Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File:                     vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier:          4k3mRfOUhYWZ5N1hoBwMQZsBU10aP98bKdCfhev4CCU=
Subject key identifier:   C0:8E:F8:53:5D:81:67:34:22:B3:B7:A6:23:12:13:C9:38:B0:05:C1
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer:       /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial:       0196C2A6F047C78A13FFA21EA3DFAE7C7D30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number:          1270
Signing time:             Mon 12 May 2025 04:00:42 +0000
Manifest this update:     Mon 12 May 2025 04:00:42 +0000
Manifest next update:     Tue 13 May 2025 04:00:42 +0000
Files and hashes:         1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: Oct2TniumLIJFfu3oWWapVkGyIQYH2cEKs/+Lh2HPxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:f0:47:c7:8a:13:ff:a2:1e:a3:df:ae:7c:7d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
        Validity
            Not Before: May 12 04:00:42 2025 GMT
            Not After : May 13 04:00:42 2025 GMT
        Subject: CN=c08ef8535d81673422b3b7a6231213c938b005c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:1f:a7:67:92:c2:2f:49:1c:eb:e7:35:83:
                    4e:bf:2d:b3:79:1d:5c:93:48:c8:10:81:c3:9a:3e:
                    1f:c8:24:6a:0d:72:25:35:58:db:98:58:00:1c:7a:
                    34:9a:65:8d:8a:41:2e:17:02:26:f7:8e:cf:03:c9:
                    9b:fd:87:39:78:09:e8:e4:e3:a7:b9:a2:4a:2c:47:
                    0a:84:57:3c:b6:48:4e:ec:df:92:19:16:0c:17:a6:
                    b6:71:d2:a2:88:50:b5:82:d9:bb:89:d6:9c:51:d4:
                    bb:55:95:dc:14:d3:b1:5c:e7:2d:11:ee:6b:af:27:
                    6a:ef:ba:0f:16:4f:62:81:c0:0b:7a:34:51:68:3e:
                    9c:08:57:98:c1:fb:d9:84:82:49:e6:1b:31:58:03:
                    62:60:a5:1d:38:56:62:1b:ca:41:34:81:21:d6:3b:
                    3e:88:71:0e:4f:78:63:38:bf:3c:c3:73:e8:25:2f:
                    50:95:76:af:73:b7:f1:85:4f:1f:48:e2:c8:0a:a1:
                    0a:46:d9:3d:f9:36:14:77:71:70:5a:21:97:0b:b0:
                    59:11:98:d2:82:9b:76:96:7d:af:a7:23:a7:05:52:
                    51:15:13:b0:28:a2:8e:1c:54:69:e1:a2:12:e2:bd:
                    84:a1:be:03:cd:9b:cd:7f:8c:09:1d:52:20:e7:86:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8E:F8:53:5D:81:67:34:22:B3:B7:A6:23:12:13:C9:38:B0:05:C1
            X509v3 Authority Key Identifier:
                keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:98:81:b7:26:19:a2:04:94:8b:c5:7e:15:68:73:96:56:78:
         4e:5e:fc:bb:3d:1f:e4:2e:be:e7:ad:65:b0:44:76:f9:f1:26:
         94:99:e9:0a:d0:73:ae:4e:9d:08:36:4b:38:5c:ef:37:c0:e5:
         b2:0c:99:28:6b:f4:aa:d5:e9:bb:d0:c1:18:d5:93:1f:2f:e6:
         33:52:a7:7e:2b:0e:81:91:3f:65:d8:07:54:d6:8b:84:00:01:
         d7:8b:28:fd:5b:e9:f5:31:05:ef:3d:4e:ef:1d:b7:6e:6f:0e:
         7c:4d:81:48:84:ac:74:a8:3f:41:6a:8c:61:91:1e:ba:c7:48:
         a6:4e:b1:58:6a:32:38:a4:6d:9d:b3:2d:af:35:75:33:6e:29:
         52:40:86:e1:26:03:a8:e7:0e:3c:ac:f8:49:fa:71:05:9c:36:
         da:33:36:fd:77:8b:68:e6:8b:ac:e1:6d:0e:93:a9:43:81:5e:
         52:3c:bf:d1:88:60:16:7e:3a:f7:f3:3d:8f:ee:b8:c9:cc:9f:
         5c:e9:6f:72:6c:ab:5b:b3:63:63:df:e3:fc:fb:5d:db:39:09:
         39:d5:aa:3e:ab:88:5e:96:3c:7e:18:07:32:a9:6c:90:86:43:
         69:f5:e1:d1:85:92:f6:b8:c3:f0:f9:67:44:4f:7f:30:65:6d:
         e5:c6:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:19:28 2025 by rpki-client