Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          ttKZe0vaxSkVVVJqBKfd2ZSNYcQEE7QHuMCbG6fmFa4=
Subject key identifier:   C1:0F:73:B4:20:15:04:FE:E4:A4:5F:68:58:78:59:D1:11:3B:76:7B
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       0197485520AE51A62CC5C6F6CBAF56939BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0A72
Signing time:             Sat 07 Jun 2025 03:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:27 +0000
Files and hashes:         1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: Uj5fCfPLzqQNhOyv0eOlqLDuxvvheZftTd+ty8wk++k=)
                          2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:20:ae:51:a6:2c:c5:c6:f6:cb:af:56:93:9b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Jun  7 03:00:27 2025 GMT
            Not After : Jun  8 03:00:27 2025 GMT
        Subject: CN=c10f73b4201504fee4a45f68587859d1113b767b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:44:ec:98:13:5a:7c:7c:b2:75:f8:01:a9:
                    2e:ee:ed:8b:6c:af:98:68:45:aa:85:ae:7b:a1:c7:
                    94:fa:4e:0d:d5:a7:7c:77:ce:6b:49:90:1f:97:9b:
                    0d:65:84:d9:0d:95:8e:61:86:34:b0:3f:20:43:ae:
                    12:4d:bd:34:9f:56:97:a5:5f:0b:b1:73:e9:e5:54:
                    82:1f:58:36:ab:fb:13:91:1b:07:97:55:1c:ce:d5:
                    6a:f9:e7:b3:32:ff:b3:5f:40:fa:7e:b3:43:07:46:
                    b3:0c:1f:d1:8f:1e:fd:cc:b9:76:3c:e7:a5:a0:a1:
                    db:f8:07:7c:93:06:3a:31:0f:d0:5f:d9:24:cd:7d:
                    7b:d5:d6:3b:50:cc:dc:ae:95:93:69:43:56:b7:16:
                    5b:6f:09:3f:e1:46:49:02:4b:f9:2f:f0:e0:70:04:
                    7c:25:dc:b3:07:ea:64:62:78:d0:81:64:ad:ed:49:
                    cb:7f:c5:60:61:74:65:79:67:64:bc:e4:0a:20:3e:
                    a6:4d:05:69:df:45:95:51:e6:13:82:68:a7:b4:55:
                    50:9e:07:f2:94:bc:e8:fa:87:b0:d1:31:29:5c:4f:
                    f2:e9:3f:d7:da:33:19:4e:82:32:6d:79:60:b6:fd:
                    af:44:ca:83:4b:e7:10:9e:96:83:a6:4a:74:1f:7e:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:73:B4:20:15:04:FE:E4:A4:5F:68:58:78:59:D1:11:3B:76:7B
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:33:74:2d:a6:d6:c3:5d:fb:19:b4:b3:f2:01:57:e0:21:
         5c:88:0e:c3:e8:c4:22:0f:88:83:a3:e6:8b:f3:ce:28:b2:44:
         74:36:a9:e0:33:26:0c:1c:f1:4a:a1:5b:a4:7d:ae:0e:4a:be:
         80:4b:fc:54:43:4f:d1:f3:ab:33:08:1f:47:15:4a:b0:31:bd:
         74:29:b6:44:e1:16:8c:79:99:dd:8f:fb:36:2b:92:bd:34:a2:
         80:9a:62:50:f8:e5:7b:7f:b4:1f:70:a6:60:4e:03:2a:cd:53:
         9a:47:55:7f:b1:e2:10:1e:6e:ea:fe:bb:35:7f:d1:2d:3f:4c:
         44:b6:f8:d4:c2:39:0e:45:0f:05:f5:7d:39:32:28:e1:ef:72:
         b6:5d:a1:a5:a7:bd:f0:f6:b3:a2:46:43:b5:62:87:7c:2d:cf:
         f4:e2:50:e4:f3:2a:9c:d9:8c:ee:62:0e:e9:56:fc:5d:0d:19:
         01:ec:32:ec:f5:32:ea:16:22:1c:b9:61:55:e3:fa:ba:7a:e1:
         3c:fa:6c:42:72:d8:4d:97:53:c7:3e:20:19:e3:e0:8a:ea:9c:
         df:66:83:8d:bc:d0:12:d0:29:91:9b:af:42:5f:ba:1a:0d:37:
         7b:55:5a:0e:30:7d:a7:2a:4d:df:df:ed:46:56:ca:8b:c3:53:
         1e:b5:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:16 2025 by rpki-client