Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File:                     VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier:          BdJbqh/Oq5JtubGMfB/KQoPTW4u4OHXduyl2a7IU2Ac=
Subject key identifier:   9C:12:44:C8:5B:76:0B:6E:80:45:AA:D3:57:4B:2E:39:65:E2:DA:D5
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer:       /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial:       0196C5A7DAD10C15C54164A514D429B00F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number:          06BF
Signing time:             Mon 12 May 2025 18:00:34 +0000
Manifest this update:     Mon 12 May 2025 18:00:34 +0000
Manifest next update:     Tue 13 May 2025 18:00:34 +0000
Files and hashes:         1: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: Mmo0OAWA2FX+RUwuKqRPg0cZJy46f6vIiKQgXHELlFU=)
                          2: tzSxEqbN9RPe7WLi6GpaqxSubiw.roa (hash: NQOfRB00StYv2rpk5RfPASO+YDaJlcYUJaTmyGg5oDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:a7:da:d1:0c:15:c5:41:64:a5:14:d4:29:b0:0f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Validity
            Not Before: May 12 18:00:34 2025 GMT
            Not After : May 13 18:00:34 2025 GMT
        Subject: CN=9c1244c85b760b6e8045aad3574b2e3965e2dad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b9:b6:a7:9a:12:97:5a:a7:98:d6:22:04:77:
                    cd:2d:0b:b3:c0:3c:66:54:f8:43:9f:02:1f:55:eb:
                    a4:71:16:42:3f:f2:43:01:1a:26:92:be:a2:f5:fe:
                    ba:e7:b1:08:e5:bb:c5:31:56:b1:68:36:fa:41:72:
                    59:d0:e2:4b:41:f2:b3:3f:91:20:fa:06:f7:52:4c:
                    a4:aa:38:38:64:a8:74:04:4c:0a:4a:59:1a:8b:de:
                    bf:3d:21:8e:ce:94:f1:55:05:2c:b6:bb:1e:3a:f1:
                    fa:c0:8c:89:75:44:1b:68:c1:24:f5:32:20:ac:3d:
                    87:cb:c2:21:21:1b:01:67:13:39:48:b3:1f:24:63:
                    8c:4d:c4:cf:54:00:d3:bc:25:56:1d:43:b8:62:4d:
                    4a:2e:aa:d5:f2:9e:b9:c0:7b:dd:f7:b9:97:24:a2:
                    eb:8e:5e:74:f6:52:cb:b6:a9:30:f2:ae:1f:0e:2a:
                    aa:33:d1:b7:cb:56:00:4b:28:70:b3:6e:67:7d:7d:
                    52:a3:4c:ed:14:8d:41:68:f2:ea:79:7b:19:f9:f9:
                    c5:1d:74:73:94:e0:25:e4:1c:ad:c9:56:bc:55:54:
                    8d:b4:a9:c9:f5:d0:3e:68:f1:bf:c0:ae:b9:0a:94:
                    8c:64:1c:cd:e9:aa:3a:00:dd:27:5d:8a:e4:a7:14:
                    33:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:44:C8:5B:76:0B:6E:80:45:AA:D3:57:4B:2E:39:65:E2:DA:D5
            X509v3 Authority Key Identifier:
                keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:2f:79:99:3a:f8:25:8a:fb:cc:0b:a2:06:93:8a:98:13:
         33:7f:bf:e7:54:24:19:bc:a5:8c:30:3d:e3:5d:17:08:4a:28:
         30:7c:5c:26:9b:7e:62:5e:49:9e:ce:ff:1e:71:3c:08:0c:4e:
         2b:2c:fe:b7:ea:c9:64:69:e4:46:97:0a:e9:b8:bc:05:b6:df:
         31:ae:14:4a:57:0f:2e:d9:e5:5a:5a:4c:0b:3e:33:bf:eb:79:
         ba:0f:b5:6a:ec:51:ff:02:9f:17:6b:3a:8c:b0:f8:62:56:7c:
         60:36:d1:a1:59:cc:be:7f:59:d0:cb:3d:0f:d0:68:cf:4e:b3:
         03:8e:75:28:62:5c:ac:4b:46:04:08:06:ac:bf:50:4e:cf:14:
         6c:dd:89:ca:40:ff:cf:98:7e:24:e7:c2:68:94:ef:cb:74:79:
         32:68:02:a0:99:1f:d3:ea:6d:10:f0:0e:d4:e8:6b:b3:d2:14:
         2a:98:6f:b8:1f:03:8a:af:20:e4:9c:4f:a5:6e:5d:92:e3:43:
         ce:32:cf:07:56:b1:e3:c2:94:ee:a1:27:91:1b:b1:4d:46:54:
         70:3a:2f:a3:52:46:94:a0:74:77:8e:34:04:58:b9:b7:fc:dc:
         88:4e:f2:da:98:b4:86:8f:5b:6f:a4:05:4e:d0:80:df:a0:82:
         ad:91:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:23:47 2025 by rpki-client