Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          Z3CKR4D4vvGW0uXb+5WtzXZy8btKUIu4mBPi0+w2/60=
Subject key identifier:   E7:D5:A4:D7:5C:A7:78:5B:0E:D8:E9:61:44:34:F1:7C:9C:6D:07:ED
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       01967B699A0E09FF1FD507CF0072E547745E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          1517
Signing time:             Mon 28 Apr 2025 08:00:40 +0000
Manifest this update:     Mon 28 Apr 2025 08:00:40 +0000
Manifest next update:     Tue 29 Apr 2025 08:00:40 +0000
Files and hashes:         1: 0mBk-YYEEcpS2EWe9JuL5ZU9Ozw.roa (hash: i+FX59/XtMW/8gmUH2jgeEyByOCXMI3eEtMtNI5KB4s=)
                          2: IIxDe4etQOd2xm05l7GIiAgVFRk.roa (hash: nufDyIWcCwbAJSpo3tAlQaolQXGlQowbBKacZpakYp0=)
                          3: IuLax30Qv5bBysnxO_6IznKsU-s.roa (hash: ufXvEjexbBOn5Icah6XFTBi5ev4De8imScoIa5ucSKg=)
                          4: U9LtbwPPB86BDhAy_rjEEanmBi4.roa (hash: n2f6ykIaBk67onFDxWMKqalYvlFCNkWOuJFN0Sesm0U=)
                          5: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: c+m4GDMLHhc0JPOrHHlZFT0yAIqpMQaIapix/mEoChM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:69:9a:0e:09:ff:1f:d5:07:cf:00:72:e5:47:74:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Apr 28 08:00:40 2025 GMT
            Not After : Apr 29 08:00:40 2025 GMT
        Subject: CN=e7d5a4d75ca7785b0ed8e9614434f17c9c6d07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:83:91:a4:19:14:92:af:5f:2b:5d:1f:43:
                    e6:31:f2:a1:f4:a0:e4:31:44:59:c7:e5:53:c8:c3:
                    d2:b5:a8:ef:fd:2a:a0:7c:5c:95:66:9b:af:dc:a6:
                    b9:68:12:f1:4f:60:75:c2:6b:98:62:ae:e0:13:c3:
                    5a:c8:f8:05:8a:4b:c0:5a:c2:8d:67:4f:d9:91:2e:
                    69:9e:01:fc:ab:f0:58:ed:22:c3:22:87:43:97:53:
                    00:c7:d9:55:25:d9:36:e3:d3:6b:09:ef:49:07:db:
                    34:5f:95:cf:54:c7:21:5c:0a:e4:d5:9b:1a:ba:29:
                    a4:38:79:9d:28:5e:f7:02:be:71:bd:57:fe:76:e6:
                    a7:c9:9b:b7:a6:ca:7a:fd:61:5c:80:5e:69:a8:98:
                    56:a9:e8:f5:f6:24:ca:28:b9:c6:e0:e6:2f:42:84:
                    36:05:56:3b:8a:b7:fd:4a:70:05:a1:24:78:4c:17:
                    d7:0a:5f:54:1f:c7:15:71:91:0b:0a:f9:97:f9:3d:
                    ad:8a:cb:23:b8:b6:e1:c7:c9:ba:a9:10:6a:08:13:
                    da:d4:11:59:01:7c:11:9e:6b:18:af:5f:92:63:e5:
                    5a:f2:f1:58:2c:e2:e3:ec:c6:64:ae:b9:82:3a:a5:
                    ff:94:94:15:95:3c:c8:52:35:16:6f:84:ca:4d:af:
                    f6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D5:A4:D7:5C:A7:78:5B:0E:D8:E9:61:44:34:F1:7C:9C:6D:07:ED
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f4:cd:8b:2c:45:a9:31:8d:0e:bf:ae:bb:d5:c5:50:f5:60:
         84:59:2a:db:a2:88:e1:6e:8c:41:ee:1e:c6:0b:32:43:a3:6c:
         bc:f9:74:52:1a:d4:82:7c:55:da:7e:d0:63:92:4f:c2:a2:a5:
         a1:ce:a8:3a:92:4e:c6:6a:83:c1:28:c2:2e:d8:eb:8d:39:dc:
         ed:c8:49:76:92:20:2b:e1:1e:0d:16:91:5a:5f:ce:27:ff:f3:
         c5:a7:90:56:d1:0a:b0:07:51:96:12:62:08:a6:2a:cd:76:52:
         1d:0b:8f:8e:8c:fe:50:9e:d9:77:e9:eb:5a:bf:fc:03:37:fe:
         f3:d5:52:e2:e0:f9:5d:9b:24:2f:b9:19:4c:98:fc:c8:6a:1e:
         54:30:06:01:46:c5:04:1f:d0:d8:bf:51:ae:a1:10:89:49:5c:
         93:3b:0a:3a:41:02:6f:c5:b3:c6:cf:a2:5a:80:5b:71:30:e4:
         c7:38:2a:16:40:10:a0:d2:6a:56:f1:77:08:0d:2b:20:bb:b6:
         9f:35:3a:f1:d8:8d:3a:d4:48:4b:29:a0:0e:70:86:0e:84:2f:
         62:91:a7:3a:d9:f6:64:5a:3b:6d:d0:48:15:f8:55:e1:dc:a3:
         db:b4:f2:70:36:3e:d6:e0:a9:68:0e:15:d6:31:60:66:b4:ef:
         af:b5:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:09:17 2025 by rpki-client