Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File:                     Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier:          MYlInTzPkWztZEoDvywYdpKV0X3BbZkEdVzOxAlLtmk=
Subject key identifier:   62:E3:AE:7D:05:E0:8B:94:13:71:0C:B9:A4:B5:32:5C:5E:20:B4:4E
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer:       /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial:       0197481E9E929E78474695A566C6C077F5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number:          02E0
Signing time:             Sat 07 Jun 2025 02:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:55 +0000
Files and hashes:         1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: dBb8IxxFLIwDsvLZOKhIyAv8XkLA4FNrEC2BxL5TjAg=)
                          2: khiC85DUjlsg1o7l9dF2gRsEBF0.roa (hash: qYLFWH/+atttNch5GsTRIBcpVCWB/wVyM/QBIlR8hc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:9e:92:9e:78:47:46:95:a5:66:c6:c0:77:f5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
        Validity
            Not Before: Jun  7 02:00:55 2025 GMT
            Not After : Jun  8 02:00:55 2025 GMT
        Subject: CN=62e3ae7d05e08b9413710cb9a4b5325c5e20b44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:bd:fa:d2:0d:a5:46:93:f6:05:70:b4:6c:
                    a0:40:ae:10:c3:9a:89:fd:8c:ab:6a:b5:52:19:fb:
                    bb:aa:36:be:82:1f:9c:23:c5:8c:2b:bc:90:27:fe:
                    fd:30:55:99:18:00:2b:f3:8a:3c:be:ce:89:eb:39:
                    83:1e:c5:28:4c:c6:88:b4:72:98:ae:d4:b4:1a:45:
                    0d:e5:07:9c:9f:70:1c:bc:e0:00:d2:d3:56:7a:86:
                    45:59:2e:7f:0e:c3:53:42:7d:a7:ce:9c:e9:9b:ce:
                    cb:be:de:e9:f9:f9:4f:ff:bc:f7:30:8f:80:65:54:
                    f6:a5:a9:3e:67:d7:26:5f:23:c5:f1:95:31:1e:f1:
                    8e:af:50:23:8d:47:9a:03:33:45:a4:fb:61:b6:89:
                    24:34:8e:3a:6b:26:51:5e:20:4e:42:58:eb:7c:0a:
                    32:50:6e:5e:e3:92:c7:ad:c1:71:36:79:77:d7:9f:
                    73:7b:64:51:83:b7:c1:90:88:e0:fb:e4:b5:88:63:
                    bd:2a:9d:73:81:47:2c:7b:65:09:b1:72:19:68:2c:
                    e4:47:04:dd:ec:ed:e2:0d:81:6c:0e:d1:87:6c:a3:
                    a9:4f:da:7b:36:ab:20:18:e8:ff:04:df:8d:9f:42:
                    c5:1e:e8:6f:88:b3:f4:c0:9f:84:fb:69:48:4d:3e:
                    43:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E3:AE:7D:05:E0:8B:94:13:71:0C:B9:A4:B5:32:5C:5E:20:B4:4E
            X509v3 Authority Key Identifier:
                keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d9:3d:c7:49:0b:74:dd:97:e8:42:3d:1e:b5:f8:e3:82:56:
         e7:22:60:85:e1:ce:96:17:21:4c:63:18:08:4a:f1:e5:6b:15:
         95:1b:23:6e:94:d5:b1:ae:22:dc:01:89:a6:f2:da:ea:ec:48:
         1d:bf:8c:5b:e4:0f:90:07:97:56:99:af:26:d2:93:98:77:db:
         f8:09:92:50:6a:9b:e2:e1:2c:51:b1:2a:71:8b:75:3c:5a:a7:
         dc:3f:bc:15:fc:a5:72:ed:21:3c:66:c0:11:90:21:67:94:d4:
         8f:6c:38:06:e5:13:c0:f1:d7:06:1d:b8:16:5a:62:dd:65:16:
         f4:81:e5:03:93:85:cd:12:cb:66:7e:aa:b5:73:b5:c2:0d:2d:
         91:7e:1f:99:e3:b2:dd:a0:a4:69:6e:eb:82:aa:63:9a:b5:6b:
         7c:60:50:6c:b5:e3:7c:1e:41:ef:75:35:a9:b8:7e:44:cb:8c:
         6c:90:ff:cb:f4:41:ff:45:a7:cd:78:cc:88:b2:b4:1d:53:ba:
         40:18:ba:b3:4d:aa:a3:ed:08:8d:87:14:2c:c5:39:c3:f1:23:
         bc:65:e2:f0:7d:fd:6e:f9:44:13:66:61:39:99:d0:9b:e1:e5:
         e3:5f:a6:14:2c:b2:7b:8a:40:76:1f:1a:17:d6:ab:fe:88:34:
         32:5e:8e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:48 2025 by rpki-client