Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File:                     vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier:          1o8Y+kGHvU/XgkZDbqqrcCJIj5/2vTdakRY8YMKK/GM=
Subject key identifier:   99:0B:26:53:8D:60:D1:2D:F2:D5:16:BE:F9:7E:D4:2B:75:67:3E:83
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer:       /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial:       01969E6323539C9A0AE58D181C72FF71841F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number:          0463
Signing time:             Mon 05 May 2025 03:00:19 +0000
Manifest this update:     Mon 05 May 2025 03:00:19 +0000
Manifest next update:     Tue 06 May 2025 03:00:19 +0000
Files and hashes:         1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
                          2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: K+3MOvO+5Qx5HV7poSI6YJ42L/w9V5CRxAE9UxIIzYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:23:53:9c:9a:0a:e5:8d:18:1c:72:ff:71:84:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
        Validity
            Not Before: May  5 03:00:19 2025 GMT
            Not After : May  6 03:00:19 2025 GMT
        Subject: CN=990b26538d60d12df2d516bef97ed42b75673e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:c3:bd:b5:5b:b9:86:59:96:36:46:d9:d6:
                    88:c0:11:c8:8e:a1:c7:51:71:50:ef:a3:ba:6a:d0:
                    27:3f:93:dc:ed:28:c2:4f:fc:56:16:20:cc:3d:4d:
                    31:a1:bf:a4:50:03:3f:cd:aa:97:57:e1:de:71:1d:
                    cc:26:53:e4:1c:18:10:43:c2:8b:6e:17:8d:d8:39:
                    eb:e0:98:12:0f:96:0a:38:af:8c:15:28:b2:eb:3f:
                    11:87:f7:34:48:75:2e:28:95:45:9f:8e:b1:84:44:
                    57:93:f7:eb:9f:e3:8e:36:26:cb:dc:98:86:3e:ea:
                    c8:b9:bb:ba:ba:d1:a9:b8:ba:27:a3:b4:d8:5e:e4:
                    f0:1d:bf:3c:ad:bf:fe:47:ed:30:42:33:d1:fa:db:
                    f4:79:fb:a8:c4:2e:42:a7:b1:d0:75:d5:c6:8b:ab:
                    dd:6f:67:0a:0a:5f:f7:ae:b4:3c:fa:77:66:b6:2a:
                    6a:78:10:71:7c:b7:46:d2:5c:7f:52:b3:99:77:73:
                    e8:03:60:ae:57:a5:55:7e:78:c5:91:c4:9e:95:8d:
                    6a:61:2c:0a:84:9a:25:31:5e:ef:b4:1b:0a:19:8e:
                    bb:60:d2:19:a7:a9:dc:79:36:d9:4d:fa:63:79:24:
                    17:7b:cd:88:0b:39:78:59:94:a0:e0:16:77:4f:0c:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0B:26:53:8D:60:D1:2D:F2:D5:16:BE:F9:7E:D4:2B:75:67:3E:83
            X509v3 Authority Key Identifier:
                keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:88:d9:fd:72:db:f1:1f:cc:2b:5d:2c:60:0d:38:f6:f6:2d:
         a3:52:7d:09:98:d9:52:f6:bc:dd:91:d9:4f:13:aa:2b:12:c5:
         9a:00:40:db:b0:f4:41:c3:4a:45:55:8f:57:8a:7b:68:5f:71:
         c2:b8:dd:42:37:e5:76:ed:f3:e1:f8:8a:a1:ea:35:1a:84:09:
         cc:a9:70:2e:f0:fc:14:5e:aa:90:4f:65:c5:b3:e5:0f:2d:96:
         f6:76:04:72:f1:d8:ba:87:d7:d7:73:c3:4b:8e:1d:9b:c2:92:
         44:74:1b:24:53:ff:2c:0e:d2:00:19:5b:0d:38:aa:ad:64:7f:
         11:db:f3:63:6a:12:48:01:b3:81:b6:ba:99:b1:9c:f2:7a:00:
         d4:49:96:35:0a:9f:3f:93:c0:ac:9c:0c:3c:25:5a:da:89:0d:
         bf:f8:ea:fa:bd:27:32:1b:fa:0e:92:e6:ba:d5:ad:04:c7:65:
         bf:92:1b:78:5e:45:fa:17:a5:f6:20:3e:8a:fd:04:ce:f3:bd:
         40:e0:4f:e6:c2:f3:e1:36:0b:f6:55:f6:31:67:9b:e3:ad:5e:
         d0:a1:24:d2:50:86:87:4c:37:eb:ea:db:dd:a4:a0:e5:b0:c6:
         2f:ab:5a:2f:4f:e2:4b:94:17:eb:90:01:b9:86:9c:01:c1:b4:
         6f:64:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:27:04 2025 by rpki-client