Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
File:                     VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft (raw, json)
Hash identifier:          X3KvyH1U4VFFW9kO54aEaCQF3kzraqyFnTbTUfhOQUY=
Subject key identifier:   DF:0D:AB:8A:9D:B1:8A:DB:28:04:9B:49:F8:37:AB:C1:AF:22:F0:61
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Certificate issuer:       /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial:       0196BFDD2CC395E53F682ADC8F44D946DF31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
Manifest number:          0731
Signing time:             Sun 11 May 2025 15:01:05 +0000
Manifest this update:     Sun 11 May 2025 15:01:05 +0000
Manifest next update:     Mon 12 May 2025 15:01:05 +0000
Files and hashes:         1: VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl (hash: aDzqOU0bpVTqEf8Gd2/kvhf13035v9TKWuEsFGoIpms=)
                          2: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (hash: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dd:2c:c3:95:e5:3f:68:2a:dc:8f:44:d9:46:df:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
        Validity
            Not Before: May 11 15:01:05 2025 GMT
            Not After : May 12 15:01:05 2025 GMT
        Subject: CN=df0dab8a9db18adb28049b49f837abc1af22f061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:5e:09:90:b5:26:28:7f:cf:9c:cb:64:a8:
                    46:96:5e:aa:37:54:46:ea:b9:f2:6c:7d:f8:3a:38:
                    22:aa:82:b4:9f:d4:18:96:7b:6e:38:47:0f:99:b5:
                    47:bb:3a:db:d1:b2:10:b2:42:a5:a9:07:5f:0f:c7:
                    3f:34:63:b5:bc:9b:a2:f1:f1:d6:22:71:b4:a2:b0:
                    18:86:5a:cc:42:b3:e5:f3:1d:3c:f6:de:c7:08:9f:
                    77:d3:68:57:6a:17:34:2e:be:e8:bf:03:26:c1:f7:
                    c3:c2:1e:17:37:75:88:90:0b:80:bd:42:39:04:d2:
                    82:1f:a6:0c:b6:e6:4d:85:01:0c:23:3c:6d:aa:38:
                    dc:20:af:52:fe:ad:64:e1:f9:ff:15:3a:84:5d:cf:
                    0d:63:a3:c0:1e:44:1d:1b:fd:6f:fa:6e:20:b6:65:
                    b6:c9:b2:cc:f1:88:fe:5d:40:ff:67:e6:f7:cf:6f:
                    8e:6b:8f:1e:26:64:43:71:ef:5a:b7:87:ad:20:02:
                    8d:61:3b:65:bb:10:23:35:eb:54:73:d2:ea:6f:c0:
                    0f:d4:89:11:b3:7d:56:02:a0:70:cd:8c:a9:f4:a2:
                    c9:5b:5d:08:ef:e8:00:f9:7a:37:4b:95:81:4e:d4:
                    a2:e1:be:63:ea:b5:c6:1d:90:fa:91:fc:de:8c:49:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:AB:8A:9D:B1:8A:DB:28:04:9B:49:F8:37:AB:C1:AF:22:F0:61
            X509v3 Authority Key Identifier:
                keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:49:60:23:63:cb:17:49:f1:86:bf:ec:d7:fd:76:44:91:
         f2:97:05:fd:5d:18:07:53:54:fc:3b:60:be:c9:a9:ff:e3:f3:
         10:38:46:41:21:c0:ee:cf:cd:e9:02:44:ca:58:dd:b8:56:f0:
         38:16:f3:aa:15:85:30:b1:b6:6f:c9:67:dd:5b:05:28:38:96:
         d2:75:dd:a9:bc:3e:d0:3e:e6:99:0d:f5:41:87:48:80:58:a6:
         eb:c3:1c:8b:f9:ee:4c:39:69:b0:64:ac:90:88:07:77:d5:e8:
         02:9d:0e:7a:d6:06:c8:72:61:9b:6e:29:6f:e8:7e:1b:92:65:
         ff:3d:b3:46:2c:4e:14:6c:6f:fb:40:e5:c9:e3:09:80:d0:f0:
         a1:8c:68:23:cb:78:51:69:09:e1:f5:f2:ac:16:78:cc:2b:7f:
         82:f9:dd:00:e3:37:30:ef:47:03:d4:ca:97:02:8e:39:69:6f:
         e5:dc:ef:b9:ea:c8:84:bd:0a:5b:06:b0:14:df:c7:3e:e7:86:
         f0:fb:f0:e4:4e:16:be:90:39:06:c6:29:66:0e:92:7c:49:9d:
         f5:36:82:ea:da:b3:02:c8:98:38:43:a3:a8:84:d3:4d:09:30:
         e0:e2:96:1a:67:6f:68:a6:ff:ad:03:d5:99:49:78:c1:dd:f8:
         42:a2:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:01:56 2025 by rpki-client