Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File:                     VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier:          A2NFwSZ7m5WA6WP4j+95zyDKQH/3TzD9zwSaEWgKCk4=
Subject key identifier:   8A:A7:8C:81:7E:E8:74:03:14:FD:E5:0F:1E:4D:22:2F:74:A3:F4:BD
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer:       /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial:       0197488C61C69D638718E35B263FC61A155E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number:          068D
Signing time:             Sat 07 Jun 2025 04:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:48 +0000
Files and hashes:         1: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: BeqM7Y5s81Sfva5QhEwu6eYr61h7WGcTsbtP9PCwtcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:61:c6:9d:63:87:18:e3:5b:26:3f:c6:1a:15:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
        Validity
            Not Before: Jun  7 04:00:48 2025 GMT
            Not After : Jun  8 04:00:48 2025 GMT
        Subject: CN=8aa78c817ee8740314fde50f1e4d222f74a3f4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:db:8a:8d:2a:e4:36:66:73:18:b9:6f:be:
                    b8:7a:b3:38:4b:bd:53:d8:b9:d5:9a:9f:0c:10:b0:
                    40:93:d2:31:6d:7b:df:e3:7d:ee:0b:35:d7:67:83:
                    68:96:3e:b6:5d:55:00:49:74:9e:ed:49:dc:7d:11:
                    23:fd:7e:0c:1a:af:d4:87:38:2f:05:de:67:26:e7:
                    4d:a0:30:d3:f9:47:af:9d:6c:66:c4:38:80:30:25:
                    0b:17:13:6a:2f:13:0e:80:ba:81:9d:2a:05:3c:fc:
                    00:75:09:00:cc:4d:21:5d:64:e7:e2:ee:15:c7:96:
                    39:4e:b0:82:3a:5b:04:c3:3b:97:7e:28:cb:18:e5:
                    d4:19:fd:49:e9:2d:8e:25:68:57:54:3a:b0:41:18:
                    7b:56:89:2b:f9:60:e6:4f:7f:a7:7e:4c:bc:f3:f9:
                    85:98:ad:ad:8e:e1:f7:1f:83:08:50:b2:0d:c8:24:
                    7f:95:c5:b0:ba:94:b0:60:cd:7c:30:75:86:d4:84:
                    64:3e:72:ae:2c:0c:eb:ca:e4:cc:5f:36:45:d0:b1:
                    81:b0:16:8b:84:ab:7d:7a:f3:56:15:c1:33:41:7a:
                    ec:49:91:ba:3a:bb:e0:a1:7b:f0:d1:48:9d:ee:30:
                    44:5a:6c:ed:61:de:d3:75:d1:2c:9c:c2:e2:97:a1:
                    2e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:8C:81:7E:E8:74:03:14:FD:E5:0F:1E:4D:22:2F:74:A3:F4:BD
            X509v3 Authority Key Identifier:
                keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:17:59:1c:2c:c0:38:7f:3c:30:49:30:6a:81:52:5c:48:
         5b:bd:d9:47:72:3f:53:31:d6:d3:28:c4:8e:d4:d4:e2:50:b1:
         d4:3f:64:62:3a:3e:cf:21:57:a8:51:d2:24:c2:54:76:6a:97:
         2c:af:eb:7f:30:48:c1:ee:10:cb:b1:1d:40:b9:f0:33:eb:d5:
         03:dd:a8:74:78:ea:24:a7:67:a6:c6:0a:8f:ec:a1:fe:e8:1d:
         31:3c:01:a0:a5:5c:af:ba:72:05:c5:0d:53:46:10:32:35:d3:
         34:8d:af:75:24:ea:a3:85:87:ad:e2:ac:1e:9f:fa:d5:36:b5:
         36:98:a7:80:b3:93:49:90:e5:a5:56:34:6c:04:41:04:54:b4:
         52:cb:dd:8a:44:80:80:b4:02:d7:8a:9b:21:83:b1:11:ba:c7:
         e5:cf:da:56:3d:d7:5f:d5:26:de:3e:d5:7f:45:34:6d:6d:04:
         38:07:b2:71:eb:3a:60:fd:a0:05:55:09:c2:f8:cc:df:a9:12:
         7f:03:e2:5a:e0:75:60:bc:49:16:db:dd:5c:86:67:1f:3b:0a:
         a3:34:f6:cf:e2:0a:12:9f:e9:a5:68:f9:c3:64:20:b2:e6:91:
         20:3b:50:5d:61:1c:17:54:6c:90:2b:52:d2:40:dc:a9:8c:d7:
         5c:24:1a:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjGHGnWOHGONbJj/GGhVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi
OTc2ZWQwHhcNMjUwNjA3MDQwMDQ4WhcNMjUwNjA4MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg4YWE3OGM4MTdlZTg3NDAzMTRmZGU1MGYxZTRkMjIyZjc0YTNmNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodjbio0q5DZmcxi5b764erM4S71T
2LnVmp8MELBAk9IxbXvf433uCzXXZ4Nolj62XVUASXSe7UncfREj/X4MGq/Uhzgv
Bd5nJudNoDDT+UevnWxmxDiAMCULFxNqLxMOgLqBnSoFPPwAdQkAzE0hXWTn4u4V
x5Y5TrCCOlsEwzuXfijLGOXUGf1J6S2OJWhXVDqwQRh7Vokr+WDmT3+nfky88/mF
mK2tjuH3H4MIULINyCR/lcWwupSwYM18MHWG1IRkPnKuLAzryuTMXzZF0LGBsBaL
hKt9evNWFcEzQXrsSZG6OrvgoXvw0Uid7jBEWmztYd7TddEsnMLil6EuDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqnjIF+6HQDFP3lDx5NIi90o/S9MB8GA1UdIwQY
MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt
ZTNmYTllNjNiOWJjLzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj
LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbcXWRws
wDh/PDBJMGqBUlxIW73ZR3I/UzHW0yjEjtTU4lCx1D9kYjo+zyFXqFHSJMJUdmqX
LK/rfzBIwe4Qy7EdQLnwM+vVA92odHjqJKdnpsYKj+yh/ugdMTwBoKVcr7pyBcUN
U0YQMjXTNI2vdSTqo4WHreKsHp/61Ta1NpingLOTSZDlpVY0bARBBFS0UsvdikSA
gLQC14qbIYOxEbrH5c/aVj3XX9Um3j7Vf0U0bW0EOAeyces6YP2gBVUJwvjM36kS
fwPiWuB1YLxJFtvdXIZnHzsKozT2z+IKEp/ppWj5w2QgsuaRIDtQXWEcF1RskCtS
0kDcqYzXXCQaNg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:33:20 2025 by rpki-client