Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
File:                     veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json)
Hash identifier:          ctUi0oS+tT8sVrmIZs35U6SstagSZVK/13gDQiZbync=
Subject key identifier:   A9:0D:BD:D8:00:4B:56:E3:C6:91:61:10:93:39:FB:C4:5F:36:AE:D8
Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5
Certificate issuer:       /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
Certificate serial:       01974EFBE70C320B84D53BAA91CF667874CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
Manifest number:          08B2
Signing time:             Sun 08 Jun 2025 10:00:20 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:20 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:20 +0000
Files and hashes:         1: BIfb7ZxJcI_z8KzHeX5n3JHCcq0.roa (hash: zQ0KDMqG7X6AzmJpBDsrH1YQkiSpOUR257iu4JXF7UQ=)
                          2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: MiNxozzrohBAEyKwhAroA8CW7XG1NlIzmE2ejgSgEu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fb:e7:0c:32:0b:84:d5:3b:aa:91:cf:66:78:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5
        Validity
            Not Before: Jun  8 10:00:20 2025 GMT
            Not After : Jun  9 10:00:20 2025 GMT
        Subject: CN=a90dbdd8004b56e3c69161109339fbc45f36aed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d5:be:8d:0f:32:b6:31:81:2f:8d:f3:dd:65:
                    9f:0b:34:8e:64:71:54:4a:ba:3b:5a:89:40:4a:ad:
                    35:2f:bf:70:9d:a9:28:88:91:8c:ae:f5:28:f4:00:
                    d4:5c:d3:79:f1:7f:5a:a0:fa:f8:ca:04:56:c8:25:
                    3a:bc:4d:74:7a:c1:f0:09:99:ce:9d:99:ad:af:74:
                    74:a6:ce:b8:7c:79:88:8c:2e:79:b9:4b:5b:6b:e0:
                    9c:2b:30:e4:95:6d:06:06:67:46:2c:46:fd:78:e8:
                    65:73:1a:ad:ec:50:95:35:f9:e2:95:88:6c:d6:e5:
                    e4:26:36:8e:dd:b8:ef:0e:1b:61:84:22:33:ad:aa:
                    1d:4c:29:e5:80:2d:10:41:ef:85:a3:83:fa:54:1f:
                    98:6a:7a:fe:36:f7:f9:b2:e5:d1:c1:08:0e:1c:f0:
                    66:bb:34:4f:c8:3b:0b:9a:03:0a:57:88:fe:92:83:
                    b0:78:2a:e2:ec:4a:c0:d3:63:df:38:53:4a:6a:b2:
                    c0:43:ba:55:e3:fc:30:0e:0d:ed:5b:a9:97:d9:10:
                    2f:ab:d5:f1:27:69:64:02:b5:36:ba:cc:1a:45:16:
                    74:6d:26:d8:bf:b5:91:24:e3:3c:22:66:48:a6:46:
                    a1:c1:b6:9e:6f:59:7a:f9:05:96:92:e2:f6:65:90:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0D:BD:D8:00:4B:56:E3:C6:91:61:10:93:39:FB:C4:5F:36:AE:D8
            X509v3 Authority Key Identifier:
                keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:00:f9:38:28:f6:55:60:15:3a:f4:42:34:cc:40:f7:1a:9f:
         d7:a6:53:de:e7:b8:39:0d:83:a8:7f:74:63:80:0c:94:19:f5:
         bb:be:16:ef:07:e3:7f:0e:a3:aa:fb:0e:b5:9c:3f:8b:5d:8a:
         42:70:3d:52:3b:16:67:75:a2:71:8d:bc:b8:75:4d:4b:41:39:
         f5:2b:c8:5b:6a:82:06:93:dd:09:b4:6f:e8:05:f8:8f:cd:2e:
         01:37:17:9e:22:ef:95:26:06:1b:4f:a5:9f:4f:8c:fd:ec:68:
         0b:7d:dd:fa:64:1d:41:ac:4a:69:79:c2:31:4e:0f:92:ea:96:
         2d:72:7b:cb:44:45:c4:bb:6e:bc:05:98:f9:4b:13:19:01:06:
         0a:49:94:a4:72:58:a0:cc:4e:17:b6:9e:78:f9:d0:78:7a:d1:
         30:87:90:4d:b2:01:bb:fd:45:39:c1:3b:ff:32:83:b7:b9:69:
         cc:5b:05:b8:70:b7:08:12:5e:1a:d1:fe:5d:9b:a7:01:c3:ca:
         82:de:b9:36:15:b1:28:f1:0f:c8:93:df:6d:fb:55:e6:e2:84:
         6b:81:cb:dc:b6:cc:a9:78:94:78:63:53:be:1f:4e:83:07:71:
         f6:5e:b5:ab:07:8c:c2:05:2c:5c:a8:fb:0c:4f:09:d2:a2:3e:
         29:5c:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:40:10 2025 by rpki-client