Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File:                     VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier:          wg5ff6K337EBuemfFv0Mff0eQjiy1k86lTUjhi+Drz0=
Subject key identifier:   93:E8:2C:9F:B0:D0:6A:3E:41:45:5E:71:D4:5E:38:CE:33:ED:00:78
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer:       /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial:       0197499F452579D5FCAB3BCC9220E69E8DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number:          052B
Signing time:             Sat 07 Jun 2025 09:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:04 +0000
Files and hashes:         1: MeVZOtqNt3JW5yw4ZXWY1mEC3c4.roa (hash: aT7Qdf0+N9/MSDlSTyJ9aA4YP0o287rEoQwXL6tiMCM=)
                          2: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: Uh3VU9DqOowAA9efqLlAtsg41WLi4svOBCI6pqA6vVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:45:25:79:d5:fc:ab:3b:cc:92:20:e6:9e:8d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
        Validity
            Not Before: Jun  7 09:01:04 2025 GMT
            Not After : Jun  8 09:01:04 2025 GMT
        Subject: CN=93e82c9fb0d06a3e41455e71d45e38ce33ed0078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:8b:2a:c6:6d:97:45:6c:03:f0:da:c0:31:
                    86:b3:bc:fe:59:30:b6:c4:34:7b:13:86:78:92:09:
                    b0:0e:54:1e:93:95:62:01:e4:fd:0b:bd:f0:91:a2:
                    bb:54:fb:cc:a1:de:ac:67:34:be:1e:ba:ed:7d:f2:
                    d2:63:0b:66:8b:d7:7a:cf:11:a8:70:f3:17:5a:f1:
                    9d:f6:a6:07:7d:65:43:9f:62:bb:0a:a8:ba:07:df:
                    b4:a8:35:f6:c1:54:fe:97:6e:be:8f:e7:ac:e6:f3:
                    90:b7:1d:5d:4b:6d:16:64:d5:e0:d5:84:c1:20:56:
                    f2:88:0b:02:e3:38:6e:5c:b2:be:de:80:cd:0f:2c:
                    56:af:44:bb:d7:5f:11:5c:bc:a0:23:10:8f:ce:8b:
                    7f:fa:ea:40:a3:9f:2e:71:f7:83:60:d4:d3:53:1d:
                    ce:b6:19:f2:52:a2:0e:2e:de:cf:01:21:89:38:7a:
                    28:4f:08:ad:14:27:7a:d6:6f:71:21:1b:3f:6d:d7:
                    82:f3:99:55:ec:24:a9:cd:ea:d7:1e:a5:1d:53:ad:
                    ff:2d:29:30:11:cd:08:d8:31:7a:5c:f8:56:08:22:
                    7c:61:98:11:90:f9:2f:26:44:54:ce:43:76:2a:c6:
                    be:bd:1d:2f:54:c8:f6:48:2a:60:a1:42:1d:67:9e:
                    f0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E8:2C:9F:B0:D0:6A:3E:41:45:5E:71:D4:5E:38:CE:33:ED:00:78
            X509v3 Authority Key Identifier:
                keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:90:0d:4c:c5:78:b8:ea:b0:7f:60:c2:02:4e:f0:82:02:71:
         07:25:24:7a:a5:88:32:a1:95:9e:26:62:dd:6c:09:93:10:45:
         fd:25:e6:80:a1:5b:2e:f8:85:be:97:5f:44:09:64:26:93:7b:
         50:3b:d1:93:f5:18:c9:c5:d4:af:72:85:a6:86:f3:92:6d:69:
         76:95:63:f2:e1:51:33:36:b2:a1:bd:10:3b:41:86:d1:8b:11:
         b0:9e:52:97:2b:60:23:c0:31:91:b7:ff:62:b2:3c:bf:8f:34:
         f6:f1:62:76:7f:6f:81:29:08:e2:69:44:26:1b:4b:e2:2a:67:
         9b:1a:3b:e2:9c:6e:25:68:f7:55:77:68:19:a3:c6:1f:49:74:
         db:63:84:df:2f:c6:dc:2f:a1:0f:c6:70:dc:cc:a7:c2:9f:75:
         6e:55:64:02:43:38:71:62:be:ef:80:80:ec:fe:18:f0:d2:8e:
         a0:dc:72:e5:26:47:c0:8b:0a:7d:c2:d6:74:46:6d:2b:7a:d8:
         40:c9:cd:34:81:3a:b6:e1:96:34:5d:f2:ef:e8:fd:27:59:8d:
         38:a4:9c:39:65:28:80:c5:9c:82:44:50:55:b1:ef:35:93:c7:
         65:b1:d9:94:d6:e7:f4:fb:3f:11:8c:66:be:f1:43:b3:01:fa:
         0d:49:09:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:02:49 2025 by rpki-client