Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
File:                     Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft (raw, json)
Hash identifier:          ZdP3/0wJJU4oZTsFTSNo0wRJRdI0rHn/cpK/cp0V4YI=
Subject key identifier:   01:E0:CC:6B:D8:A0:F3:B2:27:14:5D:F8:9A:6E:FF:06:8F:D6:71:9B
Authority key identifier: 55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F
Certificate issuer:       /CN=55bd49591c820eaec39bcb41c84d1708e130447f
Certificate serial:       01969D1A276713A06F2CC39DAF5E9158E88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
Manifest number:          0577
Signing time:             Sun 04 May 2025 21:00:58 +0000
Manifest this update:     Sun 04 May 2025 21:00:58 +0000
Manifest next update:     Mon 05 May 2025 21:00:58 +0000
Files and hashes:         1: Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl (hash: ozvPMhla37qJglsv4mMaqF+Er2sfg4fmC/uGEMdaLXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:1a:27:67:13:a0:6f:2c:c3:9d:af:5e:91:58:e8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bd49591c820eaec39bcb41c84d1708e130447f
        Validity
            Not Before: May  4 21:00:58 2025 GMT
            Not After : May  5 21:00:58 2025 GMT
        Subject: CN=01e0cc6bd8a0f3b227145df89a6eff068fd6719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:f9:68:ad:db:17:f1:5c:0a:22:32:1b:bf:
                    ad:e6:97:86:60:15:fb:50:14:df:37:3c:05:cc:4c:
                    12:4a:db:3f:06:87:1a:d9:ea:65:8a:52:9c:09:3f:
                    5f:82:51:b4:27:02:1b:fb:be:b6:8a:88:ab:45:8a:
                    d0:ca:00:52:50:40:65:88:19:63:e8:30:51:13:b6:
                    da:00:d3:c6:d7:94:5e:55:c6:57:1b:ce:78:5a:37:
                    06:a5:2b:8c:64:42:6b:2d:62:8f:36:79:28:46:f5:
                    9b:1a:c0:02:6d:5b:b6:30:7a:40:93:03:e5:c2:fd:
                    dc:6b:76:c4:ff:0e:cc:c6:10:c7:e9:68:c1:0b:eb:
                    5b:0d:8f:d1:1d:c9:c9:b4:1a:b3:f1:c0:da:b2:8f:
                    ae:2c:17:95:e8:20:d2:ef:9b:7d:ce:e2:73:78:c1:
                    a3:d8:46:c3:9d:0d:0e:91:44:cd:ed:a3:dd:11:de:
                    5c:5a:cd:a7:ba:e4:36:87:8e:af:10:7c:9e:93:97:
                    ec:5e:92:55:d0:b9:96:ad:dd:6f:6a:7e:ea:b5:bc:
                    fc:ea:48:07:2f:90:99:c0:5b:12:4a:01:dd:65:ae:
                    24:68:06:f7:b5:bb:2b:13:c0:79:7a:95:83:f8:ce:
                    ec:44:d3:0f:c4:f1:9a:2f:3e:e2:55:10:cb:4c:58:
                    5a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E0:CC:6B:D8:A0:F3:B2:27:14:5D:F8:9A:6E:FF:06:8F:D6:71:9B
            X509v3 Authority Key Identifier:
                keyid:55:BD:49:59:1C:82:0E:AE:C3:9B:CB:41:C8:4D:17:08:E1:30:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f8782d-fd2c-4df3-a0e6-3f27a1966577/1/Vb1JWRyCDq7Dm8tByE0XCOEwRH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:17:50:d8:18:b7:f4:f1:5a:a8:46:10:1c:f4:11:06:8d:14:
         6d:16:91:80:d0:42:e1:3c:fa:f0:7d:35:29:b3:01:49:98:05:
         cc:e1:4e:2f:f7:6e:e2:a7:a6:3f:51:0a:bb:3a:3a:ee:f9:2f:
         56:6a:ed:c4:33:43:59:6f:cd:77:0c:0f:db:99:d7:2b:70:da:
         59:4c:8a:2c:54:cc:7f:22:60:e0:5f:7a:4f:ff:f6:4d:f9:49:
         e5:ab:5d:65:f8:cc:b0:e1:bf:b6:26:36:7f:56:d6:73:b3:3d:
         8e:db:a3:73:34:be:7a:5c:79:b9:60:75:13:63:65:c3:a7:45:
         71:04:38:11:91:42:ae:4e:ba:fe:1b:34:e6:10:f1:3b:14:be:
         48:23:83:39:aa:a2:1a:91:cc:94:88:68:14:12:29:b3:9d:37:
         f0:14:94:54:e6:6e:38:78:cd:ca:3a:dc:c9:7b:40:d6:50:a1:
         30:cd:47:79:aa:a6:20:1b:33:e3:cb:68:15:2a:3d:95:f8:a7:
         26:70:24:eb:54:ca:63:38:00:d6:bc:12:49:4c:30:9c:a2:11:
         08:ee:62:3e:02:e9:b1:6c:e0:fe:48:5c:e9:96:c1:c8:bb:ec:
         85:59:34:2f:65:90:7b:9c:09:10:56:f4:b4:5e:36:d3:9c:d4:
         22:ca:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:05 2025 by rpki-client