Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
File:                     V-L2mlyy1YBNIamwRboxSusaqh8.mft (raw, json)
Hash identifier:          qcjGdbwVawOuxDisl5Q9yD+nk8t5NgSg6iAvuAO2OfU=
Subject key identifier:   32:28:90:EE:BA:C8:28:5F:BF:26:23:35:7C:88:F8:B6:9E:93:C5:88
Authority key identifier: 57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F
Certificate issuer:       /CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
Certificate serial:       0197470BD281DC14A65E65077C7C4A4B7B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 21:00:46 +0000
Manifest this update:     Fri 06 Jun 2025 21:00:46 +0000
Manifest next update:     Sat 07 Jun 2025 21:00:46 +0000
Files and hashes:         1: V-L2mlyy1YBNIamwRboxSusaqh8.crl (hash: 4owtxbTilHGjFvnItDNrj51sFJWt2JBYSouiWINl1dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0b:d2:81:dc:14:a6:5e:65:07:7c:7c:4a:4b:7b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2f69a5cb2d5804d21a9b045ba314aeb1aaa1f
        Validity
            Not Before: Jun  6 21:00:46 2025 GMT
            Not After : Jun  7 21:00:46 2025 GMT
        Subject: CN=322890eebac8285fbf2623357c88f8b69e93c588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:9a:e3:f6:cf:05:41:ff:1b:50:fe:48:b3:
                    9e:73:c1:1b:1f:ff:d0:26:1f:6c:f6:8e:27:f6:df:
                    89:4b:7f:39:03:8b:05:30:21:c7:2f:e8:b7:d9:f9:
                    81:09:d5:da:ac:8d:34:1a:64:de:47:0f:70:de:b0:
                    75:8f:4a:d6:3d:c6:1c:17:91:df:79:6b:5e:e1:81:
                    fb:d2:16:42:24:87:2b:a4:07:71:f4:e3:ce:82:b2:
                    96:97:20:10:93:8c:04:8a:90:59:2d:cd:24:90:c7:
                    e7:67:25:97:cf:11:9f:bd:02:f5:6f:dd:c1:65:fc:
                    1d:11:69:06:45:3a:3f:d9:65:e9:00:8e:ae:f9:e3:
                    33:3e:d3:52:7b:14:eb:50:df:d0:bc:8b:ae:18:2d:
                    f3:7c:63:f3:4c:c6:1b:e0:ec:91:20:26:48:82:e1:
                    70:b6:5e:c8:b1:44:6a:bb:1c:90:a3:8c:19:a7:90:
                    78:cc:08:86:c1:49:22:1b:e5:a3:af:d7:ec:8a:b4:
                    7d:b8:a7:08:2e:43:1a:26:8c:06:c3:4c:29:37:7d:
                    6d:96:bf:e0:15:9d:15:82:29:55:46:45:7b:78:80:
                    20:80:96:b2:78:29:3f:76:f0:99:58:f3:96:04:64:
                    6b:3c:c5:5e:28:2d:a6:56:8d:a5:6f:23:fd:80:4a:
                    f1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:28:90:EE:BA:C8:28:5F:BF:26:23:35:7C:88:F8:B6:9E:93:C5:88
            X509v3 Authority Key Identifier:
                keyid:57:E2:F6:9A:5C:B2:D5:80:4D:21:A9:B0:45:BA:31:4A:EB:1A:AA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-L2mlyy1YBNIamwRboxSusaqh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/539771-046a-4369-bd26-66e0009422fb/1/V-L2mlyy1YBNIamwRboxSusaqh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:b5:3b:0d:6b:15:c4:d5:af:86:8e:a5:32:13:6c:f6:a3:
         5c:11:b2:26:16:c5:1e:25:bb:b7:ab:fd:b4:2f:53:9c:1b:bd:
         8b:6f:f8:cb:04:30:65:1b:6c:c7:64:bd:3d:5f:b1:d6:7b:3d:
         97:38:8b:11:b6:d7:79:f3:f8:97:fb:08:65:8f:65:c5:37:1e:
         80:d0:4b:b0:40:2b:54:e1:2c:0d:76:7d:0e:cb:98:55:3d:77:
         6c:da:91:57:42:7b:8b:73:bc:27:5d:48:8b:18:c7:06:2f:e7:
         a4:4e:30:66:75:7a:5f:3f:ec:0a:d6:42:c1:6f:45:b0:dd:07:
         65:d2:8d:ef:88:cf:a7:88:18:65:fd:b2:b6:41:6d:21:61:01:
         dd:ed:a0:56:31:08:b3:02:31:86:58:7e:93:0c:d9:6f:d7:ea:
         02:c6:f8:75:ee:0c:5d:98:6d:d4:de:88:f3:b4:14:c8:1b:a9:
         2d:9e:21:36:b9:cc:c0:01:b6:7b:2b:81:3f:1d:ad:3f:3e:02:
         47:3c:bd:55:6f:19:09:98:8d:b6:eb:98:0e:8d:26:12:fd:5c:
         d0:f0:17:e4:12:21:e1:08:9a:2b:1e:b6:5d:3c:0a:3a:07:5a:
         5d:1c:8a:0e:55:32:50:12:e9:19:e2:d7:fc:d4:99:34:31:5c:
         b8:81:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:10:33 2025 by rpki-client