Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
File:                     VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft (raw, json)
Hash identifier:          iplwhW226lG2UEZzYSd+eb0/jI6iemHsbwgQUh6oeqg=
Subject key identifier:   DF:72:B3:20:12:5F:E6:CA:7F:D4:39:B1:5D:B1:1F:A1:B6:F2:E9:5F
Authority key identifier: 56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C
Certificate issuer:       /CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
Certificate serial:       01975F13BB41E3DBBD0CC9E5E8AEB1618053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
Manifest number:          14C4
Signing time:             Wed 11 Jun 2025 13:00:17 +0000
Manifest this update:     Wed 11 Jun 2025 13:00:17 +0000
Manifest next update:     Thu 12 Jun 2025 13:00:17 +0000
Files and hashes:         1: VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl (hash: p8caU07KyaWqSvMznHiQu829/jvnXGXytFjEDPgZ6D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 13:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:13:bb:41:e3:db:bd:0c:c9:e5:e8:ae:b1:61:80:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
        Validity
            Not Before: Jun 11 13:00:17 2025 GMT
            Not After : Jun 12 13:00:17 2025 GMT
        Subject: CN=df72b320125fe6ca7fd439b15db11fa1b6f2e95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:6c:92:b0:6b:1a:15:fc:c1:e0:48:8a:83:
                    7a:63:87:a8:a3:d3:7e:b4:39:b0:99:fc:38:ce:76:
                    b5:4e:40:d8:91:30:a8:4d:26:52:2e:90:b6:d4:10:
                    dd:33:2d:8e:79:66:92:ff:c9:ec:f9:03:3f:16:c1:
                    0c:f1:e6:cb:58:34:86:8d:f4:85:ca:80:80:57:f0:
                    e2:e0:16:6b:99:e4:44:66:9b:b5:b3:19:11:9e:f4:
                    ca:16:73:06:5d:3e:46:24:a6:ad:8f:cd:3c:4b:e8:
                    7f:b4:c3:69:5f:20:c5:c8:c4:d7:e3:8f:d2:29:75:
                    a1:a5:0d:e1:0b:ba:3c:77:b5:77:f5:2d:d3:2a:ac:
                    8e:11:e2:d1:9c:63:0c:7c:19:f0:be:cb:ce:06:43:
                    6e:05:5b:ee:9f:5b:3e:07:fe:f5:05:75:9a:f0:da:
                    90:8e:ec:de:64:f6:24:38:88:d4:76:e8:26:57:57:
                    e7:d3:91:70:95:d1:67:46:e4:49:53:e1:d2:a4:9f:
                    2a:eb:99:1f:40:a4:d4:6f:e0:bd:7f:a6:de:ed:45:
                    32:30:04:00:c0:f1:68:69:2c:33:f8:9b:15:cd:44:
                    2c:37:f9:a9:2f:4d:3d:93:27:70:94:a7:e7:9c:30:
                    70:80:e9:84:de:90:1f:45:37:64:90:e0:68:6b:9b:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:72:B3:20:12:5F:E6:CA:7F:D4:39:B1:5D:B1:1F:A1:B6:F2:E9:5F
            X509v3 Authority Key Identifier:
                keyid:56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:7b:30:38:dd:dd:5f:c4:6f:49:4a:d9:5f:ba:f7:25:06:
         43:cf:73:4f:99:68:ee:60:b3:d1:2c:9d:82:08:25:6f:36:63:
         c9:24:c5:12:51:1e:9e:14:22:e3:ac:f9:86:25:f8:38:e9:03:
         45:89:b4:59:dc:1c:6a:a9:8a:20:40:9c:69:ce:c3:7d:ae:5d:
         d9:3d:8d:ac:0c:ce:53:0e:ed:11:cf:15:1f:70:36:04:2e:8a:
         e2:8f:24:cf:e4:a7:39:15:56:b6:45:bb:d7:26:3b:20:d1:68:
         01:89:b9:f6:76:38:4f:91:d7:e5:a4:a7:45:f0:49:62:f8:ca:
         aa:82:f1:7a:1b:5b:81:45:42:25:2c:d8:42:42:49:e9:2b:63:
         85:e9:28:82:86:70:b7:2a:57:d0:36:fe:65:eb:2a:41:7b:a0:
         e0:c1:33:12:88:76:a4:56:68:9d:43:d4:28:40:40:7b:d7:cd:
         99:f9:ff:cd:53:e3:85:e3:0a:1a:94:b7:8f:05:dc:00:0d:1a:
         56:85:f6:5c:c1:3d:d2:a9:eb:99:9f:8f:88:8a:92:31:aa:33:
         e3:1a:bc:8f:6e:76:f2:0c:0c:73:99:d3:a6:98:e1:ac:10:a6:
         70:a2:db:9c:5d:bc:b4:9a:05:66:bd:ac:37:10:be:1a:a1:27:
         2a:66:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:03:38 2025 by rpki-client