Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File:                     vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier:          P+SLz8MODZD5sbI8fDY/gHbbB50ZhHzf9rGf3ZlJDoA=
Subject key identifier:   C3:B3:DE:E3:2D:3F:B4:DE:ED:AB:B5:B0:37:FB:64:BD:DE:57:48:75
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer:       /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial:       019640304071B2E6424303CA68339B1DC4B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number:          13C6
Signing time:             Wed 16 Apr 2025 20:00:26 +0000
Manifest this update:     Wed 16 Apr 2025 20:00:26 +0000
Manifest next update:     Thu 17 Apr 2025 20:00:26 +0000
Files and hashes:         1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
                          2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: xnPRq341Jq1xqEr3sAaEqAANT+k47NJN9U+85DzDfwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:30:40:71:b2:e6:42:43:03:ca:68:33:9b:1d:c4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
        Validity
            Not Before: Apr 16 20:00:26 2025 GMT
            Not After : Apr 17 20:00:26 2025 GMT
        Subject: CN=c3b3dee32d3fb4deedabb5b037fb64bdde574875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:40:18:31:e1:74:07:c5:29:4f:86:0b:6c:
                    73:cf:9a:d2:49:e4:48:88:d3:bd:c6:52:07:09:2b:
                    79:c0:aa:45:ef:35:7a:77:20:18:64:f1:3e:4b:b9:
                    ee:17:84:7d:9e:d7:0f:50:e0:7b:31:b3:b8:96:59:
                    fe:42:65:11:3e:1d:20:11:cf:86:bf:b3:8a:f3:3c:
                    e9:b6:f1:7a:79:55:24:5a:b1:70:ef:c3:94:09:69:
                    93:14:50:d0:2a:8e:cc:04:ae:85:99:63:94:cc:fd:
                    92:be:24:f5:93:2e:dd:ad:16:54:83:c7:15:c3:01:
                    9e:ef:01:6a:17:db:95:d4:af:f8:9c:b8:38:be:bd:
                    7c:d4:a9:80:86:b7:ee:14:9d:f2:d2:07:4e:7c:1c:
                    19:32:be:37:22:6b:e8:ab:e6:8d:16:2f:d2:be:81:
                    d9:21:b2:22:c3:d1:7e:85:3c:0c:6a:96:c0:8b:26:
                    f4:06:42:50:53:5a:25:35:8b:09:5d:40:17:f5:ad:
                    69:1d:b8:ad:58:d8:cd:39:75:2b:4f:8d:9c:26:ba:
                    37:e0:bf:06:43:76:01:3d:70:41:02:80:a2:0e:2c:
                    98:05:d1:ef:c9:c9:4c:4f:8f:ab:7a:a4:45:fd:79:
                    d9:1c:65:fe:20:f6:11:2c:90:1c:5a:6f:c5:70:4e:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B3:DE:E3:2D:3F:B4:DE:ED:AB:B5:B0:37:FB:64:BD:DE:57:48:75
            X509v3 Authority Key Identifier:
                keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:2d:7a:fc:19:e7:ab:ff:d7:7c:f4:d7:8e:a5:e1:89:97:73:
         f1:91:50:eb:e6:b9:69:44:8e:4c:8f:55:fa:c5:ee:d7:ee:83:
         ec:24:13:4c:c0:f3:57:b8:32:30:02:39:83:58:68:7b:d4:15:
         30:e4:ff:7f:44:ab:f2:3d:e8:fd:2b:88:c9:c1:66:42:13:e4:
         67:f2:45:1d:bd:98:b4:a3:e8:c4:8c:06:3c:cb:2d:ab:09:d5:
         40:d1:4f:d2:94:ff:53:ee:39:e8:67:0e:48:95:ba:3f:71:99:
         11:b3:ff:48:6a:d1:07:7b:b7:21:8d:9d:a6:52:ea:55:ef:0d:
         d0:5e:df:3c:5c:6d:00:c5:4c:7b:66:37:d6:68:aa:0e:bb:4c:
         43:f8:69:98:5c:ac:6f:bc:2f:4f:66:4d:97:81:42:08:df:06:
         75:f3:79:b9:e5:95:cc:61:65:05:6c:d5:8d:4b:57:d7:6f:53:
         a7:a5:97:6b:62:c8:26:29:00:45:79:bc:d6:c3:39:29:5c:66:
         05:cf:cb:3d:27:bc:e5:b3:50:72:a7:0f:06:35:5b:06:85:75:
         7b:fe:4f:4c:fb:4b:dc:56:f9:3c:3b:d2:3c:8a:14:bd:c5:52:
         b0:42:02:2e:b1:57:5d:fa:31:7b:11:d9:f7:1a:97:a0:eb:5f:
         54:3c:d5:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAMEBxsuZCQwPKaDObHcS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5
NjhhYjAwHhcNMjUwNDE2MjAwMDI2WhcNMjUwNDE3MjAwMDI2WjAzMTEwLwYDVQQD
EyhjM2IzZGVlMzJkM2ZiNGRlZWRhYmI1YjAzN2ZiNjRiZGRlNTc0ODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yZAGDHhdAfFKU+GC2xzz5rSSeRI
iNO9xlIHCSt5wKpF7zV6dyAYZPE+S7nuF4R9ntcPUOB7MbO4lln+QmURPh0gEc+G
v7OK8zzptvF6eVUkWrFw78OUCWmTFFDQKo7MBK6FmWOUzP2SviT1ky7drRZUg8cV
wwGe7wFqF9uV1K/4nLg4vr181KmAhrfuFJ3y0gdOfBwZMr43Imvoq+aNFi/SvoHZ
IbIiw9F+hTwMapbAiyb0BkJQU1olNYsJXUAX9a1pHbitWNjNOXUrT42cJro34L8G
Q3YBPXBBAoCiDiyYBdHvyclMT4+reqRF/XnZHGX+IPYRLJAcWm/FcE6SHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMOz3uMtP7Te7au1sDf7ZL3eV0h1MB8GA1UdIwQY
MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt
ZjlhMzNmZjAxMWNiLzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi
LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeS16/Bnn
q//XfPTXjqXhiZdz8ZFQ6+a5aUSOTI9V+sXu1+6D7CQTTMDzV7gyMAI5g1hoe9QV
MOT/f0Sr8j3o/SuIycFmQhPkZ/JFHb2YtKPoxIwGPMstqwnVQNFP0pT/U+456GcO
SJW6P3GZEbP/SGrRB3u3IY2dplLqVe8N0F7fPFxtAMVMe2Y31miqDrtMQ/hpmFys
b7wvT2ZNl4FCCN8GdfN5ueWVzGFlBWzVjUtX129Tp6WXa2LIJikARXm81sM5KVxm
Bc/LPSe85bNQcqcPBjVbBoV1e/5PTPtL3Fb5PDvSPIoUvcVSsEICLrFXXfoxexHZ
9xqXoOtfVDzVuQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:40:48 2025 by rpki-client