46:2f:48:9c:43:ad:96:d3:2e:67:cc:c6:0f:29:bb:d4:70:
         10:92:7b:74:47:c7:9d:df:fd:95:67:da:cd:a5:9a:93:12:1e:
         ad:49:86:8a:67:3b:15:8e:78:78:0a:fe:e6:ca:90:12:5c:df:
         02:2f:e6:91:9e:bd:28:9a:9e:71:d4:72:83:c6:5f:aa:ae:7e:
         09:8c:0e:2c:21:18:c7:48:16:61:d2:1a:23:38:0d:ac:5f:9b:
         f1:07:ec:21:aa:2c:f1:63:2a:a1:55:82:26:78:19:f4:e2:d1:
         0f:74:79:83:2b:15:a3:da:c1:ff:52:3d:72:4f:95:40:df:28:
         61:39:84:35:6a:c5:9c:ad:a4:04:bd:a6:52:be:a8:eb:3d:d6:
         5b:6b:08:ea:11:7e:d4:7f:ea:cb:ac:67:24:a8:b1:52:7b:fa:
         5f:bc:ab:f1:83:7f:f5:76:5d:ba:50:36:15:99:ae:f8:b2:1b:
         1c:3c:73:43:4e:44:f8:26:0f:20:6c:66:df:e5:b6:cd:5b:e2:
         61:6d:e8:3b:2e:7a:90:06:49:e5:9e:c5:e2:ca:50:e6:8e:0d:
         c5:94:23:4e:0b:b0:1d:ad:80:16:64:c9:df:47:db:03:66:89:
         71:c3:09:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:41 2025 by rpki-client