Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          cbcDY/H9ib0hIs9AaMETTxDkha3fMhBR6iwK9EIjlFU=
Subject key identifier:   4B:A0:5A:63:F8:5C:0B:B2:EA:A7:2E:68:45:01:EA:B8:3D:7B:C6:A4
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       019672D40315F678CFCECB9E473419DCE9E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0B1A
Signing time:             Sat 26 Apr 2025 16:00:19 +0000
Manifest this update:     Sat 26 Apr 2025 16:00:19 +0000
Manifest next update:     Sun 27 Apr 2025 16:00:19 +0000
Files and hashes:         1: EpDBPVNlNeVkVgjR_m5x1NyX39k.roa (hash: xU4je7vw+hy54ZIE4xMAX4T+f8GKgqonphRIwXr+3Ro=)
                          2: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
                          3: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
                          4: j4-0AZNF6iCS-Y8DwznMUfguQKM.roa (hash: 9UHind5om+M7xPoByFFXJSZvuZyNAdK5MCxVIuXiRrs=)
                          5: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: Anex3KKfHpGqVqhwEr+8RUoVp2Hfzzm5XcYvBQOznS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:d4:03:15:f6:78:cf:ce:cb:9e:47:34:19:dc:e9:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Apr 26 16:00:19 2025 GMT
            Not After : Apr 27 16:00:19 2025 GMT
        Subject: CN=4ba05a63f85c0bb2eaa72e684501eab83d7bc6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f7:70:60:a0:c9:67:18:2b:5e:00:c1:a6:49:
                    52:4f:47:83:11:ec:9d:c9:48:48:d0:f3:ae:6d:c9:
                    b2:12:79:ce:25:84:6e:88:41:90:0b:ea:0c:88:c5:
                    99:d6:5f:50:7b:38:91:b9:cc:66:16:5a:fd:85:f0:
                    82:09:99:ec:3d:4b:aa:c3:e0:07:78:29:ff:7b:59:
                    33:3a:e1:d6:93:77:22:24:bc:63:f0:ff:ae:35:4a:
                    dc:02:2d:76:a0:a7:05:2f:b6:13:46:de:a2:a0:77:
                    c1:8a:22:62:d8:fe:0d:20:4c:75:c4:e5:e0:a9:2b:
                    2c:61:71:83:b8:75:23:bb:ce:66:91:22:12:ca:4b:
                    7a:b6:80:f6:c7:96:2a:85:20:ed:e8:00:5a:e6:55:
                    02:01:03:16:ee:f5:43:a9:45:3c:a0:a0:9e:13:b5:
                    6d:c3:b9:41:ad:71:e0:28:3d:68:21:c9:5a:c5:0c:
                    af:8a:1a:78:42:60:1c:ba:e1:b6:b6:94:60:85:d9:
                    54:e4:bf:9e:f7:06:4e:7d:f9:21:10:0d:5e:4f:8d:
                    b2:ca:07:85:94:8e:fe:c7:d6:a0:6d:db:01:a7:68:
                    59:89:c6:63:b5:53:c6:48:10:91:62:19:87:71:13:
                    06:9e:d0:b7:4b:39:91:fe:e4:87:31:03:53:a8:d7:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:5A:63:F8:5C:0B:B2:EA:A7:2E:68:45:01:EA:B8:3D:7B:C6:A4
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:65:c4:fe:c7:a3:4e:4b:af:65:19:2b:65:4d:f5:5a:ca:
         67:0b:03:b7:98:2d:be:df:14:6c:52:65:a6:5e:3d:e5:d6:5e:
         ab:cf:8a:8d:78:3a:d2:d9:0f:3b:35:37:4a:82:8e:3a:03:3d:
         a6:78:50:65:0d:42:60:d4:a6:c6:53:68:4b:d2:e0:0a:1a:76:
         9d:fc:e6:d2:a3:4a:7f:cc:e0:3d:c2:d6:52:a8:95:10:39:31:
         27:0b:c3:4b:1c:c5:01:a3:95:d2:30:ec:0f:84:ad:e3:fe:20:
         29:4d:02:2d:dc:b4:57:cf:33:12:a5:71:bb:1c:fc:50:82:32:
         8f:ba:86:c7:ae:51:47:91:76:8a:c4:72:5d:19:54:20:4c:cf:
         bf:c8:d6:d0:66:73:78:c0:d3:8a:40:bf:d5:ed:ee:fe:d8:19:
         f0:c4:cd:3d:b0:26:5c:98:08:ee:52:2a:51:8c:f2:ae:f2:28:
         20:14:f7:db:83:c2:f7:bc:0f:24:b4:f9:50:fb:c5:bb:91:c0:
         e3:04:a3:a6:1d:58:c3:54:f5:98:da:b3:d5:02:f3:63:9f:da:
         2a:e6:45:7e:41:aa:bb:9e:1b:c7:76:85:0d:9b:7a:25:f1:d6:
         c4:d3:4c:16:67:9e:33:29:68:8b:9f:d1:ea:e4:0a:26:50:2e:
         55:2f:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:29:21 2025 by rpki-client