Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File:                     vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier:          B5HJFztohkSWSjz1wFJNWueQZOrW0V/u4uyKfnHi8qQ=
Subject key identifier:   9E:30:2B:C0:DB:C5:37:CE:2A:46:E3:4E:67:9B:A0:BB:92:6B:DD:B1
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer:       /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial:       0196A164D630749DAD35F7BFE07BB79B9231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number:          102D
Signing time:             Mon 05 May 2025 17:01:02 +0000
Manifest this update:     Mon 05 May 2025 17:01:02 +0000
Manifest next update:     Tue 06 May 2025 17:01:02 +0000
Files and hashes:         1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
                          2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: n8SIreEGMNg30c1cJNh1RAMYqg+zZb4euQhkpIUn46c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:d6:30:74:9d:ad:35:f7:bf:e0:7b:b7:9b:92:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
        Validity
            Not Before: May  5 17:01:02 2025 GMT
            Not After : May  6 17:01:02 2025 GMT
        Subject: CN=9e302bc0dbc537ce2a46e34e679ba0bb926bddb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:b2:94:4f:79:99:13:d9:5d:2b:27:21:a0:
                    44:68:c7:c8:63:9b:eb:30:4f:54:47:f5:67:c9:88:
                    0f:59:11:c3:bd:75:ef:7e:bc:f0:07:e4:8e:1e:5f:
                    8d:c5:d9:68:e3:f4:7a:f4:86:cd:d6:4a:6f:97:c3:
                    5b:e6:b3:05:d0:f6:a2:31:f7:ad:89:63:e6:5c:47:
                    8a:5a:48:c4:59:d9:59:19:95:0e:54:44:75:41:31:
                    88:13:bf:96:51:3d:7f:59:4d:e7:b9:29:7d:84:0f:
                    62:36:fc:44:13:8e:18:15:f3:10:8f:a7:9d:90:27:
                    ab:d8:17:69:70:86:2e:dd:b6:16:fe:37:68:04:01:
                    3a:ae:94:e2:2d:95:eb:91:69:08:ef:e9:fa:18:77:
                    2e:f9:eb:99:3c:4e:2d:d8:6d:12:13:83:91:ac:52:
                    98:ab:8b:aa:62:b2:1e:52:3b:60:33:79:88:78:41:
                    7e:97:10:8d:15:50:e7:ed:da:d4:3f:d7:fe:9f:2b:
                    36:50:9c:05:22:5c:a0:8e:67:5d:85:fe:de:c0:e7:
                    c6:ba:9f:5f:04:0d:5a:2b:9c:73:15:01:f9:61:52:
                    ad:2a:bf:54:b8:36:92:0b:b7:cf:6b:d4:90:38:cf:
                    1a:82:cc:07:68:22:06:e5:87:50:e9:9a:34:cd:b9:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:2B:C0:DB:C5:37:CE:2A:46:E3:4E:67:9B:A0:BB:92:6B:DD:B1
            X509v3 Authority Key Identifier:
                keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3a:77:7a:f8:59:09:81:f1:04:31:43:7c:14:fc:83:dd:26:
         27:c7:c3:4a:4b:77:6a:c6:69:60:09:bc:02:82:0b:58:47:4d:
         a8:58:ab:7e:e5:aa:d3:a4:ce:ca:5a:40:e6:05:1a:90:ca:ec:
         b9:25:83:01:26:fd:7d:f0:28:4e:dd:4f:8f:4b:f1:d1:62:49:
         c6:29:18:bb:49:a3:86:da:eb:dc:8b:01:87:fa:c9:ec:42:01:
         bf:7b:a4:e7:37:1b:be:03:65:43:3f:95:e7:5d:d7:a3:a2:1c:
         0b:c2:3d:86:8e:a0:85:77:df:70:0c:c8:05:2f:7e:78:8e:1e:
         ce:78:53:61:0e:95:04:63:7f:86:d4:3c:99:2c:3c:37:e0:2c:
         f0:99:e4:0c:f0:28:0b:8b:98:42:b2:c1:0e:65:84:e9:4e:66:
         fe:35:66:8d:77:ab:46:76:7c:4d:96:5e:86:55:6a:dc:45:3a:
         51:11:03:db:c0:66:cc:63:50:35:6f:3e:7b:ec:27:1a:97:b3:
         87:33:70:fe:f1:a1:83:7e:04:76:e9:b8:54:d1:1a:37:17:3d:
         7a:d2:b9:14:e8:c5:d4:11:88:a0:f9:15:c9:32:f8:da:0a:3e:
         90:9e:88:fd:9d:d8:cf:5c:14:73:d7:af:dd:c4:8a:09:94:9f:
         61:10:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:22:05 2025 by rpki-client