Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File:                     vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier:          MgOFCwXPybCa6Nw7PvTnntU0wWu4oEzRqeTxbeASwTI=
Subject key identifier:   B1:24:3F:FF:92:73:4A:E0:64:C6:09:D6:46:5A:86:0E:A2:35:2C:B5
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer:       /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial:       019746D4C793D7DAF6DA0E3875688D2E86C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number:          0F34
Signing time:             Fri 06 Jun 2025 20:00:39 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:39 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:39 +0000
Files and hashes:         1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
                          2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: T7y/iiCOh2AHPFAbwfGqRrb0F7Jgz6mWJ8pAN/zgzCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:c7:93:d7:da:f6:da:0e:38:75:68:8d:2e:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
        Validity
            Not Before: Jun  6 20:00:39 2025 GMT
            Not After : Jun  7 20:00:39 2025 GMT
        Subject: CN=b1243fff92734ae064c609d6465a860ea2352cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:d9:3e:b7:9c:00:52:1d:4e:c2:f9:2c:86:
                    ab:ca:3e:22:de:42:1f:c6:2c:6c:aa:8f:07:ce:8a:
                    16:b1:c9:28:93:b4:80:05:0f:59:2a:6b:f2:af:8a:
                    09:e5:2c:d8:13:f9:e9:0f:d6:68:7e:6f:66:65:ef:
                    6f:ba:80:cf:21:6b:8d:22:7c:ed:11:7c:c5:fa:d3:
                    c1:1b:05:1e:95:90:c7:48:c2:11:da:58:bd:ce:87:
                    5e:0a:2c:bb:dd:31:a5:61:2f:ab:64:f1:3c:17:82:
                    95:48:45:2a:6d:fd:6a:97:52:8e:11:b7:d7:be:75:
                    aa:ca:ef:38:e0:2c:aa:44:51:01:93:d7:10:68:ee:
                    6e:75:37:64:c4:09:3f:aa:ad:3d:3f:83:b5:3c:76:
                    51:ed:7c:ff:6d:33:20:30:1f:92:ce:fd:cd:33:53:
                    fc:44:fc:8a:55:4f:35:5a:3d:31:47:8b:6a:06:ce:
                    04:64:f6:5a:53:bd:9f:47:f8:92:0a:0d:99:74:e7:
                    8f:47:1b:7b:a8:7a:48:18:6f:59:b3:64:80:47:d5:
                    d8:38:af:78:14:05:0d:96:ba:f7:56:94:8e:3d:85:
                    60:cc:7a:b3:7e:e0:c1:d8:35:f8:dd:0a:c8:b6:7a:
                    dc:b3:c2:9e:bd:cb:58:aa:89:9b:a8:50:22:fa:11:
                    1c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:24:3F:FF:92:73:4A:E0:64:C6:09:D6:46:5A:86:0E:A2:35:2C:B5
            X509v3 Authority Key Identifier:
                keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:79:79:32:18:09:66:24:5c:eb:0e:5e:e4:05:de:0a:8b:95:
         03:c1:61:b3:8c:d7:2e:32:3b:5a:b1:81:0a:88:5f:d8:05:07:
         95:b3:f7:c1:30:de:54:c9:c2:c9:32:da:d2:3b:f3:63:5d:58:
         5a:09:77:15:65:35:ce:6b:21:a8:37:7f:dd:36:4c:48:1a:ad:
         39:da:a2:de:b1:20:cf:32:cc:80:2f:7d:6a:3b:d4:25:64:03:
         1f:f3:e9:cb:70:70:65:78:59:6f:bd:fe:9f:30:4a:bf:c3:72:
         22:8b:e1:cb:c7:2e:4f:16:aa:93:42:41:92:b8:16:fe:49:ed:
         cf:c5:bc:c4:4f:ec:45:ba:d2:44:a4:2b:cd:43:ec:69:bf:74:
         49:27:22:85:a1:b0:09:9a:03:61:78:1e:5d:ff:e0:2b:62:20:
         cd:0f:21:fa:29:ec:d7:14:7c:e0:42:23:49:44:fc:1a:e7:96:
         39:2e:a6:69:04:20:4d:76:cf:3a:da:68:82:a0:f1:73:9f:e6:
         96:79:17:72:39:eb:9c:21:3e:82:3f:29:52:c3:5b:09:b2:3e:
         14:02:28:19:a6:de:a5:b9:b1:1c:46:38:d7:fd:f7:7f:60:db:
         60:d6:f2:71:f7:e8:4a:45:15:20:9e:55:b2:3e:78:3c:75:c7:
         b2:3c:45:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1MeT19r22g44dWiNLobGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGJhZWFlNzYwMDFhODdkYWVlYjBiYzJhOGRkMTBjZTY1
Zjg2NWQwHhcNMjUwNjA2MjAwMDM5WhcNMjUwNjA3MjAwMDM5WjAzMTEwLwYDVQQD
EyhiMTI0M2ZmZjkyNzM0YWUwNjRjNjA5ZDY0NjVhODYwZWEyMzUyY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApenZPrecAFIdTsL5LIaryj4i3kIf
xixsqo8HzooWsckok7SABQ9ZKmvyr4oJ5SzYE/npD9Zofm9mZe9vuoDPIWuNInzt
EXzF+tPBGwUelZDHSMIR2li9zodeCiy73TGlYS+rZPE8F4KVSEUqbf1ql1KOEbfX
vnWqyu844CyqRFEBk9cQaO5udTdkxAk/qq09P4O1PHZR7Xz/bTMgMB+Szv3NM1P8
RPyKVU81Wj0xR4tqBs4EZPZaU72fR/iSCg2ZdOePRxt7qHpIGG9Zs2SAR9XYOK94
FAUNlrr3VpSOPYVgzHqzfuDB2DX43QrItnrcs8KevctYqombqFAi+hEcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEkP/+Sc0rgZMYJ1kZahg6iNSy1MB8GA1UdIwQY
MBaAFL6Lrq52ABqH2u6wvCqN0QzmX4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2Ut
NzFiNTA1NmQ1YjAyLzEvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2UtNzFiNTA1NmQ1YjAy
LzEvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxnl5MhgJ
ZiRc6w5e5AXeCouVA8Fhs4zXLjI7WrGBCohf2AUHlbP3wTDeVMnCyTLa0jvzY11Y
Wgl3FWU1zmshqDd/3TZMSBqtOdqi3rEgzzLMgC99ajvUJWQDH/Ppy3BwZXhZb73+
nzBKv8NyIovhy8cuTxaqk0JBkrgW/kntz8W8xE/sRbrSRKQrzUPsab90SScihaGw
CZoDYXgeXf/gK2IgzQ8h+ins1xR84EIjSUT8GueWOS6maQQgTXbPOtpogqDxc5/m
lnkXcjnrnCE+gj8pUsNbCbI+FAIoGabepbmxHEY41/33f2DbYNbycffoSkUVIJ5V
sj54PHXHsjxFIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:31 2025 by rpki-client