Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File:                     VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier:          fOw5s6bn91sE0cd6Uax9UswustO1R68WuUIN08R92ec=
Subject key identifier:   48:B7:99:DB:CE:90:57:DE:43:B1:99:5D:54:99:3A:9F:A8:00:65:3B
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer:       /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial:       0197B8213318A7B5AD974173F57F86C2D0E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number:          04BA
Signing time:             Sat 28 Jun 2025 20:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 20:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 20:01:12 +0000
Files and hashes:         1: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: 4tmMF1b6VLRpW6TEvedUBxr4zby3p+r9XZ6xjIkv3bU=)
                          2: yDB5GRHHAS-xe1GzTw2-ZinAODM.roa (hash: fhKYPu+IotrC2SQI+fYAsjSkwcHk2X3TQ/wuBYgtCU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:21:33:18:a7:b5:ad:97:41:73:f5:7f:86:c2:d0:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
        Validity
            Not Before: Jun 28 20:01:12 2025 GMT
            Not After : Jun 29 20:01:12 2025 GMT
        Subject: CN=48b799dbce9057de43b1995d54993a9fa800653b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:76:d7:a1:33:35:89:5f:29:04:98:84:53:
                    1f:62:74:60:43:6b:a0:d5:08:f9:e4:40:8d:e1:5a:
                    1a:45:bc:7e:85:68:67:0d:47:ef:13:fb:3a:be:9f:
                    db:18:1d:12:0a:bc:76:22:fc:0f:40:b4:cf:ab:91:
                    11:4c:ba:b3:36:22:7a:aa:b4:97:a9:a2:8f:50:aa:
                    91:33:a6:6f:7c:d9:12:80:3f:65:f1:f7:1b:b7:d0:
                    fb:68:14:ed:a8:ed:c6:06:e1:4d:14:e2:1a:2f:d6:
                    9c:2c:12:c5:0e:7b:ab:b5:0c:0f:d6:90:92:57:75:
                    85:cc:c4:23:f7:f0:f0:2f:5b:5c:ca:b8:ec:b3:62:
                    eb:15:3d:89:17:e0:f9:6a:f5:14:2b:c8:6c:bb:01:
                    ae:41:38:77:d4:c5:31:e4:15:20:69:58:a5:fc:97:
                    f0:23:9e:e0:48:3c:fc:a9:94:8c:13:90:a1:14:97:
                    69:80:f1:97:8e:a4:7b:99:79:cd:87:ac:a9:35:bc:
                    49:dc:8e:7f:1c:4a:46:1c:30:bb:e1:cd:55:f0:d8:
                    07:e3:41:c6:ba:5b:d6:01:18:30:f5:a6:ac:0d:2a:
                    3d:13:87:47:0b:5e:34:68:5c:45:1a:42:88:ca:e5:
                    ef:04:2d:0d:c3:d7:2e:f3:4b:9b:ea:6b:e9:63:74:
                    51:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B7:99:DB:CE:90:57:DE:43:B1:99:5D:54:99:3A:9F:A8:00:65:3B
            X509v3 Authority Key Identifier:
                keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:ec:a1:4a:27:35:0f:8d:0d:47:10:88:48:53:e6:fb:c2:c4:
         83:cb:14:b6:13:ff:ed:88:85:e6:0a:7c:12:fe:d7:ba:d7:59:
         74:6c:3f:88:0c:f2:aa:09:fa:c3:dc:14:fb:db:c9:7a:36:33:
         02:19:04:a1:b3:f6:18:f8:64:df:98:f7:dc:e8:4a:8a:be:37:
         90:2f:72:7b:1b:6e:c9:f5:01:28:d4:22:dd:72:1a:76:86:66:
         fe:ba:3d:58:e5:aa:59:d4:0f:e6:0a:69:32:dd:ef:9a:03:8e:
         a6:a3:a2:b2:19:da:61:56:9c:e3:b6:93:1d:11:a7:77:94:e2:
         36:6d:86:59:d2:01:a8:ae:2d:55:f9:70:e7:14:8b:fb:65:14:
         46:c8:50:00:8f:59:df:a9:7a:6a:71:a2:f0:e5:2d:e5:9b:2e:
         ff:12:8a:87:de:78:42:ca:7f:3f:72:ce:25:d9:8d:77:b9:07:
         7d:fc:35:88:ab:e2:d8:dc:31:95:88:0e:9d:f6:92:0a:fa:63:
         23:b9:5b:a9:20:ef:12:9d:88:49:b7:b4:25:1b:18:78:50:bb:
         36:b0:b4:a5:51:63:dc:ab:5a:40:fb:19:d5:31:17:a8:a7:91:
         45:a0:cb:bd:d4:4c:30:a0:4c:0e:95:ee:e8:e9:58:0a:d5:11:
         84:4a:ec:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:40 2025 by rpki-client