Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
File:                     vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft (raw, json)
Hash identifier:          VJ7RnDIgp9S/fCCRj99dTXCWNtesCeKpN3lxa2ii33c=
Subject key identifier:   7B:19:55:8C:82:74:1A:2F:32:F6:C3:92:B6:52:9C:DC:8C:D3:CC:11
Authority key identifier: BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58
Certificate issuer:       /CN=bc75052b50256ba562904e6f134350d3e75ded58
Certificate serial:       01958B4E0C94146E984FD61B9E7F91A598D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
Manifest number:          1495
Signing time:             Wed 12 Mar 2025 17:01:42 +0000
Manifest this update:     Wed 12 Mar 2025 17:01:42 +0000
Manifest next update:     Thu 13 Mar 2025 17:01:42 +0000
Files and hashes:         1: vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl (hash: HESyXPRLNNefmRJgjWrWF0cNCagA47g5vxl+EXydi5A=)
                          2: yPRaM8Xt_LjcnEp6FMoPxSjubrg.roa (hash: 5MRfMsBo6t3UJiAKxq7MCbDbIZDyOCcBOja7hPHJABg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 17:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:4e:0c:94:14:6e:98:4f:d6:1b:9e:7f:91:a5:98:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc75052b50256ba562904e6f134350d3e75ded58
        Validity
            Not Before: Mar 12 17:01:42 2025 GMT
            Not After : Mar 13 17:01:42 2025 GMT
        Subject: CN=7b19558c82741a2f32f6c392b6529cdc8cd3cc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:df:f1:51:02:ae:85:fa:75:39:ee:93:83:81:
                    6f:8c:70:86:f5:23:23:84:10:38:7c:f3:7c:67:f8:
                    d0:a3:26:5b:4a:14:02:23:c6:14:75:c6:92:25:7d:
                    9b:25:c2:34:e8:08:7e:5f:0d:60:5d:b3:c5:c5:00:
                    c9:fa:6c:b8:88:b9:69:70:d0:34:b1:bc:a1:a4:f4:
                    34:a1:0f:f9:2b:5d:7e:97:aa:04:4d:10:5c:5d:d6:
                    bb:a5:01:99:43:04:d7:f8:01:26:c9:b2:aa:2b:44:
                    32:c6:e5:04:cb:e7:fb:7b:6d:d3:13:1a:9e:4e:ee:
                    5b:7f:fa:ac:87:2d:74:22:ba:31:40:2d:69:42:e9:
                    c7:9b:52:f3:63:95:af:cf:ef:a9:98:cd:fe:fd:3b:
                    0c:64:c4:c7:73:49:92:b6:42:73:d5:29:c6:ba:49:
                    73:44:57:09:10:ec:00:6e:5d:08:e5:a9:c9:b5:9f:
                    1e:63:d0:70:78:2e:9a:ea:b8:c4:13:07:57:35:06:
                    ca:bf:64:b4:3f:72:d3:b3:2e:1c:90:ce:f2:a1:74:
                    48:4b:f6:79:e3:10:ff:f1:b3:a4:86:14:d0:78:c4:
                    6f:c9:36:17:8e:ee:60:1b:8b:56:ca:61:b1:fa:c6:
                    4a:0b:c1:a2:55:db:d6:2e:8a:bb:68:b9:0f:33:0d:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:55:8C:82:74:1A:2F:32:F6:C3:92:B6:52:9C:DC:8C:D3:CC:11
            X509v3 Authority Key Identifier:
                keyid:BC:75:05:2B:50:25:6B:A5:62:90:4E:6F:13:43:50:D3:E7:5D:ED:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8fe82f-e6cf-4a62-87dd-ea13eb797e8c/1/vHUFK1Ala6VikE5vE0NQ0-dd7Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:9a:2f:ec:8a:95:42:df:66:9d:3b:04:1f:0a:6b:4f:bb:
         b5:dc:64:18:da:eb:87:cd:ea:70:4a:f6:cd:3b:65:5a:92:3e:
         52:28:b7:40:35:23:e5:af:b4:e2:e2:39:25:51:27:4b:07:a7:
         86:e0:c6:d3:c8:cf:c4:fc:86:3a:31:d9:74:c3:3a:c7:db:6d:
         03:11:46:4c:ea:11:62:67:dc:01:2c:6a:b2:7d:de:80:f3:f8:
         e3:da:d9:7c:ea:2f:3b:c5:42:ff:bd:5e:7d:19:a6:5c:85:3d:
         21:52:9e:cf:62:f2:f8:92:30:4f:9a:a5:af:01:66:b3:d4:03:
         24:5d:33:cf:6c:9d:45:37:d0:ae:7b:02:aa:6d:34:af:9e:95:
         7f:0d:be:fa:b0:77:3c:9c:e4:06:5a:5b:b9:56:3e:52:5c:e7:
         df:dd:8d:13:e3:66:47:3f:2e:0d:ef:97:48:5d:9d:38:ab:7a:
         26:e4:93:13:59:ab:d3:25:be:4e:72:a8:55:e3:9c:27:cf:41:
         00:ed:02:53:7a:4b:5a:ac:4f:60:49:f8:4b:d5:78:7b:0b:63:
         ba:ae:95:05:a8:d9:30:50:77:be:53:c9:59:61:2c:40:1a:24:
         3f:79:b8:fd:82:5a:6d:43:2c:f0:89:69:e7:e9:50:6f:cb:11:
         25:2e:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:27:44 2025 by rpki-client