Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File:                     VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier:          3QTnV3y/yyNszfvso9sHwKwcRyi8tNEi6F8rKU1ertE=
Subject key identifier:   57:29:A4:44:4E:BA:48:92:17:91:A9:0F:AA:98:64:4F:A1:A4:54:4F
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer:       /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial:       0196A8B02C77A7103D4406252A93B5E5642B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number:          1529
Signing time:             Wed 07 May 2025 03:00:40 +0000
Manifest this update:     Wed 07 May 2025 03:00:40 +0000
Manifest next update:     Thu 08 May 2025 03:00:40 +0000
Files and hashes:         1: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: 0ULw3j5VzOUjBulA8dIeHgDxGcEG+ubZaUQAJZgkKsQ=)
                          2: ZI5xHGAAawem8l14dj3kmApEGWg.roa (hash: gQVQJokb8l7v3e3ujraYshzYQvAhAvVrZfuw7H2HApU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:b0:2c:77:a7:10:3d:44:06:25:2a:93:b5:e5:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
        Validity
            Not Before: May  7 03:00:40 2025 GMT
            Not After : May  8 03:00:40 2025 GMT
        Subject: CN=5729a4444eba48921791a90faa98644fa1a4544f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:40:71:e6:be:43:2c:4e:7e:6b:1b:52:08:
                    34:6d:48:c6:07:b7:f0:b7:10:e5:69:7e:14:8b:12:
                    91:50:a3:03:64:0a:a5:9e:61:58:6d:e7:3c:56:4c:
                    42:29:fe:9b:91:5b:b9:ce:16:ce:30:94:b8:e1:87:
                    63:2e:a0:14:cd:a1:23:09:6d:87:2b:ba:c1:2b:2e:
                    96:97:51:e8:34:ec:4a:6c:8b:ee:94:13:83:e8:8d:
                    de:2d:29:24:39:68:15:35:e9:39:be:68:d3:fe:f0:
                    80:b0:54:60:71:1b:d2:1a:81:86:6b:d5:29:4f:ad:
                    29:dc:61:51:b3:96:72:b4:24:2c:3d:b6:be:12:8a:
                    af:0f:ec:cb:bd:a1:b2:19:10:61:2c:79:34:ea:35:
                    be:fe:2e:a2:15:2e:66:95:48:8e:41:bf:33:84:84:
                    0a:49:5c:3f:d0:c4:92:eb:7a:2b:1b:b2:b2:ca:3a:
                    3d:e8:81:18:8d:4c:df:cb:69:a5:17:bc:48:66:1e:
                    ab:87:82:5e:38:82:20:2f:83:b6:8f:72:3a:6e:50:
                    5c:c5:63:1a:08:3e:bb:23:d2:f6:e9:6b:5a:8c:1f:
                    75:ab:22:9e:1a:13:0c:51:9e:f6:97:46:f3:e6:10:
                    58:c1:d1:47:8a:13:51:cc:2e:bc:aa:0e:3d:98:fe:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:29:A4:44:4E:BA:48:92:17:91:A9:0F:AA:98:64:4F:A1:A4:54:4F
            X509v3 Authority Key Identifier:
                keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:0a:64:6a:a8:fa:e1:5c:90:0d:d0:7f:62:27:d4:a4:d4:
         df:48:2e:e3:f3:06:5c:30:e0:4b:fd:8b:50:43:6b:1f:82:4b:
         3c:9f:4f:54:c5:84:e1:4e:d4:28:39:a9:e2:67:11:00:68:60:
         93:34:e9:47:c1:7b:44:3a:e0:d5:5c:6a:1e:01:03:0c:b6:b1:
         f5:5d:1a:bd:c6:6b:e2:14:c0:ed:1b:fe:e6:1e:df:cf:52:be:
         62:c8:c1:15:ff:42:24:df:4f:61:a8:6f:00:35:4f:c2:41:cb:
         20:85:f3:96:00:a1:a4:1f:0d:7d:58:1d:00:4b:3f:6c:05:0c:
         96:1c:27:83:42:5d:51:eb:15:91:6c:58:36:64:2d:bc:2d:de:
         37:43:c6:8e:ca:ac:cf:73:e1:82:8e:58:f5:7c:72:ef:14:b6:
         c9:04:09:54:77:07:3d:9c:60:03:23:7c:c5:3d:55:89:dc:c6:
         4e:39:93:31:cf:48:c3:2e:a6:76:ff:68:2a:b1:0d:43:10:64:
         0a:56:b6:4f:95:32:8e:5e:de:cc:23:8a:fa:b0:87:de:90:5c:
         a4:17:e9:1f:39:15:be:ae:72:0c:5f:02:8f:dd:12:82:34:78:
         fb:b2:03:21:a3:29:42:4f:2f:86:dc:99:5e:bb:41:92:be:04:
         1a:75:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:44:26 2025 by rpki-client