Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File:                     VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier:          /9MOGMQu8S8ckvg8LJTc4yVR++SIeF5z4gaV6FygkSQ=
Subject key identifier:   3B:BB:C9:4C:AA:CB:E9:13:82:7D:EF:92:C2:4D:D0:2C:A9:82:54:F0
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer:       /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial:       019749314DB0530CC3C90190BF81841A2C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number:          12E1
Signing time:             Sat 07 Jun 2025 07:00:57 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:57 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:57 +0000
Files and hashes:         1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: L9IrUJ018fsRrEJf0iSfaOB4b1H9Ghem/tLzd6pDCzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:4d:b0:53:0c:c3:c9:01:90:bf:81:84:1a:2c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
        Validity
            Not Before: Jun  7 07:00:57 2025 GMT
            Not After : Jun  8 07:00:57 2025 GMT
        Subject: CN=3bbbc94caacbe913827def92c24dd02ca98254f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:d9:2d:e3:92:b2:ba:21:5b:6d:bd:59:fc:
                    16:20:3b:2f:b5:13:2b:21:dc:cb:45:e1:30:ba:32:
                    54:ff:2b:a4:9b:7b:a5:ed:a3:08:0b:c3:d4:1f:e9:
                    75:5c:12:33:03:5b:17:8f:e9:26:c3:7b:96:35:1f:
                    45:41:40:2c:ca:95:3d:d9:2d:4a:01:b0:a7:4c:b7:
                    26:fa:82:7c:41:1d:3e:80:47:c6:6f:25:a1:af:4f:
                    46:52:4b:ef:75:13:87:17:21:23:da:87:62:ed:b9:
                    a1:9e:85:a7:1b:2f:c8:83:3d:dd:01:7f:82:0f:2d:
                    ee:ba:18:ad:82:fb:6d:8a:f5:e5:62:79:a0:cd:cf:
                    ca:f5:38:59:fc:79:8c:0d:72:3e:0f:b3:15:0f:49:
                    1e:48:ca:c4:17:30:3b:a3:80:9a:2f:17:ba:39:54:
                    cf:96:79:49:36:17:a7:48:02:d9:30:da:5a:91:e9:
                    85:af:53:b0:2e:db:29:65:f2:d7:c6:ed:99:17:0b:
                    e0:a9:93:31:7f:de:60:79:fc:4a:8a:f4:b3:1e:a2:
                    74:54:b2:fe:c5:cc:11:69:e3:1a:7b:a7:7e:76:fa:
                    ab:55:6b:a0:e4:7c:8f:ba:4b:b4:77:75:2f:ff:96:
                    d4:ec:98:73:52:6a:a2:ef:a3:cf:04:0c:9e:c2:e9:
                    66:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BB:C9:4C:AA:CB:E9:13:82:7D:EF:92:C2:4D:D0:2C:A9:82:54:F0
            X509v3 Authority Key Identifier:
                keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:83:c1:ea:a8:06:2c:d0:0c:b0:29:02:e0:71:bf:6f:80:c6:
         08:fb:84:e3:15:21:17:82:9f:1f:c0:a8:17:2a:21:7d:ae:82:
         5d:fd:43:c5:b0:be:55:9c:31:83:44:74:80:16:3c:93:55:6e:
         8f:87:ab:87:e3:8f:a5:86:8b:4f:88:3b:55:cc:3a:4c:7c:ba:
         c1:06:6c:e9:94:37:56:9b:2c:34:99:2a:66:df:5d:7b:c4:b9:
         1c:54:3d:c3:7c:f1:79:19:d5:94:48:5c:15:5e:51:5d:da:18:
         54:0f:be:0a:0d:f6:a2:ab:34:cb:bc:8b:84:59:1b:07:45:fa:
         33:2d:c8:60:7d:57:b0:8e:f4:87:41:77:08:7e:59:83:65:0d:
         d6:ac:22:9c:91:b8:d2:b6:fe:ba:ae:6f:43:4d:12:e2:fe:a1:
         ef:fa:66:16:fd:ec:c9:51:33:62:a4:ab:59:f3:de:09:12:0d:
         4b:6b:fa:1f:a4:93:71:b5:94:84:15:34:16:61:8a:67:bf:fb:
         1d:14:e2:28:73:59:29:bd:c3:28:c1:47:cf:0f:9a:00:d4:09:
         cf:d7:2b:55:d0:a2:54:f8:b1:f7:9e:86:bb:b9:e4:a5:1f:f4:
         52:7c:ab:62:a4:9f:bb:4b:3d:bb:02:41:76:7b:56:1b:a5:0d:
         42:d1:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:30 2025 by rpki-client