Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          K/SDTQgC0sa9ksL9n2/F/fc/E++NXeV8b3iFPI0nqN8=
Subject key identifier:   77:27:B0:A8:FD:01:E3:1F:9C:45:22:73:93:74:23:14:58:5D:37:72
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       01975234E69953E477A8DD93D937A3788C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          1581
Signing time:             Mon 09 Jun 2025 01:01:27 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:27 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:27 +0000
Files and hashes:         1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=)
                          2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: 2wcL9qyS9OGOkzGRdC01RTqUMxSlSI6vIk1rs9PxH/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:e6:99:53:e4:77:a8:dd:93:d9:37:a3:78:8c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Jun  9 01:01:27 2025 GMT
            Not After : Jun 10 01:01:27 2025 GMT
        Subject: CN=7727b0a8fd01e31f9c45227393742314585d3772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:01:84:d1:5a:aa:fe:78:6a:ad:25:66:ad:
                    50:4e:f3:9a:f0:1f:cc:26:07:27:65:14:c4:f0:22:
                    9a:ba:fc:68:67:0d:ca:d4:8a:3c:ea:63:0e:54:fd:
                    48:26:4d:e2:16:62:3e:6e:5c:ee:96:99:4b:7d:97:
                    a2:a6:bc:ce:27:e6:17:f2:42:d9:98:23:a0:af:a6:
                    7a:48:51:da:4d:c7:96:35:da:e1:7b:52:73:5e:b5:
                    c5:30:3d:91:91:b1:7d:f6:3b:ba:15:dd:d3:f1:8a:
                    ba:41:7b:ba:0a:1d:0a:f3:28:ce:cb:48:93:b7:79:
                    16:a7:e1:5f:9f:dc:a2:4b:92:a1:e1:59:d2:ee:7a:
                    6e:11:1c:3f:26:85:ad:3f:70:d6:38:45:71:d0:3a:
                    c8:ce:be:cf:f9:f6:a0:b7:e3:ff:a4:91:84:4d:a3:
                    4f:82:e8:ff:f1:c0:1a:e2:2d:65:a2:3a:59:7e:b1:
                    cf:54:85:a9:a2:e3:3e:53:af:3c:d8:b2:7b:a7:33:
                    8d:81:6b:70:1d:07:04:3a:8f:e7:dd:fa:0c:2e:59:
                    11:f6:ba:eb:28:6f:c5:61:8b:df:ea:df:d4:10:df:
                    1e:e6:e4:82:ba:8c:05:cf:a3:9d:89:33:60:89:d5:
                    f9:f2:f3:40:e2:36:85:47:e1:fa:d8:93:2e:8c:a9:
                    6c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:27:B0:A8:FD:01:E3:1F:9C:45:22:73:93:74:23:14:58:5D:37:72
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:4c:03:1b:30:4e:70:62:68:c2:03:b5:6f:0c:47:c0:0b:0d:
         df:ef:cf:1a:c9:f5:22:51:56:86:10:69:84:25:36:af:ca:f8:
         2c:8e:f7:98:fc:5d:59:e0:6c:aa:60:48:2a:9a:39:f0:48:f2:
         9e:74:25:90:27:10:b7:7c:8a:b9:7f:50:95:86:26:14:0a:1d:
         94:92:4e:c8:93:a2:47:8e:82:f3:6f:15:d9:c0:cc:55:c1:66:
         cb:8d:92:a2:ae:71:ff:12:b0:53:e6:bc:a4:a2:56:32:a3:93:
         1a:3f:c5:25:21:c4:6f:b1:eb:a7:e9:2f:9b:49:86:47:77:2a:
         89:5b:3e:03:25:93:f2:61:63:df:ed:e0:c6:69:78:14:2a:86:
         48:00:5d:9e:6b:ca:52:29:83:5d:ba:d1:36:6e:df:23:2b:e5:
         9e:b0:a0:a0:41:7d:0b:71:13:e8:4d:a9:ec:0c:41:24:4e:5a:
         17:11:5f:d4:ed:d8:71:b6:48:93:16:14:6d:87:57:8b:3c:5c:
         05:0b:dd:98:fc:1e:ee:24:6c:2e:25:51:2f:df:2c:83:5a:20:
         23:da:39:db:96:16:df:a6:e5:67:71:1a:9d:35:33:1c:51:04:
         29:6e:ee:25:bf:4f:7e:2d:e5:26:88:13:05:b0:34:ab:74:92:
         8e:88:99:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNOaZU+R3qN2T2TejeIxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNmM0OTdmZjRkNGE4YmI1YTI0YmRkMjA1MTU3NWI0OWEw
ODNjNzUwHhcNMjUwNjA5MDEwMTI3WhcNMjUwNjEwMDEwMTI3WjAzMTEwLwYDVQQD
Eyg3NzI3YjBhOGZkMDFlMzFmOWM0NTIyNzM5Mzc0MjMxNDU4NWQzNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK4BhNFaqv54aq0lZq1QTvOa8B/M
JgcnZRTE8CKauvxoZw3K1Io86mMOVP1IJk3iFmI+blzulplLfZeiprzOJ+YX8kLZ
mCOgr6Z6SFHaTceWNdrhe1JzXrXFMD2RkbF99ju6Fd3T8Yq6QXu6Ch0K8yjOy0iT
t3kWp+Ffn9yiS5Kh4VnS7npuERw/JoWtP3DWOEVx0DrIzr7P+fagt+P/pJGETaNP
guj/8cAa4i1lojpZfrHPVIWpouM+U6882LJ7pzONgWtwHQcEOo/n3foMLlkR9rrr
KG/FYYvf6t/UEN8e5uSCuowFz6OdiTNgidX58vNA4jaFR+H62JMujKlsDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcnsKj9AeMfnEUic5N0IxRYXTdyMB8GA1UdIwQY
MBaAFL5sSX/01Ki7WiS90gUVdbSaCDx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2It
NjVhZTU4YTliZWU4LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi81ZGI4ZWItY2NjYy00OThhLTgxY2ItNjVhZTU4YTliZWU4
LzEvdm14SmZfVFVxTHRhSkwzU0JSVjF0Sm9JUEhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0wDGzBO
cGJowgO1bwxHwAsN3+/PGsn1IlFWhhBphCU2r8r4LI73mPxdWeBsqmBIKpo58Ejy
nnQlkCcQt3yKuX9QlYYmFAodlJJOyJOiR46C828V2cDMVcFmy42Soq5x/xKwU+a8
pKJWMqOTGj/FJSHEb7Hrp+kvm0mGR3cqiVs+AyWT8mFj3+3gxml4FCqGSABdnmvK
UimDXbrRNm7fIyvlnrCgoEF9C3ET6E2p7AxBJE5aFxFf1O3YcbZIkxYUbYdXizxc
BQvdmPwe7iRsLiVRL98sg1ogI9o525YW36blZ3EanTUzHFEEKW7uJb9Pfi3lJogT
BbA0q3SSjoiZ4A==
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:04:34 2025 by rpki-client