Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
File:                     vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft (raw, json)
Hash identifier:          mys0Yj4yuGsGSlBceYIvkfrJx1CvB7IGujJL+VQcDok=
Subject key identifier:   D4:59:09:D5:24:0D:1B:4F:19:A4:11:FA:F3:FF:48:8C:49:8F:98:0B
Authority key identifier: BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF
Certificate issuer:       /CN=bc55836ecd655313dea19716ff6b96bd0e6991af
Certificate serial:       0196BF6E9DE3EF5524657E29A0FEBD3001AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
Manifest number:          061E
Signing time:             Sun 11 May 2025 13:00:19 +0000
Manifest this update:     Sun 11 May 2025 13:00:19 +0000
Manifest next update:     Mon 12 May 2025 13:00:19 +0000
Files and hashes:         1: vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl (hash: Ekl91RASx3LRfxDWLGfITe5xvI0EEHqjWag06+XMqdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6e:9d:e3:ef:55:24:65:7e:29:a0:fe:bd:30:01:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc55836ecd655313dea19716ff6b96bd0e6991af
        Validity
            Not Before: May 11 13:00:19 2025 GMT
            Not After : May 12 13:00:19 2025 GMT
        Subject: CN=d45909d5240d1b4f19a411faf3ff488c498f980b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:e8:87:fe:04:d3:3d:7b:a0:e2:90:dc:ac:
                    ad:48:62:11:de:8f:a2:a8:ed:ef:02:8f:ef:d0:ea:
                    30:35:cd:1b:a1:31:44:22:e5:b9:45:33:80:ed:24:
                    4d:32:a5:62:fc:7f:ba:7c:fa:ad:16:f2:63:24:fd:
                    7e:a5:15:b7:ee:11:f7:70:d9:63:a7:72:16:74:22:
                    34:73:a7:66:e6:41:3d:81:87:46:54:e0:8c:50:f0:
                    d5:ae:84:98:c6:fa:7b:ff:22:0a:ba:e2:06:fb:5e:
                    bf:f0:2b:37:62:a6:bf:e1:29:a2:3f:b6:47:10:5a:
                    f5:67:9c:99:b0:7f:86:4d:ef:35:04:99:c4:80:e2:
                    a8:29:8e:bf:c5:3f:c1:89:05:a4:c1:ef:d7:60:e8:
                    ae:66:9f:e9:0d:09:e4:3e:93:9e:53:99:ec:19:d2:
                    bc:19:2b:6b:7a:8b:d9:6e:c0:63:b4:5f:6b:05:79:
                    3c:50:a6:9b:3b:71:50:2f:76:20:95:01:b5:0a:92:
                    77:9f:ab:40:3b:c2:d6:5e:70:e7:e4:21:dc:ce:13:
                    0f:19:6c:95:2a:0e:0c:7c:1c:85:98:39:e8:94:70:
                    b9:3d:d8:01:b1:8b:00:2f:c7:26:0e:4a:dd:72:7d:
                    18:47:c2:c2:61:79:e7:c7:7a:8c:88:df:d4:98:f4:
                    e6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:09:D5:24:0D:1B:4F:19:A4:11:FA:F3:FF:48:8C:49:8F:98:0B
            X509v3 Authority Key Identifier:
                keyid:BC:55:83:6E:CD:65:53:13:DE:A1:97:16:FF:6B:96:BD:0E:69:91:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFWDbs1lUxPeoZcW_2uWvQ5pka8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d725f8-9d0a-49ad-b32f-f302e2ae9d3c/1/vFWDbs1lUxPeoZcW_2uWvQ5pka8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:ed:69:53:0b:b0:8d:e3:65:16:b6:37:ba:47:9e:04:e0:
         c2:47:34:7c:b8:81:a4:fe:59:bf:93:8a:a0:ca:f1:56:8b:77:
         9f:df:fb:a1:3a:da:51:8d:de:4a:cb:52:59:f2:cf:69:fd:09:
         d2:ba:55:d2:03:36:ca:a3:88:3c:89:45:17:a6:c2:a6:64:ca:
         ac:df:9f:5a:85:58:da:99:df:b4:3e:24:fb:30:05:d9:d4:2a:
         d2:bf:e2:24:db:90:52:de:a5:92:88:2e:7d:55:f5:0e:13:3d:
         a4:4d:37:a8:6d:f8:84:8d:58:36:5d:ad:8d:45:0e:68:cd:b2:
         87:18:fe:4e:33:1c:ee:4d:5e:0d:7f:69:7e:99:e7:e9:35:c6:
         69:d3:fa:37:67:69:2d:a1:6e:6b:e5:2c:55:c9:ea:f1:a4:f6:
         42:76:4d:d8:4c:2d:23:97:76:17:a5:3d:bf:40:57:f7:46:0d:
         bb:4f:b5:c7:05:f0:14:66:f0:02:89:e3:ee:41:4d:c0:70:eb:
         e3:88:5c:06:b0:06:34:9e:4b:84:00:2b:18:33:02:d0:6a:02:
         04:cb:01:2e:10:9a:b9:24:54:9e:66:b1:00:4b:c9:c1:e7:fd:
         0d:96:72:31:bb:be:ad:08:3e:bb:81:aa:76:b7:b8:34:0e:c8:
         bc:40:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:37:30 2025 by rpki-client