Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
File:                     VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft (raw, json)
Hash identifier:          hVJOcIVaDsOwiMZdu9MuUD8ORizyTdhsOq8oCQED2/0=
Subject key identifier:   C0:5A:F6:37:99:DC:3E:A3:EB:3A:8F:DD:31:2D:D4:45:0F:24:3F:CD
Authority key identifier: 56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C
Certificate issuer:       /CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
Certificate serial:       0197707570DD03FABCADFB44CC7F37A32346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
Manifest number:          14CD
Signing time:             Sat 14 Jun 2025 22:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 22:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 22:00:34 +0000
Files and hashes:         1: VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl (hash: YFWuVs8auLmIYo7b++xKY5kZDmGi+qzPKKYgkXJvLdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:75:70:dd:03:fa:bc:ad:fb:44:cc:7f:37:a3:23:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56830a1f7b8ac10fe67fa81604bc10c341fdb63c
        Validity
            Not Before: Jun 14 22:00:34 2025 GMT
            Not After : Jun 15 22:00:34 2025 GMT
        Subject: CN=c05af63799dc3ea3eb3a8fdd312dd4450f243fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:93:27:46:2a:e8:0a:44:fb:d1:fa:e2:71:
                    88:f3:77:77:31:4a:39:35:d9:10:32:ea:54:b3:26:
                    ab:b4:39:6a:5b:fe:74:08:2a:a9:8e:10:b4:c2:2b:
                    9c:cc:e9:da:f5:14:86:80:0b:aa:68:5c:93:4b:8f:
                    b6:24:22:db:d7:1a:f1:82:80:85:83:94:03:20:39:
                    63:7c:75:c5:0a:eb:c0:39:20:44:63:f1:e1:a6:85:
                    3d:3b:22:e8:01:7b:93:67:68:76:4b:6c:4b:eb:ce:
                    6b:8a:06:84:c6:93:b2:0a:f6:e9:1a:6d:a7:b0:45:
                    6d:df:08:4f:d4:14:5e:22:7c:ff:40:0f:da:8e:1c:
                    6e:26:06:f0:21:ce:74:a7:25:1c:34:ea:e0:75:4c:
                    eb:db:45:d6:ca:60:9f:dc:c6:45:12:62:7d:bb:90:
                    a2:3b:65:68:22:70:1d:78:5e:aa:1c:06:8a:3e:39:
                    dd:0c:44:19:53:0c:4a:40:16:b6:8d:b1:97:b6:35:
                    1d:8b:f6:1e:03:df:08:ac:b4:09:e9:92:17:1a:3d:
                    bd:e3:09:77:de:6b:5e:18:66:07:3f:8a:96:5d:f8:
                    68:7b:2d:bf:2b:09:57:c5:0f:26:e1:8b:90:51:35:
                    bf:fe:80:28:3c:90:ae:04:f6:59:ac:06:09:28:64:
                    be:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:F6:37:99:DC:3E:A3:EB:3A:8F:DD:31:2D:D4:45:0F:24:3F:CD
            X509v3 Authority Key Identifier:
                keyid:56:83:0A:1F:7B:8A:C1:0F:E6:7F:A8:16:04:BC:10:C3:41:FD:B6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/f8430f-7587-44a3-b33f-448901444b8a/1/VoMKH3uKwQ_mf6gWBLwQw0H9tjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:06:87:7a:63:93:e1:e2:81:29:ec:15:42:a9:86:d0:ca:8f:
         2d:06:a7:a9:94:57:88:67:92:67:e9:d7:d8:94:01:3e:dc:3c:
         36:1d:5b:b1:76:99:8c:51:6b:c0:7f:30:dd:75:34:8b:b2:8f:
         14:d9:66:18:e0:60:76:31:80:ea:b4:79:5a:33:0f:e3:36:44:
         25:9f:0e:64:9b:cd:58:0f:83:9a:1e:b6:9f:69:f7:65:2f:8b:
         bb:f0:58:72:99:51:20:91:1a:76:08:6b:1e:12:e3:de:dc:06:
         b2:e8:bd:9a:61:25:49:67:37:2a:e1:da:32:f3:ed:f3:f2:13:
         13:1f:cc:69:ff:36:93:19:89:84:79:77:4a:17:69:e2:ae:94:
         3c:a2:91:ee:df:57:b1:4e:50:bd:f2:e0:89:24:d1:0d:cd:da:
         a1:19:79:8b:c9:25:8c:02:5c:b7:7c:e9:26:ec:31:72:62:59:
         6b:97:f7:40:c2:73:78:5e:ae:e0:77:6f:d2:c7:13:10:54:1a:
         76:4e:b9:f0:5d:17:67:8e:f0:cf:0a:7a:2f:03:9a:a5:55:7f:
         0b:2a:d1:31:0e:05:d0:76:a9:9f:e8:c2:9a:ef:eb:b2:fc:79:
         74:0d:9c:24:df:47:28:8f:7e:d8:53:7d:58:13:f0:e9:36:1f:
         7b:1b:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:37:10 2025 by rpki-client