Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          dUMD83ZKeCpSnR5JPHGiAU20uL8apPtibQ45T7HJNtg=
Subject key identifier:   1D:64:CD:D7:33:05:E6:88:CC:71:38:10:0B:1F:8B:C6:A8:29:BF:E6
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       01974D44C70DCC556387B2FD1FA2AE62671F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          150F
Signing time:             Sun 08 Jun 2025 02:00:42 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:42 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:42 +0000
Files and hashes:         1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: +ggDt+ltrW4i5s7uZDX2bEeDvy7i8SHgL04rC28xekA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:c7:0d:cc:55:63:87:b2:fd:1f:a2:ae:62:67:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Jun  8 02:00:42 2025 GMT
            Not After : Jun  9 02:00:42 2025 GMT
        Subject: CN=1d64cdd73305e688cc7138100b1f8bc6a829bfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:96:bc:c8:43:41:71:df:8c:6c:bf:52:b2:9e:
                    41:c5:ee:c3:03:64:4a:43:ff:e2:72:ec:3c:96:84:
                    cb:30:9a:3c:f4:51:f8:ec:5e:34:df:39:ca:1d:84:
                    c9:84:ed:98:27:f3:08:72:46:ae:8d:ed:5e:3b:dd:
                    af:a5:9c:9a:19:d3:b5:58:5f:30:bf:1b:71:ae:7c:
                    d6:dd:65:30:c1:2c:64:ff:d5:3b:61:e6:e1:cf:56:
                    02:6e:9b:1d:73:15:34:87:9f:ef:d7:e9:89:b8:e3:
                    7f:fe:a3:36:45:36:46:95:9b:26:0c:f2:0e:92:91:
                    13:f9:18:e8:c9:af:ba:15:35:70:1a:36:39:0e:99:
                    d5:27:9d:d1:98:c4:6e:63:b2:9b:6c:8b:f4:e5:70:
                    58:bd:49:4d:ce:26:96:be:dd:32:76:44:5e:94:f4:
                    7e:08:88:24:9c:e1:21:1e:01:4b:05:1b:86:bb:3f:
                    f1:5a:13:39:04:0c:3b:87:ef:0f:4d:69:7a:10:a9:
                    25:f0:44:3e:67:a8:45:be:2d:a8:98:cd:c4:10:05:
                    45:be:0e:cf:c4:38:a1:88:ae:5e:ee:3b:2a:64:bc:
                    5f:f4:ac:b8:84:fe:7c:65:00:3e:f6:67:f5:39:b6:
                    ed:55:c2:b0:51:a0:a6:f9:a7:08:5e:fb:13:d1:36:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:64:CD:D7:33:05:E6:88:CC:71:38:10:0B:1F:8B:C6:A8:29:BF:E6
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c7:a6:8c:13:9b:93:e1:b4:4b:c9:ac:89:5d:ee:28:b2:19:
         df:45:8b:ab:50:eb:26:a3:24:27:8b:05:c3:90:fc:03:06:e7:
         3b:af:30:f8:6a:2f:b3:44:c1:d1:3e:93:68:3e:4e:c4:b0:af:
         1d:eb:80:4b:46:d7:7c:28:15:35:7d:10:c2:e7:29:0b:85:20:
         f9:50:c3:34:da:12:e0:3b:d4:70:70:a8:00:cf:d5:be:e2:2c:
         04:9c:68:2b:cb:aa:86:c7:a3:87:b0:84:c2:12:f5:9e:f8:99:
         bf:7d:e7:5e:36:7b:99:92:22:1e:73:5e:fe:8a:77:de:44:b9:
         dc:18:3d:09:74:a9:2e:6e:00:97:01:2e:2a:ac:40:55:21:90:
         1f:4b:a6:85:8e:ab:68:44:58:82:91:69:21:d0:ee:a9:5b:ca:
         58:b9:fc:27:e1:55:60:62:0b:5e:ce:30:20:ba:ee:ec:1c:28:
         49:fe:ca:30:7e:1e:52:f3:d8:1c:e3:11:b8:fc:60:06:eb:79:
         38:ff:08:36:7e:2c:5d:50:c2:b8:4a:23:12:f9:34:c3:b7:ac:
         06:7a:9a:bb:c0:de:d8:fa:7a:f8:c4:a7:4d:0c:3a:24:11:3b:
         d0:fe:13:8c:83:7b:ba:2a:88:94:70:e2:02:c5:ef:9a:00:82:
         03:7b:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:30:15 2025 by rpki-client