Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File:                     vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier:          go7yTPglRCkxVFFPWVQTDrrVlF7Eq9tZ6O3RIsxKE2A=
Subject key identifier:   85:40:93:A0:A1:14:96:01:A7:CB:8E:94:95:48:68:0D:4D:8A:33:36
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer:       /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial:       0196AE0E2189C2D9FD3D15A7A32D0C99005A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number:          0773
Signing time:             Thu 08 May 2025 04:01:23 +0000
Manifest this update:     Thu 08 May 2025 04:01:23 +0000
Manifest next update:     Fri 09 May 2025 04:01:23 +0000
Files and hashes:         1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: APrul7D0/Z3O5UFSO/epTLxq74WSRVv4i/YQbWoa9DY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:0e:21:89:c2:d9:fd:3d:15:a7:a3:2d:0c:99:00:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
        Validity
            Not Before: May  8 04:01:23 2025 GMT
            Not After : May  9 04:01:23 2025 GMT
        Subject: CN=854093a0a1149601a7cb8e949548680d4d8a3336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:35:69:9e:f0:1b:b6:38:17:de:22:2b:ed:
                    5f:92:8b:94:bf:f2:aa:54:7a:a2:64:d6:6c:16:0e:
                    31:92:ee:cb:91:39:23:bb:64:08:14:6a:4b:9a:0b:
                    69:05:13:4c:23:c7:db:ff:66:66:e8:bc:25:64:4b:
                    7b:8c:3d:7f:f3:eb:d7:b0:04:4b:bd:84:f6:50:ad:
                    a5:4d:fd:5e:61:00:02:52:c4:a8:14:1a:84:66:a3:
                    db:0f:ee:07:50:30:07:62:90:6a:e7:f4:3a:1a:1c:
                    a6:25:c6:a7:6a:61:db:fd:cc:4b:21:da:a4:c2:93:
                    12:d0:02:83:cd:6b:78:14:7b:32:d7:9f:1b:d9:1a:
                    9c:68:60:99:56:72:02:fb:63:bc:0b:ad:af:ee:ce:
                    dd:91:47:6c:c5:09:23:bb:88:e6:44:df:9f:cd:36:
                    94:27:24:6f:e9:82:38:52:3e:d0:44:bc:30:fa:db:
                    9f:4d:9d:27:fa:0c:a6:eb:bd:78:2e:d6:76:e9:58:
                    2e:a9:b5:64:db:2e:02:23:04:49:a1:80:44:19:7c:
                    eb:3d:63:78:dc:92:69:23:13:32:77:a4:13:44:40:
                    03:d8:38:92:5e:89:3b:46:11:46:cc:16:0d:18:b2:
                    14:d8:6b:07:ee:dd:cc:19:47:fc:b1:61:72:53:a7:
                    c5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:40:93:A0:A1:14:96:01:A7:CB:8E:94:95:48:68:0D:4D:8A:33:36
            X509v3 Authority Key Identifier:
                keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:78:b1:98:df:c8:43:0b:27:d1:2d:ed:e8:ca:ba:a2:f1:
         11:5c:25:bd:df:28:25:77:c7:30:ac:43:43:89:04:d9:a0:7e:
         25:6e:05:64:9a:22:be:1f:d7:5f:81:22:66:19:e0:b2:fe:4d:
         00:2b:cc:65:04:4d:a9:fa:44:27:b4:21:f7:a6:8f:eb:35:23:
         38:22:28:43:0b:06:13:68:8a:1a:fa:01:02:9d:a1:a2:85:dc:
         0b:38:0f:02:68:5c:f9:51:73:b3:ec:9f:3e:f5:48:1b:96:25:
         10:f8:c8:ba:ac:d1:cf:f2:a4:d5:dd:9d:f8:b4:df:28:8b:48:
         b4:06:25:dc:a2:7a:70:f3:6b:97:26:34:2b:2f:b2:58:18:c6:
         54:b7:71:15:46:ab:3b:95:79:70:19:a3:fd:09:5c:4c:80:6c:
         44:31:39:81:87:19:60:ad:a2:6f:ae:31:b0:e0:2a:b1:41:58:
         97:4d:be:eb:89:fa:3d:ff:b8:f9:cb:7b:89:e5:14:c0:18:8a:
         d3:7b:20:d2:a8:c9:6a:43:38:74:4d:07:fe:24:9b:bf:2e:6d:
         bb:9a:85:35:d1:62:d8:7e:eb:da:af:60:b7:af:d4:0a:39:56:
         e7:22:e0:7c:5e:8f:28:4d:4c:4c:e8:7e:29:3c:02:a3:b3:4a:
         1f:70:bb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:29:00 2025 by rpki-client