Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File:                     VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier:          AAwkiRzOck0zbNC20xu6JIxD3fWp8TdJAZ9IpYpdmxs=
Subject key identifier:   58:DE:E6:47:5E:5C:62:87:21:83:9C:72:1D:38:7C:24:A6:64:45:58
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer:       /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial:       01964255CC7C693E3D56678528FB26711FA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number:          0F96
Signing time:             Thu 17 Apr 2025 06:00:41 +0000
Manifest this update:     Thu 17 Apr 2025 06:00:41 +0000
Manifest next update:     Fri 18 Apr 2025 06:00:41 +0000
Files and hashes:         1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
                          2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
                          3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: 9gC2E0vt6rqS61KDRdt0IdwXkpwlB5uHZ3QpAd2ljyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:55:cc:7c:69:3e:3d:56:67:85:28:fb:26:71:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
        Validity
            Not Before: Apr 17 06:00:41 2025 GMT
            Not After : Apr 18 06:00:41 2025 GMT
        Subject: CN=58dee6475e5c628721839c721d387c24a6644558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:4e:55:93:0f:40:9f:ed:68:83:b4:19:2e:
                    90:37:fb:bc:9c:1c:68:0c:35:1a:f7:69:b3:a6:76:
                    95:ee:5e:d5:cb:7e:d6:99:aa:e9:b5:31:20:ef:54:
                    dd:ae:ba:81:bd:c4:a3:57:b2:57:f1:35:47:ee:aa:
                    21:9e:4a:55:d6:3e:83:8d:07:50:ca:05:2e:e1:cc:
                    af:25:e4:11:dc:a8:06:04:59:4e:0b:92:48:7b:f2:
                    8c:85:e3:ae:31:01:60:d8:ab:03:5a:14:86:c2:90:
                    ef:9e:03:c6:31:f3:ed:55:a0:ab:37:83:c4:88:07:
                    e4:0b:f0:4c:58:b9:a9:74:f4:d9:e9:c9:58:00:f2:
                    c2:76:d6:c3:aa:03:eb:3d:0d:da:04:bf:f9:09:8f:
                    19:2f:be:aa:01:9b:82:77:97:46:55:3c:0b:d2:bf:
                    d3:a5:f9:9d:47:8a:4a:25:37:82:c6:ff:a3:f7:90:
                    c9:b9:63:54:af:33:01:39:20:a3:17:76:98:44:8f:
                    08:54:ed:a1:3a:04:fc:f2:f9:f1:af:9d:7a:ff:a9:
                    47:c9:d3:c1:ec:88:a7:71:9e:68:1c:f9:6b:b3:83:
                    18:93:0d:70:c2:d2:54:b7:0c:c8:bb:90:22:f3:e7:
                    25:d3:83:82:99:3d:50:c9:43:fe:6d:67:29:d9:d3:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DE:E6:47:5E:5C:62:87:21:83:9C:72:1D:38:7C:24:A6:64:45:58
            X509v3 Authority Key Identifier:
                keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:4c:9f:86:2b:06:c9:1e:56:d9:4e:78:ea:7e:11:ed:46:
         73:f9:a9:5b:89:09:f0:07:de:58:99:44:80:68:f3:89:49:d6:
         cc:b8:2e:e4:de:bc:2b:49:27:e9:2b:4c:8d:d6:93:00:3d:cc:
         86:92:e6:b8:1f:6d:9f:dd:76:27:73:c1:39:17:30:54:e2:be:
         1a:f2:7a:75:a8:39:bb:ec:5b:17:5f:9c:58:2e:3b:05:1a:ac:
         63:3c:6d:20:db:a9:54:5d:a6:0b:75:9e:f1:7e:b2:76:ec:52:
         86:31:68:15:54:ff:59:c4:e5:80:ec:62:3f:46:2f:5f:d5:78:
         b3:b8:7d:a9:43:2b:3a:0e:91:5a:ab:55:72:51:8f:d6:07:a5:
         32:4e:dd:9c:db:21:40:93:c4:3d:ca:99:54:73:e0:a9:31:15:
         93:4a:4f:70:49:fe:7f:4e:68:22:8f:62:38:a2:1c:de:d0:f0:
         f3:4e:ed:aa:40:d9:35:fe:e3:ca:9b:2b:b1:da:3f:99:3b:9b:
         3e:2a:eb:90:b6:81:4a:ad:fd:ab:68:0f:4f:95:22:f9:a1:70:
         35:4f:33:c2:54:63:ee:1b:b7:7e:64:b5:d8:7c:54:9a:c2:bd:
         7f:ad:52:b9:06:59:7f:7e:4f:37:78:a9:c5:5c:43:70:3c:33:
         c2:c0:d1:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZCVcx8aT49VmeFKPsmcR+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5
ODAwMzMwHhcNMjUwNDE3MDYwMDQxWhcNMjUwNDE4MDYwMDQxWjAzMTEwLwYDVQQD
Eyg1OGRlZTY0NzVlNWM2Mjg3MjE4MzljNzIxZDM4N2MyNGE2NjQ0NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TtOVZMPQJ/taIO0GS6QN/u8nBxo
DDUa92mzpnaV7l7Vy37WmarptTEg71TdrrqBvcSjV7JX8TVH7qohnkpV1j6DjQdQ
ygUu4cyvJeQR3KgGBFlOC5JIe/KMheOuMQFg2KsDWhSGwpDvngPGMfPtVaCrN4PE
iAfkC/BMWLmpdPTZ6clYAPLCdtbDqgPrPQ3aBL/5CY8ZL76qAZuCd5dGVTwL0r/T
pfmdR4pKJTeCxv+j95DJuWNUrzMBOSCjF3aYRI8IVO2hOgT88vnxr516/6lHydPB
7IincZ5oHPlrs4MYkw1wwtJUtwzIu5Ai8+cl04OCmT1QyUP+bWcp2dMzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFje5kdeXGKHIYOcch04fCSmZEVYMB8GA1UdIwQY
MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt
YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh
LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1VMn4Yr
BskeVtlOeOp+Ee1Gc/mpW4kJ8AfeWJlEgGjziUnWzLgu5N68K0kn6StMjdaTAD3M
hpLmuB9tn912J3PBORcwVOK+GvJ6dag5u+xbF1+cWC47BRqsYzxtINupVF2mC3We
8X6yduxShjFoFVT/WcTlgOxiP0YvX9V4s7h9qUMrOg6RWqtVclGP1gelMk7dnNsh
QJPEPcqZVHPgqTEVk0pPcEn+f05oIo9iOKIc3tDw807tqkDZNf7jypsrsdo/mTub
PirrkLaBSq39q2gPT5Ui+aFwNU8zwlRj7hu3fmS12HxUmsK9f61SuQZZf35PN3ip
xVxDcDwzwsDRaQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:55:48 2025 by rpki-client