Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
File:                     VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json)
Hash identifier:          3qkBDkGe+n7mkGq/YTODvMd8J7ep8hOZ9SJuQU0r+vU=
Subject key identifier:   58:F9:F5:80:12:5A:B1:60:E3:D0:9E:FD:A3:01:70:63:F2:16:02:6F
Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3
Certificate issuer:       /CN=5458dda6fad936da89520001aa282bfacc8b82e3
Certificate serial:       0197488CA7BA1B5DC9CF4CCDF35379477FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
Manifest number:          1063
Signing time:             Sat 07 Jun 2025 04:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:06 +0000
Files and hashes:         1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: 58ZAtIiU4Yxmx0/8jr4iVFxXofwFSrEjrtc0YRYUDuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:a7:ba:1b:5d:c9:cf:4c:cd:f3:53:79:47:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3
        Validity
            Not Before: Jun  7 04:01:06 2025 GMT
            Not After : Jun  8 04:01:06 2025 GMT
        Subject: CN=58f9f580125ab160e3d09efda3017063f216026f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:11:b2:60:3e:85:31:a9:35:2b:f9:bf:40:
                    e2:1a:4c:3e:05:9b:8a:42:0a:1d:9a:62:de:52:38:
                    15:87:82:cf:4f:9e:9d:01:b3:5c:fb:1b:08:eb:e4:
                    0d:dd:22:d8:0c:d8:02:ec:ec:1e:f6:e2:a9:02:92:
                    6a:25:d6:7e:f8:9e:3d:87:d9:e3:e7:d6:39:b5:f3:
                    f7:6a:f5:b0:9a:d5:ab:71:92:6a:65:9b:73:5f:ab:
                    91:ba:e1:a4:75:41:44:16:f2:9a:68:ed:92:3b:7b:
                    07:f3:18:ac:41:21:93:cd:a3:1d:ad:57:8e:f8:7f:
                    19:2b:8e:86:e3:c6:05:ff:1c:59:d4:2e:0c:dd:d1:
                    ce:2b:54:cf:cd:8c:c1:75:6c:6d:a1:ab:ec:39:da:
                    c6:66:da:12:45:c0:d9:a2:6d:a2:95:f5:5f:6c:d3:
                    40:1a:16:d8:3c:4e:e6:f2:ad:26:25:45:09:15:67:
                    7c:58:44:20:48:12:ac:07:82:24:e4:64:23:04:fa:
                    da:e3:53:1e:57:f8:09:27:0c:d3:f4:93:7e:99:52:
                    5b:99:e1:cf:22:9e:f1:4f:5a:b2:35:94:c1:80:c0:
                    bb:55:47:67:44:be:6e:83:b2:9a:ed:51:f4:e4:71:
                    4d:73:1e:e3:bd:7c:63:5a:84:1f:5c:ff:69:b8:1b:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F9:F5:80:12:5A:B1:60:E3:D0:9E:FD:A3:01:70:63:F2:16:02:6F
            X509v3 Authority Key Identifier:
                keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c7:60:39:03:d0:6f:5b:52:5d:1e:68:46:a2:d2:9b:64:95:
         a2:94:f1:7e:76:b2:88:e3:9a:4c:42:65:7f:58:99:54:11:28:
         a1:74:e2:87:ff:a9:26:19:70:b5:6d:b3:05:d8:01:01:f9:af:
         aa:26:a1:53:e4:5c:54:a7:1c:9c:a5:35:db:12:a2:2f:0c:ca:
         80:a0:aa:11:2d:7b:5f:2b:02:75:67:68:69:82:26:6f:7c:87:
         82:c6:7c:bb:f7:72:e6:d8:32:a5:d5:be:38:f7:94:6d:61:82:
         10:4c:ab:e1:bf:68:26:80:82:e3:1a:9a:d1:8d:82:63:97:50:
         2f:1d:10:7a:30:6e:b0:6c:c9:0d:61:95:84:a2:d9:38:c1:fb:
         d8:07:01:db:97:33:b1:07:54:b9:53:46:8b:1f:eb:b9:e4:ff:
         f4:d0:f6:63:89:2d:a6:e2:8a:9a:3b:22:0b:84:0b:3e:a5:94:
         33:90:06:bd:ac:16:d5:29:24:8e:1d:87:8b:95:83:9f:8d:e8:
         4b:fa:54:db:22:c2:62:9a:7a:9e:e7:52:93:58:8f:77:f7:f6:
         73:1e:ed:48:ff:2e:2e:8f:c1:d2:ed:1e:65:94:e5:6c:26:ee:
         92:20:58:a2:6e:8a:2a:f4:7c:33:26:eb:65:61:f9:5d:11:80:
         de:3b:a7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:23 2025 by rpki-client