Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          cgdnw30E4ydjvsdJ/IZWPdo00p/AHf7q+3ExKjkd+KA=
Subject key identifier:   C5:C3:C4:A6:0C:D7:1E:EB:D4:F7:8B:0B:D7:1A:3B:B2:69:4B:7F:5A
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       01960BD5D9B69A6D1C7ED670EB46948EF5CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          1032
Signing time:             Sun 06 Apr 2025 16:01:26 +0000
Manifest this update:     Sun 06 Apr 2025 16:01:26 +0000
Manifest next update:     Mon 07 Apr 2025 16:01:26 +0000
Files and hashes:         1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: M7ZlbWt6svo3Gyct3tQo/ZZuUToq5xS2vLIFn0u2ig8=)
                          2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=)
                          3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0b:d5:d9:b6:9a:6d:1c:7e:d6:70:eb:46:94:8e:f5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Apr  6 16:01:26 2025 GMT
            Not After : Apr  7 16:01:26 2025 GMT
        Subject: CN=c5c3c4a60cd71eebd4f78b0bd71a3bb2694b7f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:80:3c:93:d7:c5:65:7c:fe:56:bc:9f:ad:42:
                    3c:86:59:7d:e0:bb:c1:60:a7:1a:b3:2c:d5:a6:cc:
                    9c:66:df:40:2e:36:24:ef:ac:bb:e9:b1:09:b0:dc:
                    71:e1:5f:d2:7a:b2:91:55:c8:25:42:37:09:41:19:
                    2b:80:f7:a1:01:82:4d:9e:6c:b9:c8:d0:ed:8e:19:
                    c8:cb:f8:1e:e7:6c:3a:e6:dd:12:6a:d7:47:d1:0e:
                    f4:a8:0e:c2:18:aa:bf:4c:37:1c:fd:7a:13:ea:69:
                    73:4b:36:85:bd:9b:33:51:3a:fc:36:57:c7:59:7e:
                    51:ca:5d:d8:7b:b6:bc:0e:58:17:e5:52:8b:ce:ed:
                    91:17:76:de:5e:14:56:46:2f:06:ef:95:8b:8e:9c:
                    ae:81:a4:c3:83:ba:fb:b9:c8:39:0d:7a:4c:d5:96:
                    1a:c6:9b:04:8d:e5:15:f3:a7:56:de:1e:cb:73:72:
                    7a:49:81:f8:0b:9d:50:29:7a:3b:46:28:af:53:b9:
                    fc:03:65:4e:f5:a5:3b:d3:f5:e1:d1:b6:79:ed:c6:
                    3c:bd:22:f4:c2:c2:04:21:f2:58:62:8a:d0:4e:41:
                    49:3a:33:96:b7:0c:21:f5:78:ee:6e:e0:c4:90:44:
                    8d:75:4e:8f:68:81:3c:8f:44:eb:05:59:72:1c:b2:
                    89:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:C4:A6:0C:D7:1E:EB:D4:F7:8B:0B:D7:1A:3B:B2:69:4B:7F:5A
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:08:be:2f:4b:28:e1:3e:05:5f:25:1d:23:8f:95:db:8e:10:
         02:8c:5f:de:78:1e:b0:06:01:4a:55:be:42:1c:e7:89:ea:45:
         c7:97:48:4a:f2:1d:64:8f:1b:26:24:9f:88:98:35:80:b4:34:
         c7:45:c3:ea:dc:0b:2d:df:2d:5b:6e:47:1c:74:58:cf:b7:c3:
         3d:e8:b4:17:be:a5:de:de:33:4d:63:77:0a:cb:46:30:3d:b4:
         10:ee:69:19:06:69:0d:39:a0:c1:c8:5e:73:fc:b2:fb:22:76:
         cc:0f:4e:bd:a5:0c:12:4a:fd:8c:cc:99:2f:ad:e1:d9:81:8e:
         ff:35:76:c6:d4:32:06:0f:38:4f:31:82:8c:c2:34:5e:52:b5:
         32:04:79:58:47:b1:ca:ea:98:6a:6c:82:e8:ee:d3:0e:61:3e:
         aa:6b:6b:b3:da:25:cf:89:19:a3:c1:e4:23:58:89:ea:a5:66:
         5b:68:7f:ea:5a:24:f2:ce:ed:1b:ed:8e:5d:8b:dd:36:8c:e3:
         0f:bd:32:11:ab:e3:d5:ea:6a:c3:b9:ed:cb:1c:18:d7:38:42:
         80:bf:b3:cc:98:78:56:4b:52:4f:b3:b6:72:73:2e:3d:d3:56:
         99:d1:dc:91:d1:06:fe:28:a9:5c:44:7b:99:41:ed:0a:11:6e:
         33:27:f9:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYL1dm2mm0cftZw60aUjvXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3
NDY5NDIwHhcNMjUwNDA2MTYwMTI2WhcNMjUwNDA3MTYwMTI2WjAzMTEwLwYDVQQD
EyhjNWMzYzRhNjBjZDcxZWViZDRmNzhiMGJkNzFhM2JiMjY5NGI3ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oA8k9fFZXz+VryfrUI8hll94LvB
YKcasyzVpsycZt9ALjYk76y76bEJsNxx4V/SerKRVcglQjcJQRkrgPehAYJNnmy5
yNDtjhnIy/ge52w65t0SatdH0Q70qA7CGKq/TDcc/XoT6mlzSzaFvZszUTr8NlfH
WX5Ryl3Ye7a8DlgX5VKLzu2RF3beXhRWRi8G75WLjpyugaTDg7r7ucg5DXpM1ZYa
xpsEjeUV86dW3h7Lc3J6SYH4C51QKXo7RiivU7n8A2VO9aU70/Xh0bZ57cY8vSL0
wsIEIfJYYorQTkFJOjOWtwwh9XjubuDEkESNdU6PaIE8j0TrBVlyHLKJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXDxKYM1x7r1PeLC9caO7JpS39aMB8GA1UdIwQY
MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt
YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh
LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngi+L0so
4T4FXyUdI4+V244QAoxf3ngesAYBSlW+QhzniepFx5dISvIdZI8bJiSfiJg1gLQ0
x0XD6twLLd8tW25HHHRYz7fDPei0F76l3t4zTWN3CstGMD20EO5pGQZpDTmgwche
c/yy+yJ2zA9OvaUMEkr9jMyZL63h2YGO/zV2xtQyBg84TzGCjMI0XlK1MgR5WEex
yuqYamyC6O7TDmE+qmtrs9olz4kZo8HkI1iJ6qVmW2h/6lok8s7tG+2OXYvdNozj
D70yEavj1epqw7ntyxwY1zhCgL+zzJh4VktST7O2cnMuPdNWmdHckdEG/iipXER7
mUHtChFuMyf5UQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:52:52 2025 by rpki-client