Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
File:                     VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json)
Hash identifier:          62GddidnocPaeUtwbla2FkJOzKH1SSvOsO3/dlEDtOc=
Subject key identifier:   5E:8B:E4:C3:4C:CB:C1:A0:75:E1:70:A4:21:4D:19:97:33:36:82:F5
Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E
Certificate issuer:       /CN=553abd088f58546243f0227022cdb47bcd1d7d8e
Certificate serial:       01974742FD63191C5C36BDDC7C871AD0D665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
Manifest number:          1374
Signing time:             Fri 06 Jun 2025 22:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 22:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 22:01:01 +0000
Files and hashes:         1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: gRxP0g+IBRyxJZjk0bbHDizhCFY0N2W1Z/TyDDCjxns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:fd:63:19:1c:5c:36:bd:dc:7c:87:1a:d0:d6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e
        Validity
            Not Before: Jun  6 22:01:01 2025 GMT
            Not After : Jun  7 22:01:01 2025 GMT
        Subject: CN=5e8be4c34ccbc1a075e170a4214d1997333682f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:a5:6e:c3:74:01:d3:02:90:ae:e1:d3:60:
                    e8:69:27:8b:7b:db:d8:f7:ef:9d:05:92:d5:10:31:
                    46:d2:f2:c9:28:e1:3a:5a:23:13:51:a5:39:ca:6b:
                    b6:10:03:c2:af:55:1c:76:97:47:5e:59:28:77:93:
                    75:e5:b4:8d:15:7d:94:e8:b3:4d:37:cb:ef:31:e8:
                    73:08:d5:e2:d6:22:bb:ec:6c:95:cf:17:18:35:ea:
                    d0:29:53:df:9a:72:5e:75:5d:ca:1b:61:67:d4:8a:
                    d6:e4:94:ca:d7:01:0c:bb:79:58:f1:4b:88:47:f0:
                    68:19:d7:e0:2a:42:89:75:40:be:bc:53:aa:c7:73:
                    20:03:b0:26:71:60:65:7f:41:22:6a:35:47:08:fc:
                    31:1c:2b:8c:af:0c:e5:b9:bc:93:76:dd:99:87:83:
                    33:b9:80:a6:97:10:b9:2c:cc:2b:55:f3:7a:0e:d6:
                    b8:40:97:71:11:0a:58:56:35:42:ae:4a:24:8a:59:
                    23:6b:53:80:2b:d8:4d:e8:cb:76:bf:55:30:e3:b0:
                    4d:96:e3:1c:70:77:b4:fe:06:51:5b:ee:c4:3e:6b:
                    be:6c:92:ea:03:39:b2:1e:f5:9f:e0:9e:86:44:a5:
                    a2:82:56:18:7b:6a:25:8b:13:10:f3:f9:4f:41:e6:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:E4:C3:4C:CB:C1:A0:75:E1:70:A4:21:4D:19:97:33:36:82:F5
            X509v3 Authority Key Identifier:
                keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:08:f9:97:ff:f6:db:0b:6d:d3:41:f3:64:b1:a8:8e:2b:f0:
         64:91:6e:39:c8:81:c0:77:71:85:00:b8:fb:22:e1:05:fd:52:
         c8:11:04:16:a1:fd:65:23:ab:79:b8:04:6b:33:de:86:22:d4:
         3f:02:19:e3:7d:9b:25:df:ce:61:66:50:c5:5d:6c:44:98:28:
         1e:c5:23:a5:20:05:f8:48:ea:d6:79:48:3f:e8:ce:d0:60:1e:
         8b:16:c9:95:58:e4:bc:fb:bc:d7:ee:85:cb:2a:cf:c8:c9:f1:
         b5:10:ff:73:48:84:66:4f:39:0d:4c:24:da:41:bb:c3:ca:7b:
         bb:75:87:dc:b2:05:6c:9e:53:94:c5:76:3a:1e:e5:0e:5d:7e:
         ab:ee:ff:27:b6:4d:7b:25:ec:1e:24:95:60:b2:03:d7:dd:7e:
         80:e1:2f:81:c4:ec:11:18:ac:3f:a9:76:26:5d:c2:90:4b:6f:
         29:8f:66:21:43:05:50:bb:f1:2d:d1:f7:3c:ff:11:ab:52:1e:
         f9:42:28:2b:8f:22:67:cb:75:02:7c:0a:57:d5:dc:f5:f9:40:
         ea:14:20:af:a8:21:6f:21:67:7c:cf:b2:5e:ed:aa:26:e2:ba:
         e2:5f:00:46:55:e1:f2:13:4a:2b:16:c3:33:5c:5f:17:97:04:
         71:0f:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:45 2025 by rpki-client