Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          IG03WkDoLWRr90Te5GQsHnVbsC2tFf/AWxlpkg4NU+M=
Subject key identifier:   E3:62:30:B5:3F:54:67:B0:1F:AF:E9:A7:9D:DF:DF:D7:B8:EB:82:63
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       0196BD80E73DC88617E4E8D3545AF1F50F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          0616
Signing time:             Sun 11 May 2025 04:01:03 +0000
Manifest this update:     Sun 11 May 2025 04:01:03 +0000
Manifest next update:     Mon 12 May 2025 04:01:03 +0000
Files and hashes:         1: 379KyU2oDiIti7-0Beh7CyDuELg.roa (hash: ReR1XKSXwtfAqsWrsYEG+eBW7p2DkPnXTfWoOtDj+ek=)
                          2: 3dGwkRWWpILiTjLEIwVgV4YgfXQ.roa (hash: X7GuBDiiZxLUWcKwRJTyK80YMGSo7Qt/ARffBe3wJbU=)
                          3: GWYPtxB8TBBSQsuwwtMs1KGGll4.roa (hash: Qc8LqozNkByx2tI097ii70x80sDBr19R1Ta+ZsAdPPE=)
                          4: L-zOPzmtsqDfMHwda_RhlWweurM.roa (hash: K+Qa6SDk+P9jfEXGeQPbkFjUDkOGmN/t+jWt6LVdbCI=)
                          5: PaCBtCf1bBa5INu63KTKIVy_4RQ.roa (hash: sqT5Z5CawOs1D78edXoiBkc2bZwUDVzlQBLxb0miSK4=)
                          6: SQdli5SNglGHDotHhFa3ePaF_ws.roa (hash: 0EyufiMDxA/CMj9L5zfJI0+7IZVo81G4EUH1nYlF9h0=)
                          7: VnNqBCs69mw3KKPb6Vb8kFHyox8.roa (hash: 7rIPU6+3Skn9EHd7NCmjus3+fpG9f70YdMuRczX9f04=)
                          8: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: ciJKOQGDpGmHb5ZWQARsMlfxGhAsUNz9dmF7+isUkUg=)
                          9: XD6U-BS_eNFZzoJpRnUZ_qNwIdw.roa (hash: DlG1wQai3RqUFNuIZyugTTJbkaLegQwGywk2uo56jWc=)
                          10: ZFNPpkJjAEJqP0LzaHCbcOYgV2Q.roa (hash: Zl0lVHMtT1Mdxmi4wDwpl3L8wvugA65MrAmdD5x0BTQ=)
                          11: b_otylVy-2-ZaxqS63ImTnqN5XY.roa (hash: 497dF0dLgdp1YY0zONF+uPLOwSZ1FCeF9z4sWNvPg4M=)
                          12: cdUHvSSzeVk2kQzX1mHqKxhfmZg.roa (hash: 2xANcXQ2qVWXH5fAbLpWYBlwCCDXMuV3fNwWKA7y19g=)
                          13: dzUGVkWQchrypeqrtYaiPIwbvB4.roa (hash: 1Jtw+89sBLOY/+kjEVbuDyt9fNQR9SJuWVhcz8NGExc=)
                          14: g-eSNmxl9KJXyyFof1Ifq2xZrDc.roa (hash: 7DCfQNnD6m5doJfTkuXxMDXDOCaKuX2x1GEToJT36wo=)
                          15: gr1QABwrnutvYqTsmMvHeD4z8Zs.roa (hash: 8oqaZVGE+ETInAY17RGzyDJuW9fVUcpN8TRFq8wBOLE=)
                          16: hbiqB0P-ZoFBn9K3zFxrvk7ikOw.roa (hash: Xx9dMlHq95OiWVklB54nFVbDwniDAuE72y398DJB8bo=)
                          17: jvLhOE4GhVC-9VyAb5JcZ56RExc.roa (hash: drB0jmJEjYSoqaHbydAj762zJVYIpu78kjvKUQO9WC8=)
                          18: p3FhpinCSj-rmEiEA_PXClarb5w.roa (hash: +aQSgPjdV4Re9DLgVF2PaIa3K9Hjm/0/oFlfmTVd5zA=)
                          19: yAZag9oMcpotNbW95r4i0DWUNlw.roa (hash: odIiM0uaNRWGdTfVD8PHA01ilNibg2j6v2oJ6cN3BEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:80:e7:3d:c8:86:17:e4:e8:d3:54:5a:f1:f5:0f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: May 11 04:01:03 2025 GMT
            Not After : May 12 04:01:03 2025 GMT
        Subject: CN=e36230b53f5467b01fafe9a79ddfdfd7b8eb8263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:14:71:ea:20:b5:79:e2:45:f1:da:e6:3d:
                    c1:ce:1a:f3:e3:ad:1d:c2:58:67:8f:d1:f2:7c:95:
                    22:d6:6a:0e:8d:27:f4:e8:46:ad:5d:05:6f:5e:d6:
                    0d:d0:16:9a:fc:e2:44:78:12:d8:c7:61:9a:6e:30:
                    d2:c6:ab:7e:1d:e5:70:eb:a5:b7:a2:65:8a:1e:69:
                    41:85:b0:15:c2:96:41:b6:84:0d:b4:50:b2:bd:bf:
                    cd:21:53:94:ca:3c:61:39:cc:2e:87:0e:2e:5a:06:
                    a7:ff:bf:5b:4d:da:f6:7d:71:16:3c:ab:a4:71:5d:
                    da:76:1a:09:83:a3:8e:36:aa:29:42:50:07:ad:10:
                    22:d4:92:93:c8:66:c3:66:7e:05:34:fa:c7:ea:23:
                    cc:62:d1:75:98:fb:02:a3:d0:e8:16:b1:92:52:99:
                    e5:b4:56:34:cb:57:34:70:bd:42:c0:a1:b3:64:2a:
                    2a:b4:74:99:fb:f5:01:85:82:d4:11:85:a0:58:26:
                    1b:11:7a:cb:61:0b:b5:d1:56:fd:8d:6c:cc:d4:ea:
                    58:84:b8:a1:9a:9d:85:7d:a7:b2:9d:cd:e8:a8:e8:
                    f2:b5:19:69:98:2a:ae:e9:df:ab:b3:60:08:e2:4b:
                    5c:f2:03:49:55:8d:cd:5d:50:36:60:4a:07:a8:ac:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:62:30:B5:3F:54:67:B0:1F:AF:E9:A7:9D:DF:DF:D7:B8:EB:82:63
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:66:f6:75:20:0c:6c:bb:bd:24:2d:53:f8:56:a6:2e:23:9a:
         d7:bf:3f:5d:af:f8:77:10:35:48:90:eb:f1:d7:c8:45:98:e9:
         cb:ca:02:9e:53:f5:a1:c9:bd:a8:9b:2f:dd:1c:d3:37:ab:c2:
         6b:26:b1:56:5a:26:cb:e8:dd:ed:bd:cb:60:36:72:88:30:4c:
         f3:1f:87:c7:db:f7:b9:01:12:ac:9e:67:d3:f8:c1:80:dc:c9:
         21:1b:ff:a4:93:c1:a0:b9:48:2c:a8:37:5e:95:3c:19:55:40:
         6b:d3:ac:4b:ff:68:01:72:7c:cc:11:95:79:82:ce:4c:37:c7:
         1f:da:b8:35:1d:d8:27:4b:55:bb:ed:b8:8f:30:3c:0d:a8:69:
         64:3d:0a:cc:5c:98:44:36:2c:06:be:65:2a:77:50:35:d4:eb:
         a7:8a:35:e2:a6:df:46:77:3b:da:fc:40:77:99:5d:98:88:f5:
         d1:a3:fa:58:3e:cd:4f:88:1e:32:c5:10:dc:0b:c8:b4:c2:79:
         49:95:78:a3:52:6e:a3:9f:b7:1b:63:e4:3f:7d:cb:d6:9d:9f:
         ab:94:d1:71:87:5e:29:40:c5:b9:bd:2e:e0:dd:a7:65:d2:40:
         02:eb:ef:13:fa:dd:86:9c:78:4b:b3:06:48:a0:8e:ba:89:6d:
         84:2f:61:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:36:27 2025 by rpki-client