Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File:                     vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier:          40v122ZaCMIlrUSggqHzXPyQj0S7IwgEM4f3i3qHnUg=
Subject key identifier:   09:85:36:A6:76:2D:92:16:D0:E8:9B:91:1E:A9:4F:D6:57:21:B8:54
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer:       /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial:       01974D7B9C132CEAF76AE254079BE75E53B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number:          0B84
Signing time:             Sun 08 Jun 2025 03:00:35 +0000
Manifest this update:     Sun 08 Jun 2025 03:00:35 +0000
Manifest next update:     Mon 09 Jun 2025 03:00:35 +0000
Files and hashes:         1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
                          2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: BPq8kiJJfSL3SkKiyCSF/LsEjs1+DZpd4E3lDAIzuK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:7b:9c:13:2c:ea:f7:6a:e2:54:07:9b:e7:5e:53:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
        Validity
            Not Before: Jun  8 03:00:35 2025 GMT
            Not After : Jun  9 03:00:35 2025 GMT
        Subject: CN=098536a6762d9216d0e89b911ea94fd65721b854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:27:73:1f:2a:f6:b1:7b:82:c1:71:3e:02:
                    c2:b2:ff:3a:56:e2:8b:c4:3b:a6:c1:8a:d3:bf:b8:
                    48:02:7a:0d:da:f9:5a:d0:9f:6c:af:2f:36:11:dc:
                    02:d3:9b:88:12:c7:5a:64:d5:b3:46:34:7f:57:b7:
                    41:c1:85:ba:2b:ce:9a:c3:42:df:1d:01:d9:18:83:
                    2d:84:a6:19:76:ed:f2:91:c4:7d:61:98:5e:15:6d:
                    f4:39:a4:c9:a7:ba:b3:33:25:11:6e:72:ed:1b:21:
                    3d:73:cb:97:98:78:86:ef:d7:8f:c9:5f:eb:4d:82:
                    82:8c:bf:51:01:67:be:ed:3a:08:ac:d6:88:a1:cc:
                    f1:84:77:ab:08:5d:1e:0e:c4:d3:88:24:af:18:8f:
                    f8:7d:83:70:32:93:48:60:99:d1:fb:bb:f5:44:c1:
                    f4:2c:1c:a7:ca:9e:e7:ae:c5:1f:ca:1d:70:75:71:
                    03:3a:1a:7e:90:05:37:27:8a:48:3b:4f:36:c0:b8:
                    4c:58:ac:2e:bf:cf:af:d3:d0:0b:3c:19:1c:96:41:
                    73:0b:e1:ca:0d:f1:01:37:3e:ac:53:f5:c6:02:51:
                    53:18:08:6c:4e:8a:b9:a5:49:1e:8d:c6:3d:4e:fb:
                    e6:27:b8:22:4b:fb:6d:fb:14:0a:00:be:0b:4a:ae:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:85:36:A6:76:2D:92:16:D0:E8:9B:91:1E:A9:4F:D6:57:21:B8:54
            X509v3 Authority Key Identifier:
                keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f4:74:5e:86:f0:10:1e:f9:e2:e1:7d:4c:9d:fd:3e:78:f7:
         8b:e7:c3:9a:03:16:27:4b:66:8a:a0:32:78:83:73:1e:61:cd:
         54:86:50:73:30:f9:22:d6:6c:01:8c:f6:95:0b:ee:fd:e8:43:
         17:fc:6c:58:25:dc:8e:6e:22:25:7f:ab:3f:5d:8b:38:77:3a:
         ea:c4:db:60:7a:c0:a6:af:54:a3:be:d5:de:9c:54:61:00:7c:
         e3:7d:60:fb:77:56:a9:9d:b5:8c:8e:2a:22:f8:d1:9a:ae:46:
         b8:64:a2:f4:bf:03:e6:7f:14:d7:99:e2:ae:2b:be:c1:0a:b5:
         f2:4b:19:9a:a3:f2:bf:b0:60:1e:29:97:69:e4:f8:fc:d9:be:
         f3:a6:ec:a5:c4:a1:ea:0a:7f:48:a5:b9:58:27:bd:15:93:c3:
         0d:bc:9f:86:18:27:cf:8f:22:11:29:ea:31:79:89:5c:55:12:
         33:48:8c:64:ac:4f:66:2e:47:d3:bd:ac:eb:51:a1:d5:6d:27:
         5e:f6:5a:d2:29:79:e3:b3:53:d8:9b:ac:23:9e:dc:09:b5:5e:
         3e:32:f6:f3:18:81:0d:fc:28:9b:b1:bb:9d:95:37:96:29:9a:
         7d:8f:d3:31:18:61:4a:d9:88:f0:ff:55:3b:a9:a3:2a:b4:cf:
         7e:2c:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:34:22 2025 by rpki-client