Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          yB8xiwtnsF24Yp4+dP360UAWTaOZe44Z24D+/dRSlaA=
Subject key identifier:   8F:F3:D2:52:25:CA:1F:A4:CC:BC:81:70:DD:8E:50:48:E8:07:24:7E
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       019748FAA8EB5BC73AB63CF561B2A1630357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          69
Signing time:             Sat 07 Jun 2025 06:01:16 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:16 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:16 +0000
Files and hashes:         1: Pw15r0tJiPvDyuMOBQn_URPGo5I.roa (hash: k7iEyCH3l0LCjD2Op61Rjmw/pHSf07/MBQiciVefF9Q=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: TBqYuMyxmhwhoysSYX4wVTkfkw4+UFGyirByfH/EJzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:a8:eb:5b:c7:3a:b6:3c:f5:61:b2:a1:63:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Jun  7 06:01:16 2025 GMT
            Not After : Jun  8 06:01:16 2025 GMT
        Subject: CN=8ff3d25225ca1fa4ccbc8170dd8e5048e807247e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:2c:bb:6c:c9:a4:1c:80:32:79:f0:20:92:
                    bf:8b:98:e6:a5:e9:2e:d0:0c:e8:b9:06:f2:17:c3:
                    3e:bb:d8:5f:fa:b6:cc:76:12:fb:6f:7b:9a:c4:ee:
                    62:c5:5e:c4:cc:09:99:7b:e4:8c:f1:f3:0d:21:d5:
                    a0:25:52:fe:0c:05:cc:6e:21:a8:e3:e5:54:31:01:
                    89:c1:9b:b6:18:72:ff:f7:9e:ef:35:34:d4:48:84:
                    6e:33:3d:ec:bc:7c:72:95:71:eb:73:ff:99:ba:16:
                    66:13:a2:de:73:2e:1e:98:e7:c4:99:df:3b:74:f1:
                    63:cd:7a:aa:82:84:c4:ec:75:af:6a:89:09:c8:ea:
                    06:b4:78:07:e8:52:6e:0f:98:4c:87:84:45:01:82:
                    8b:a8:94:50:75:bc:c3:dd:69:1e:75:a1:24:e6:8f:
                    38:99:4f:99:d8:a9:d1:cb:aa:45:88:62:52:ad:50:
                    7c:13:4a:d3:28:64:70:b1:5a:38:92:9a:2c:0c:be:
                    dd:9c:7f:99:90:01:d0:4f:60:8c:cf:69:2d:1a:3e:
                    1c:3e:ab:23:00:cc:73:d5:13:13:dd:72:e0:08:ae:
                    89:64:1b:59:4e:cb:35:c6:78:6c:40:07:2d:7f:13:
                    bf:10:f4:a2:37:3c:39:87:5b:66:16:2e:0a:80:c0:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F3:D2:52:25:CA:1F:A4:CC:BC:81:70:DD:8E:50:48:E8:07:24:7E
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cf:c6:70:b3:38:e2:9e:a8:53:25:85:fd:f8:67:6a:c7:ad:
         35:9e:70:c2:29:34:ac:0c:b5:ec:8f:3a:56:37:64:b4:4c:de:
         52:f8:ae:2f:ff:b7:48:8b:99:3f:42:49:3f:5d:83:20:7c:5e:
         2f:43:11:60:be:aa:f2:cf:85:2f:61:9b:71:e8:52:cc:ec:4d:
         39:c2:42:8f:6d:c9:60:ba:7c:11:eb:c0:e3:62:47:a1:cc:ef:
         8e:2b:24:32:dc:2f:e1:da:20:7d:14:d4:54:36:95:c2:bc:74:
         a6:8a:7e:00:92:40:16:0b:02:c4:6f:be:e4:09:7c:6c:3d:4c:
         8a:64:19:b8:7c:c4:df:88:4e:ed:97:4b:17:02:74:72:c0:56:
         f0:b6:97:a8:6f:e2:60:e8:64:39:d8:35:c9:35:5b:9f:df:fd:
         1e:46:77:c2:b7:32:58:8c:70:05:34:c5:65:5c:3f:b8:f9:44:
         e5:27:49:7f:ff:e8:26:06:38:ff:1e:aa:26:0f:6b:88:a4:59:
         67:1c:8c:94:74:64:d4:a9:d4:d4:9b:fb:16:3d:0d:12:b6:7a:
         c8:65:2d:e7:53:2b:18:dd:79:c4:85:63:98:94:5a:f9:d8:f5:
         b2:0b:da:03:4d:0e:3a:ea:a9:67:49:83:92:be:25:a9:93:cc:
         11:6e:08:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:11:14 2025 by rpki-client