Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File:                     VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier:          MNcpfQFMHUBt0Lsv0vcvI2M7j3kqlbdceZOz/d2yLzQ=
Subject key identifier:   38:03:7C:C1:68:7E:77:B6:9F:29:7B:8A:33:30:59:F5:25:A1:30:72
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       019752D903BD3BFAADD8E2457BE4026A9EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number:          0EAC
Signing time:             Mon 09 Jun 2025 04:00:43 +0000
Manifest this update:     Mon 09 Jun 2025 04:00:43 +0000
Manifest next update:     Tue 10 Jun 2025 04:00:43 +0000
Files and hashes:         1: 0DRAcYwVU1wTPmKPUVZE-cIvVWk.roa (hash: SCcdCtXYPz3bfVKFsB8kMQkE3rKjzNyXJ29sazaODiU=)
                          2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: SUEmyLtJmJQGgYRy6lU0bHpgpp4UmUWY+sA9TZvcS24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:d9:03:bd:3b:fa:ad:d8:e2:45:7b:e4:02:6a:9e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Jun  9 04:00:43 2025 GMT
            Not After : Jun 10 04:00:43 2025 GMT
        Subject: CN=38037cc1687e77b69f297b8a333059f525a13072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a0:84:67:cc:43:23:a3:a9:99:b2:08:47:09:
                    7f:40:03:08:d1:90:40:e9:b5:8b:53:68:02:a6:55:
                    07:db:34:3a:0b:ad:c4:a5:0e:26:66:4b:14:76:33:
                    67:86:72:7c:35:de:d2:8c:10:ab:45:0a:c6:86:3d:
                    f6:bc:6a:7c:80:58:bb:01:76:c7:86:6e:eb:42:99:
                    f1:57:36:c3:3a:b8:da:b3:9b:45:29:de:1e:0f:ff:
                    8c:b8:d5:f3:b2:c5:ff:77:76:40:28:23:9a:54:d9:
                    08:78:c0:52:f9:a8:db:56:a6:bc:89:06:c4:90:7e:
                    39:06:bc:51:3f:c3:16:28:2f:b5:87:2d:14:73:a9:
                    77:54:63:56:52:f3:f8:40:04:75:a6:cd:41:06:14:
                    40:ce:52:e9:52:64:0c:39:e5:5c:65:82:8e:83:ee:
                    c8:a5:01:bc:52:12:70:3e:91:f1:e3:87:78:8b:ed:
                    c6:37:27:1d:c6:29:93:22:6c:fb:54:05:2b:03:9d:
                    e9:5a:07:81:ec:45:0e:01:fb:c2:c2:5c:d8:f5:b5:
                    d7:84:1d:06:9e:65:d4:fa:1e:a8:06:66:66:98:c2:
                    0a:c1:8f:c7:bc:92:b4:5f:40:9f:f4:c2:fd:40:b5:
                    22:d4:43:e6:2c:e4:67:2e:49:32:fb:67:72:21:9c:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:7C:C1:68:7E:77:B6:9F:29:7B:8A:33:30:59:F5:25:A1:30:72
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:66:87:b9:22:06:99:1f:ed:d4:41:55:4f:cd:c6:44:b1:
         04:c0:ba:3d:2f:c6:9d:6d:9c:e8:e5:12:7d:68:1a:1f:3b:ff:
         d0:9d:c3:f9:31:fb:11:2d:53:7f:b1:99:a9:ff:fb:6f:cb:6d:
         b5:8b:87:e0:32:6e:53:d4:e1:8b:d9:06:ab:9a:8c:6a:89:d5:
         9c:3e:8a:8b:68:4d:3f:be:41:02:50:fb:c5:76:58:2a:e3:e3:
         0b:68:31:0a:4b:85:ce:1f:dc:f5:75:9e:10:fb:20:fb:a1:cd:
         19:50:66:0c:d2:e3:dc:98:97:53:26:cf:c1:55:60:12:51:98:
         c4:7e:ab:68:20:27:1e:a0:b0:02:63:3e:b1:11:b4:ba:a8:a5:
         5a:9c:fa:a5:82:dc:93:a5:23:26:4e:48:29:30:0b:e1:9e:b6:
         cb:82:32:bf:06:ce:92:ac:56:a0:8f:d4:4a:51:5e:63:0f:52:
         96:4d:dd:16:90:11:71:6b:f3:d7:c4:70:b4:a2:ed:c5:e5:e5:
         87:1e:f8:a3:bc:84:0f:2d:46:c9:a2:51:54:06:74:ec:90:a3:
         ab:e1:81:78:88:a1:2b:b9:45:07:a5:c7:49:40:34:f9:00:22:
         33:ec:d6:7e:ba:80:4c:8b:bf:bc:91:76:54:6e:cc:40:0b:40:
         83:97:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:05:21 2025 by rpki-client