Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
File:                     V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft (raw, json)
Hash identifier:          RuKyf1M/Os3HlBmgzeBaTVHm0gfWN3/wTvosD+0C8Ow=
Subject key identifier:   A0:B9:7E:36:4E:3D:FF:11:18:A7:9B:BF:DD:8E:9F:58:32:80:5C:99
Authority key identifier: 57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88
Certificate issuer:       /CN=57494670e956e3fb1511948c5956e2a426793388
Certificate serial:       019651917F9EFCD8A1DCA897FD167532E6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
Manifest number:          14F9
Signing time:             Sun 20 Apr 2025 05:00:11 +0000
Manifest this update:     Sun 20 Apr 2025 05:00:11 +0000
Manifest next update:     Mon 21 Apr 2025 05:00:11 +0000
Files and hashes:         1: V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl (hash: +COFgyLk2fUvYY+18SPxfAZCES19hIWDr/UT5T5ylow=)
                          2: r-28W7p2cDJvCgLzOQBlRQJral0.roa (hash: UHzSXGk7KneB035Tlu46305yUHm6EAg31b6sSaT63g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:51:91:7f:9e:fc:d8:a1:dc:a8:97:fd:16:75:32:e6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57494670e956e3fb1511948c5956e2a426793388
        Validity
            Not Before: Apr 20 05:00:11 2025 GMT
            Not After : Apr 21 05:00:11 2025 GMT
        Subject: CN=a0b97e364e3dff1118a79bbfdd8e9f5832805c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:95:40:3a:63:34:2a:70:9e:be:1b:41:33:89:
                    58:fb:c2:39:57:58:6a:94:40:86:7e:8c:7b:de:9c:
                    f7:5e:d7:c7:19:92:52:5b:00:09:5f:32:6a:89:00:
                    aa:0e:34:16:38:f4:fa:af:c9:b9:39:f4:fc:f7:1a:
                    03:4c:52:a9:46:b2:95:21:fa:a2:0f:64:16:72:7b:
                    f7:1f:2e:31:c2:5c:c2:d2:64:51:8f:db:28:b0:4d:
                    b4:86:77:ee:e2:25:d5:33:64:46:a8:0a:e6:21:4b:
                    e0:5e:88:19:f7:d5:bf:39:7b:a7:24:8a:41:60:e0:
                    7c:51:d5:38:e6:36:7d:6c:12:23:5d:67:e5:f1:38:
                    1e:2e:49:27:30:43:68:eb:d6:66:7f:0a:7d:2d:f9:
                    fb:67:be:d7:08:95:97:b3:03:7e:98:2e:af:50:98:
                    5c:18:d9:4e:fb:b1:4a:14:f8:9b:76:96:2a:4b:ba:
                    5c:fb:00:23:0e:13:81:02:91:e6:3d:7b:73:d8:4c:
                    87:47:27:31:54:f6:ae:63:cf:0f:68:8a:05:a0:3c:
                    ba:7c:79:82:33:66:7e:21:6b:c7:e7:5a:bb:c6:7a:
                    25:9a:2b:74:45:09:c0:fc:59:0e:d0:be:88:36:be:
                    af:84:63:55:14:d7:dc:ca:b0:40:d0:c8:10:6a:d6:
                    fe:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B9:7E:36:4E:3D:FF:11:18:A7:9B:BF:DD:8E:9F:58:32:80:5C:99
            X509v3 Authority Key Identifier:
                keyid:57:49:46:70:E9:56:E3:FB:15:11:94:8C:59:56:E2:A4:26:79:33:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0lGcOlW4_sVEZSMWVbipCZ5M4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/49881e-b0a9-4d5f-b072-a53772b01cb2/1/V0lGcOlW4_sVEZSMWVbipCZ5M4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e3:8a:82:56:8d:8b:31:6e:5f:7b:ff:a2:11:04:b6:f1:66:
         5b:82:8f:15:b6:3c:60:01:76:c4:b3:1f:e0:16:bd:ee:5a:b2:
         89:05:0e:04:1d:06:0f:f7:86:6d:5d:8f:a0:0a:49:cd:6c:ed:
         1c:81:21:64:10:a8:21:38:f7:97:fa:d4:1f:57:1f:98:6e:fe:
         16:08:71:1e:46:52:17:e7:b2:b0:82:3c:fc:64:ed:36:e8:30:
         ea:10:96:fc:76:20:fa:c7:42:61:67:d5:c3:7b:a6:e3:4a:9a:
         be:68:d0:e6:c0:8a:d3:65:fc:76:b0:1b:d0:5a:ce:96:92:cd:
         74:16:a5:22:9c:cb:5e:d8:34:03:09:55:60:c7:69:18:ad:3b:
         7b:49:d0:f3:24:92:8f:94:8d:10:66:a4:4b:d8:1d:97:21:5a:
         44:26:24:89:18:01:36:e5:91:5c:11:c5:f9:07:a7:fc:e3:1b:
         91:bc:d1:46:66:13:50:7b:29:fd:c6:0c:1b:fb:4b:4a:ce:1b:
         23:82:91:2c:c2:e6:a7:a9:2f:35:ab:cd:09:a8:4e:0e:1e:0d:
         73:00:3a:49:2e:46:6d:31:5e:5a:76:5b:d9:ca:e8:f2:3e:99:
         45:22:a5:d9:44:76:51:20:eb:31:b6:71:a8:37:71:61:50:ec:
         a6:d5:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:19 2025 by rpki-client