Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File:                     vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier:          799Aip5k1C4NsK5YoIv32gZc4XU+SakgFnqKJ2egvRk=
Subject key identifier:   03:1C:F0:86:9B:F8:5E:CE:93:AE:C9:54:80:2A:06:72:02:1D:FD:39
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer:       /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial:       019612EA5272F1B008E8DD2D98B989062341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number:          14DE
Signing time:             Tue 08 Apr 2025 01:01:08 +0000
Manifest this update:     Tue 08 Apr 2025 01:01:08 +0000
Manifest next update:     Wed 09 Apr 2025 01:01:08 +0000
Files and hashes:         1: QGrvcoxIsYHGrK6BrR6dYV6XkJM.roa (hash: sWNP0/965vZch5nrsrQ4iKgd5GS8sH4fFHr8G2MSO3w=)
                          2: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: Sk4lOlmUCvynnLWim57PObLEZbxtTVd0mWk0l/I6J2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:12:ea:52:72:f1:b0:08:e8:dd:2d:98:b9:89:06:23:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
        Validity
            Not Before: Apr  8 01:01:08 2025 GMT
            Not After : Apr  9 01:01:08 2025 GMT
        Subject: CN=031cf0869bf85ece93aec954802a0672021dfd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:9a:9b:69:94:85:78:97:b1:94:38:f7:1a:
                    39:29:15:27:33:c9:c5:bf:51:8a:62:9c:72:ed:98:
                    ee:ec:4a:99:d5:ce:2a:a8:bf:29:7e:b8:04:93:dc:
                    01:b3:a7:ed:00:4f:82:f1:96:db:b8:02:ba:b9:65:
                    01:28:44:61:e4:a2:df:b0:8d:f3:c7:69:2d:b2:83:
                    98:98:94:97:ec:87:90:ca:50:7e:b7:1c:b0:12:ff:
                    e4:77:66:94:10:9c:be:7f:fd:6f:01:52:91:e7:07:
                    78:72:d2:64:55:08:d3:d1:f9:89:32:f2:08:88:5b:
                    a8:50:1c:27:e6:be:0a:b3:b2:52:11:86:cd:0d:69:
                    b3:75:eb:96:b9:60:44:80:8f:f2:73:88:d5:66:30:
                    73:c5:bb:10:eb:17:07:8d:49:e0:18:65:fe:47:ea:
                    a6:25:30:f9:e0:74:16:ff:72:27:63:e3:8c:a9:9e:
                    f3:24:0d:d2:3d:de:dc:e6:35:47:b2:20:fe:7a:04:
                    96:fa:c0:87:17:1f:8b:77:9c:df:b2:07:74:23:24:
                    fc:e3:ee:32:1c:0e:de:6e:79:01:2c:35:49:1f:a2:
                    1b:1e:58:d2:8b:b8:54:c9:23:ce:ca:4a:31:33:2a:
                    48:a6:94:e7:43:fc:50:76:73:f0:04:13:b7:4d:6e:
                    82:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1C:F0:86:9B:F8:5E:CE:93:AE:C9:54:80:2A:06:72:02:1D:FD:39
            X509v3 Authority Key Identifier:
                keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:6d:c4:3c:6a:0c:ec:4c:e5:5e:94:67:f0:d8:4f:4b:9f:
         e7:46:db:e1:d2:b9:16:2d:9c:ea:94:4e:65:c4:39:5f:a5:5d:
         19:80:4f:11:e9:cb:d9:20:d7:5a:73:fe:40:f3:f5:c5:7e:3a:
         20:1e:d2:4c:96:5e:eb:87:b9:0b:4b:4a:bf:9a:61:9f:76:93:
         1e:2f:5c:35:29:3a:d7:dc:23:ec:07:86:93:18:2b:c6:a1:a8:
         f7:c8:cc:cb:14:ff:bf:40:33:da:ee:21:d8:52:ce:30:8c:ea:
         81:01:7a:09:ce:fd:0d:5b:e1:53:45:ab:e1:16:8f:46:36:d7:
         5f:99:67:6f:7d:b5:28:aa:29:19:c6:f8:ee:e1:11:c5:11:b8:
         05:95:f0:95:bc:0f:a5:65:8c:11:39:c5:d3:de:ab:4b:f5:59:
         fc:80:bf:5b:76:57:10:e0:a6:7b:c9:30:1d:ca:c1:5a:a2:e8:
         b6:e2:f1:ac:7d:65:b6:a1:0c:4c:a7:68:11:c5:a8:fc:b0:70:
         47:49:9b:c0:98:35:a5:7f:5f:01:a6:20:06:77:64:33:bf:e2:
         bf:17:9e:c2:07:69:9e:63:d4:19:be:15:9d:e7:50:69:e8:a1:
         a1:af:d2:f4:b9:6a:88:ce:f8:cf:06:92:c4:93:7e:b6:f3:c7:
         7d:67:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:56:10 2025 by rpki-client