Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File:                     vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier:          O58xw9cfkeOVYs+pXUnXSKTsWQ4qz7LOaci88FjIZCo=
Subject key identifier:   E5:CE:55:47:DC:02:B1:94:CC:55:05:6D:FE:1D:FC:64:27:F9:C3:BB
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer:       /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial:       01974A43B94EF8D98D63916022767EE966B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number:          04BC
Signing time:             Sat 07 Jun 2025 12:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:41 +0000
Files and hashes:         1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
                          2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: F51M2OpWY84rvvsP931Kbo6+y4Y0lMDhrpumcm3j4AQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:b9:4e:f8:d9:8d:63:91:60:22:76:7e:e9:66:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
        Validity
            Not Before: Jun  7 12:00:41 2025 GMT
            Not After : Jun  8 12:00:41 2025 GMT
        Subject: CN=e5ce5547dc02b194cc55056dfe1dfc6427f9c3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e8:6c:83:71:4c:ef:e7:94:45:de:bd:b9:c4:
                    a3:bf:91:d9:82:dd:d7:e9:56:2f:0d:25:c6:5a:df:
                    95:06:70:cd:30:f1:64:b6:75:96:76:54:ce:27:c1:
                    b9:49:85:d6:fc:59:f3:17:73:11:15:7c:2e:fc:f4:
                    e6:ab:f6:a5:b5:46:84:6a:45:88:9c:c4:ed:72:2f:
                    b6:df:60:6f:2f:ed:4d:eb:78:de:4c:ec:71:66:a2:
                    d8:f4:d8:c4:ee:1b:b9:cc:d3:d5:e1:51:62:56:50:
                    53:72:43:93:cd:bc:7f:39:62:ef:e7:44:17:a1:c6:
                    63:06:4e:5a:f0:46:65:60:e6:dc:96:f5:56:33:cc:
                    a5:36:62:d6:98:be:53:56:27:3d:8d:89:d7:03:e4:
                    c2:6b:0b:fb:94:3a:0d:2d:02:e9:53:cd:98:e0:6a:
                    74:7f:4a:9b:b7:31:79:d0:20:80:11:a9:2a:8f:85:
                    1a:dd:c9:21:0d:b7:a3:84:62:6a:84:d8:8d:d3:f5:
                    87:e2:29:d5:19:42:a8:47:1d:b9:8e:9d:1f:61:95:
                    d6:8a:50:39:54:15:18:38:6e:d9:a5:a3:2d:68:94:
                    10:1f:38:66:74:73:d7:65:16:11:5b:75:33:3d:2b:
                    18:fb:9c:52:71:e8:8b:c7:26:e5:48:94:c0:00:b5:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CE:55:47:DC:02:B1:94:CC:55:05:6D:FE:1D:FC:64:27:F9:C3:BB
            X509v3 Authority Key Identifier:
                keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:06:cf:9a:88:9e:0b:b3:2e:54:95:a1:21:08:c4:b0:a7:
         59:bf:db:0d:1e:83:53:52:d5:5e:2c:3d:85:d3:0a:ac:fc:98:
         d6:64:66:a2:f7:8a:38:9e:17:1a:45:68:41:f5:a8:dd:f2:87:
         43:d5:4b:1e:9a:4b:3a:20:d1:cb:f5:ec:0b:34:9b:f4:3b:17:
         fc:5d:a8:c5:c4:f8:0b:54:f3:75:29:54:a6:9b:d4:3c:bd:ae:
         fe:be:f2:c9:d2:7e:17:82:2b:75:ef:b1:5d:15:40:76:a1:d8:
         c2:79:c0:60:ee:41:2d:98:f9:52:9d:3f:b1:f8:64:2d:33:f4:
         f3:6f:45:36:6d:4f:56:fe:59:49:8d:2b:6c:83:e9:e4:9e:2b:
         2a:1d:d6:72:f9:94:03:af:3e:3a:58:24:d4:d8:44:f9:67:7e:
         76:1c:d0:e3:d9:71:54:ad:f8:ee:53:6e:97:8f:79:90:8f:ce:
         3f:13:9b:44:61:6f:06:78:db:67:c8:cd:85:ab:c2:99:42:bc:
         71:85:8b:03:df:23:77:d3:cf:89:42:40:bf:32:e3:f6:cb:f1:
         d5:70:d5:bc:d8:01:42:4f:b5:4a:e5:b4:56:8c:4c:36:9c:55:
         3d:ee:ab:4e:42:b0:3e:ff:22:3e:29:37:45:72:8e:c9:28:d1:
         c4:21:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:54:41 2025 by rpki-client