Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File:                     vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier:          nvVoUgDwWRpYkFgAoiPsziQxHLyRlH4tr1BcPJjLVLc=
Subject key identifier:   27:6D:B4:B5:27:D1:88:27:FA:17:E4:F9:81:8A:00:F3:45:6F:5F:34
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer:       /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial:       0196AEE9650B13BDEE92D0F34B890410EF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number:          152C
Signing time:             Thu 08 May 2025 08:00:53 +0000
Manifest this update:     Thu 08 May 2025 08:00:53 +0000
Manifest next update:     Fri 09 May 2025 08:00:53 +0000
Files and hashes:         1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: pEEgTH+6r8qnnYFnZnFOJ4MwvtoVAPbd1NPLUBrthYw=)
                          2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:e9:65:0b:13:bd:ee:92:d0:f3:4b:89:04:10:ef:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
        Validity
            Not Before: May  8 08:00:53 2025 GMT
            Not After : May  9 08:00:53 2025 GMT
        Subject: CN=276db4b527d18827fa17e4f9818a00f3456f5f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:3c:18:5f:51:07:23:69:51:f4:7b:3e:21:
                    26:4b:54:37:2e:32:c0:f2:7f:dc:ce:e8:43:f2:46:
                    5b:fc:d7:f7:92:9d:a7:99:91:f3:d3:6c:5b:07:4b:
                    e1:c5:f4:4d:f2:36:dd:8a:4f:ef:ff:6c:7f:d4:41:
                    c3:02:9f:88:10:c9:84:0d:2c:c5:e4:78:a0:5a:08:
                    99:ae:c8:c4:a0:33:a1:0c:68:d6:d2:f5:8c:11:be:
                    d3:d9:19:b0:d7:87:93:62:03:ed:40:6f:a3:ad:ca:
                    61:c4:73:77:2a:0b:74:18:4f:31:a3:45:b0:09:e9:
                    e3:a3:24:5e:53:d2:5a:56:79:71:d1:30:a5:9b:6c:
                    1a:d9:7e:25:0a:0c:29:0d:fa:b2:9f:7f:40:84:11:
                    35:d5:d4:10:db:2e:a3:b3:21:97:27:1b:5e:45:b1:
                    05:c3:60:84:42:c1:9e:4e:62:da:ff:36:07:92:9f:
                    32:3f:06:0e:ec:d7:c9:3c:12:39:f4:91:6d:b5:28:
                    67:83:6d:fd:8c:fe:13:d8:96:13:4b:20:f0:e5:0a:
                    d7:74:c7:3d:e1:c0:f1:f9:d2:85:d6:14:06:5a:ae:
                    76:7b:61:d7:56:c6:ba:b1:3f:88:5b:01:c9:99:a4:
                    4f:55:ee:fd:b6:98:4c:35:1a:92:3f:dd:a5:67:d9:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:B4:B5:27:D1:88:27:FA:17:E4:F9:81:8A:00:F3:45:6F:5F:34
            X509v3 Authority Key Identifier:
                keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c0:e1:72:03:83:40:8e:44:fa:62:8e:2a:b8:ed:79:81:58:
         15:b9:8b:a4:8e:f8:80:c9:1c:ab:2e:48:3d:55:3d:04:1c:81:
         61:e4:a7:d3:cc:0d:41:d1:94:4e:d9:f1:c7:cc:33:a5:4a:9c:
         22:5e:4c:8d:0e:31:76:58:de:22:59:87:1e:19:a0:38:c8:23:
         7f:80:79:33:69:6d:c8:f2:c8:72:1b:4c:d9:9b:d2:ee:9c:2e:
         4d:4d:89:75:4d:a7:67:90:54:e7:b9:12:2b:27:3e:8a:03:2a:
         2c:4f:c8:de:bf:9f:4f:c4:59:f3:fd:9b:ce:11:4d:3f:0d:10:
         b9:dd:f7:b4:6f:cd:4d:44:5b:8e:b6:5f:c2:71:a2:32:8d:e8:
         29:69:7f:69:06:86:3c:47:13:35:29:ba:3d:3d:f6:e5:37:b2:
         4a:9e:df:91:41:fd:2c:9d:95:ea:b3:ac:3c:d4:f4:f7:22:90:
         61:7e:bb:22:3a:4d:9f:37:ba:13:ac:a8:1a:65:79:09:e4:f8:
         ae:71:d9:fc:4c:0f:61:2f:a7:4c:92:e8:c2:9d:25:d7:b1:b3:
         b9:38:fb:7e:47:5f:3b:20:00:9a:05:dd:61:ad:ad:da:37:d8:
         21:a8:af:bc:ad:72:68:5e:15:d3:38:d6:65:79:5e:de:f5:4c:
         a8:79:c4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:03:24 2025 by rpki-client