Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
File:                     r1vEnV8BojWvkonPSSav_vevkrA.mft (raw, json)
Hash identifier:          UjgbPWTeEdIp59dd2+1h61wJnd+/MQJrzTu3mavpVio=
Subject key identifier:   EC:6F:B6:0A:FB:96:80:33:20:54:EF:A4:6C:68:19:55:BE:2A:ED:FF
Authority key identifier: AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0
Certificate issuer:       /CN=af5bc49d5f01a235af9289cf4926affef7af92b0
Certificate serial:       0196A2AE1AA4B26D7DB09CE0D5D2C6D810E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 23:00:41 +0000
Manifest this update:     Mon 05 May 2025 23:00:41 +0000
Manifest next update:     Tue 06 May 2025 23:00:41 +0000
Files and hashes:         1: 6d-AyMF7ZaaM5Mjt7QfO5cW_2AY.roa (hash: ZUwXdaD1P85dbAvt2mEWIMU5POb+euNbtRK/RK4dLgk=)
                          2: r1vEnV8BojWvkonPSSav_vevkrA.crl (hash: qHJFblwmlzDNkwHtBmr4aryfSIiaspHclgGlzYaTLNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:ae:1a:a4:b2:6d:7d:b0:9c:e0:d5:d2:c6:d8:10:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5bc49d5f01a235af9289cf4926affef7af92b0
        Validity
            Not Before: May  5 23:00:41 2025 GMT
            Not After : May  6 23:00:41 2025 GMT
        Subject: CN=ec6fb60afb9680332054efa46c681955be2aedff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ec:08:64:5a:4f:80:99:41:ca:0b:f1:26:03:
                    e8:bd:dc:00:66:06:15:19:21:99:95:14:6c:71:e8:
                    d7:89:0f:bb:14:76:70:d2:0d:f7:b1:d2:e7:3f:1c:
                    25:e3:27:72:37:94:9b:a3:1d:0b:33:c3:79:01:45:
                    22:36:c7:fd:8a:59:48:20:e7:23:65:37:72:86:eb:
                    37:ac:bc:56:f2:fc:00:0e:6b:15:f0:f4:9c:46:6b:
                    ab:6e:bf:bd:92:56:9e:26:33:ee:57:43:40:e0:5a:
                    2a:72:2d:ad:66:0f:c3:f7:da:dd:b4:22:fb:52:cc:
                    a1:a2:06:ea:99:24:40:7b:62:05:2a:e1:e4:2b:75:
                    e3:5f:0a:cc:cc:94:05:4c:b1:f4:ab:ab:1e:a2:f1:
                    bb:94:fe:20:74:ec:fe:22:4b:d4:5c:46:95:6a:36:
                    a2:b0:ab:de:ba:ae:07:1f:70:0e:23:a7:3e:55:8d:
                    ac:e3:b9:5e:53:2e:ed:46:3f:2c:a8:e0:b7:7d:37:
                    63:17:25:f5:f1:7d:b3:25:65:e2:84:2f:26:0f:d1:
                    ca:33:16:98:ee:62:23:aa:c6:b2:27:d9:4b:84:d6:
                    9b:01:fc:72:d3:e6:44:7e:6d:ec:6c:71:c7:22:02:
                    f4:4b:db:91:96:6a:9f:b8:30:cc:a3:15:a8:a5:a5:
                    10:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:6F:B6:0A:FB:96:80:33:20:54:EF:A4:6C:68:19:55:BE:2A:ED:FF
            X509v3 Authority Key Identifier:
                keyid:AF:5B:C4:9D:5F:01:A2:35:AF:92:89:CF:49:26:AF:FE:F7:AF:92:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1vEnV8BojWvkonPSSav_vevkrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/r1vEnV8BojWvkonPSSav_vevkrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f8:e4:c7:14:27:fb:19:56:37:ad:b4:fa:9a:8e:dc:a4:19:
         6b:b8:57:ba:7e:28:f8:4d:45:8a:5c:ed:f4:e5:a8:e2:81:4c:
         95:c0:0f:2f:3b:ee:98:1d:4a:ef:e1:87:a8:d7:1d:99:43:36:
         43:90:94:d3:e2:46:9f:64:23:0c:a6:6c:5e:9f:af:e4:b1:3d:
         e3:15:41:00:b6:09:f7:95:5f:71:88:3f:de:c3:49:de:33:16:
         f0:79:73:80:19:e4:6a:71:df:8d:63:73:ee:61:ab:1a:d8:8c:
         26:07:35:bb:a3:c0:31:d6:43:a6:74:0e:a2:e5:b8:ff:7d:86:
         e1:6e:8c:4a:4a:c0:86:5f:af:a4:80:e5:ed:06:66:0c:27:50:
         9e:ea:fb:67:ec:85:e7:1b:de:05:82:1d:84:8f:90:e1:ea:2e:
         43:46:65:06:d8:95:8a:3b:ba:da:74:8d:1c:55:9c:84:d8:ec:
         13:5f:6d:2b:6e:4f:ac:ee:6a:38:08:af:29:e2:17:86:b8:79:
         6c:0e:e2:ca:8b:6e:c3:bc:a9:53:00:b0:2c:83:c0:73:53:b5:
         86:db:b3:b2:b0:a6:15:7d:c3:81:44:28:87:c0:a7:a0:c3:61:
         46:9b:80:f9:7a:5f:4c:b6:a9:d5:6c:7c:55:22:68:fd:f4:7a:
         3b:f4:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:41:03 2025 by rpki-client