Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          noGCHFq8a0/uMnrwgrIsKytRFtbHgWVM8sm9SzrCuHE=
Subject key identifier:   E6:6D:E5:81:CC:92:81:46:C1:69:20:9E:BE:52:CA:32:01:B7:78:BB
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       01974779B5FEE14EBB5DA12052D5A62E90BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          0341
Signing time:             Fri 06 Jun 2025 23:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:48 +0000
Files and hashes:         1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: rJTjiZaH2iW04BL7SksQarD8AapRy4hClNw5GMJJXgo=)
                          2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
                          3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:b5:fe:e1:4e:bb:5d:a1:20:52:d5:a6:2e:90:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Jun  6 23:00:48 2025 GMT
            Not After : Jun  7 23:00:48 2025 GMT
        Subject: CN=e66de581cc928146c169209ebe52ca3201b778bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:c5:33:ef:5b:fa:d1:51:56:7a:74:96:5e:
                    d2:e5:97:6e:af:ae:4d:91:fc:a4:61:b6:2d:0f:31:
                    fc:03:27:7d:3a:78:76:5c:0f:58:80:c0:71:d6:32:
                    4c:54:17:4c:e0:5e:70:de:8c:5c:0e:61:80:ea:0e:
                    ac:2f:f0:c6:4d:ac:0c:91:35:b4:c2:e4:3e:15:df:
                    81:72:a9:c2:4e:50:22:66:b3:cb:dc:55:5f:3f:9d:
                    3d:08:8f:38:62:a0:cf:02:9f:eb:50:50:3f:82:f9:
                    28:57:74:9a:7b:f0:29:79:6b:f6:91:b4:0f:36:21:
                    a8:cc:a9:80:50:9a:94:44:0f:78:68:be:2e:1f:73:
                    c5:3d:fa:05:58:87:68:0d:80:10:57:98:11:ee:24:
                    60:a9:77:8a:2b:39:e9:a2:09:56:0c:7f:7a:3d:87:
                    17:d4:17:a4:23:6a:21:e5:9d:a7:2f:fc:77:d1:0e:
                    fc:0e:7f:1a:33:2c:4c:f4:ce:5c:91:d8:d3:c0:9e:
                    45:44:34:a0:f6:17:8e:5f:f2:15:b1:fb:44:29:ed:
                    8a:58:f8:d8:22:36:a7:87:79:4f:88:c3:a3:59:2e:
                    7e:df:e4:b4:36:85:76:e6:12:70:04:a1:92:db:be:
                    a8:66:3d:60:a0:01:1c:84:f1:b1:ae:69:30:6d:05:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6D:E5:81:CC:92:81:46:C1:69:20:9E:BE:52:CA:32:01:B7:78:BB
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:08:7a:cb:71:1e:25:41:e8:8f:76:54:99:40:f5:6d:57:7d:
         a9:b5:66:f2:a9:f6:27:90:6e:6b:88:b2:eb:c6:11:85:e0:07:
         2b:a4:43:24:9e:0d:d6:3a:df:35:bb:08:c5:f1:93:1c:d3:ef:
         97:10:28:c5:28:a3:23:28:5b:1c:8f:e5:1b:ab:78:52:81:30:
         9f:84:f9:0e:40:ae:ef:f2:6a:35:b8:b6:47:8c:b0:3b:89:83:
         91:ce:fc:03:f0:84:13:49:c6:d3:23:b0:04:3a:45:a0:c5:33:
         23:2f:ea:f0:58:ba:31:83:fc:d0:6e:f5:36:b4:1a:65:46:d1:
         df:60:d4:0d:60:01:39:1b:62:a1:1e:20:d3:57:ff:1e:af:f3:
         ca:ec:4c:11:da:6c:4b:85:f6:be:00:db:b3:87:9b:de:88:48:
         6d:e6:e7:a1:0f:9b:7a:59:cd:21:9f:e5:6c:92:93:2e:cf:fe:
         d5:25:9a:7d:d7:82:83:c6:85:96:b9:7a:7f:b2:cc:32:e4:a4:
         0f:4c:99:07:ce:ee:c3:97:41:5c:3a:e6:04:ed:bc:91:47:fa:
         58:16:c5:f7:fa:6a:5b:be:6c:c8:c6:15:91:99:3d:f5:60:49:
         1a:92:1c:ae:ba:10:98:38:88:f0:82:25:d3:7f:02:00:0b:cb:
         a4:b3:a2:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHebX+4U67XaEgUtWmLpC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx
MTZmYjcwHhcNMjUwNjA2MjMwMDQ4WhcNMjUwNjA3MjMwMDQ4WjAzMTEwLwYDVQQD
EyhlNjZkZTU4MWNjOTI4MTQ2YzE2OTIwOWViZTUyY2EzMjAxYjc3OGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWzFM+9b+tFRVnp0ll7S5Zdur65N
kfykYbYtDzH8Ayd9Onh2XA9YgMBx1jJMVBdM4F5w3oxcDmGA6g6sL/DGTawMkTW0
wuQ+Fd+BcqnCTlAiZrPL3FVfP509CI84YqDPAp/rUFA/gvkoV3Sae/ApeWv2kbQP
NiGozKmAUJqURA94aL4uH3PFPfoFWIdoDYAQV5gR7iRgqXeKKznpoglWDH96PYcX
1BekI2oh5Z2nL/x30Q78Dn8aMyxM9M5ckdjTwJ5FRDSg9heOX/IVsftEKe2KWPjY
Ijanh3lPiMOjWS5+3+S0NoV25hJwBKGS276oZj1goAEchPGxrmkwbQVHKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZt5YHMkoFGwWkgnr5SyjIBt3i7MB8GA1UdIwQY
MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt
MmYzNTJkNjRhYWM4LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4
LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwh6y3Ee
JUHoj3ZUmUD1bVd9qbVm8qn2J5Bua4iy68YRheAHK6RDJJ4N1jrfNbsIxfGTHNPv
lxAoxSijIyhbHI/lG6t4UoEwn4T5DkCu7/JqNbi2R4ywO4mDkc78A/CEE0nG0yOw
BDpFoMUzIy/q8Fi6MYP80G71NrQaZUbR32DUDWABORtioR4g01f/Hq/zyuxMEdps
S4X2vgDbs4eb3ohIbebnoQ+belnNIZ/lbJKTLs/+1SWafdeCg8aFlrl6f7LMMuSk
D0yZB87uw5dBXDrmBO28kUf6WBbF9/pqW75syMYVkZk99WBJGpIcrroQmDiI8IIl
038CAAvLpLOidQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:01 2025 by rpki-client