Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          cttJz5X7duIq7FjZ2ZkAcMYTXCa+T3OOTd33mW03K+s=
Subject key identifier:   19:E9:03:36:18:D0:A0:EA:B7:AE:DF:4C:F6:2E:32:2A:0E:31:74:2F
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       0197B9339F8733B8C48C8AA579119E4FCFA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          15B8
Signing time:             Sun 29 Jun 2025 01:00:57 +0000
Manifest this update:     Sun 29 Jun 2025 01:00:57 +0000
Manifest next update:     Mon 30 Jun 2025 01:00:57 +0000
Files and hashes:         1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: UdPUBp15sl0PEcTogvtA7DZjDq3WtFHcSywVTD6Tt1g=)
                          2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:33:9f:87:33:b8:c4:8c:8a:a5:79:11:9e:4f:cf:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Jun 29 01:00:57 2025 GMT
            Not After : Jun 30 01:00:57 2025 GMT
        Subject: CN=19e9033618d0a0eab7aedf4cf62e322a0e31742f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:11:23:e6:7f:88:c4:4c:dc:80:96:a8:fb:
                    ba:ae:2f:2f:e9:48:cd:5d:d0:1c:3c:a5:62:d7:eb:
                    d3:00:8a:76:d6:00:b1:ec:43:44:34:e8:97:c6:ad:
                    7a:06:b3:13:c6:99:3e:7e:fd:22:8e:29:1c:9b:1c:
                    83:02:33:3e:95:2a:65:82:34:03:91:e8:3b:c4:bf:
                    af:72:c7:74:f1:4d:8d:4a:f5:f7:f5:1c:59:e2:4f:
                    23:e0:8d:c5:81:a3:2b:ff:e1:7b:48:84:f0:58:9c:
                    e6:ec:c9:8e:fb:7c:38:91:ed:56:a9:61:d7:18:43:
                    d5:78:05:33:3e:ee:ab:7f:f9:f1:04:90:ad:df:2d:
                    b4:63:3b:70:97:d3:16:26:e3:82:ac:1d:91:05:f9:
                    bd:39:63:45:bb:60:0b:f8:00:e7:95:2f:d6:88:0e:
                    9d:aa:41:04:7c:fe:00:67:bb:2f:2f:51:6a:72:84:
                    a6:93:6d:cb:0b:c8:87:c0:2a:42:c2:10:85:45:03:
                    de:fb:2b:96:8e:ac:a6:2a:d2:99:5f:17:74:a3:25:
                    d1:e5:ca:d2:b5:10:61:be:8d:c6:cc:82:28:33:8b:
                    8e:b2:99:2c:d8:60:b8:45:df:1e:d3:da:51:4a:6a:
                    df:b2:a3:6b:6b:b3:8e:fa:e6:20:53:ba:29:26:df:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E9:03:36:18:D0:A0:EA:B7:AE:DF:4C:F6:2E:32:2A:0E:31:74:2F
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:d7:c3:b3:34:0f:18:a4:d8:ea:58:02:8f:77:59:c7:e4:
         a2:65:f6:4b:1d:77:22:40:b7:65:bf:ca:b4:75:58:8b:d3:1d:
         66:81:f3:e8:d2:bc:7a:9f:d9:a0:6f:72:75:dd:8c:fb:29:14:
         80:87:99:82:56:c3:f9:05:fd:ce:44:47:c6:45:2a:20:a4:cf:
         b0:a0:db:d8:e5:2a:7b:0d:c5:28:3e:d9:da:d6:27:fc:70:d9:
         6a:e0:67:bc:99:b6:ad:53:87:e9:55:5b:fd:c8:ec:81:9a:39:
         df:b0:d8:7e:6f:77:36:55:74:f2:64:95:56:89:77:3d:f1:3e:
         87:be:55:2b:8d:e7:1e:21:96:2d:f7:dd:a2:02:ee:68:e0:c4:
         e5:ee:14:07:e3:71:9c:4a:ff:f1:44:b2:d3:39:47:b4:d9:aa:
         4a:b2:b7:02:11:a7:c4:4b:55:07:16:0d:87:8e:db:a7:7d:c2:
         81:c2:9b:33:d4:d5:68:ed:eb:7e:94:52:ec:7a:67:b4:c3:6a:
         bc:c5:bf:33:84:c7:90:33:71:15:ac:e9:79:16:b6:c2:8c:c2:
         1b:09:2a:9e:57:b6:73:76:73:86:63:c9:9a:db:fa:8e:92:d4:
         95:5d:a4:67:38:27:fe:a2:f6:7e:cf:87:f4:5c:4d:01:5f:9d:
         dd:ac:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:20 2025 by rpki-client