Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          mrYhyXBUJPLcpHpStha+xvXHmarerHBOVhyK8XDacdg=
Subject key identifier:   E4:88:E6:B2:66:BB:10:8B:2E:85:16:E2:65:BA:B5:FF:8D:3B:D7:DE
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       01976F2D137F39329185229517EB19DC508D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          03DB
Signing time:             Sat 14 Jun 2025 16:01:54 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:54 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:54 +0000
Files and hashes:         1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
                          2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: uk/6O0bk1hg20ZbLgoRJMyV2gBXElnpQnNtuZXChChE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2d:13:7f:39:32:91:85:22:95:17:eb:19:dc:50:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: Jun 14 16:01:54 2025 GMT
            Not After : Jun 15 16:01:54 2025 GMT
        Subject: CN=e488e6b266bb108b2e8516e265bab5ff8d3bd7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:a5:c4:c2:11:5c:f2:62:7c:a1:c2:e6:e4:
                    a9:c8:3b:16:7d:52:7d:f7:30:b9:39:b4:e2:3f:c5:
                    08:46:38:03:97:13:df:48:7d:ac:11:ee:48:e3:cb:
                    d1:f6:40:21:d2:9c:b1:01:11:e8:5b:d7:42:a3:31:
                    3d:cf:2c:5b:54:88:df:dc:ec:5e:36:55:2b:f5:97:
                    b0:89:fe:a2:e8:7f:8f:9a:48:87:25:eb:22:d4:61:
                    1b:08:3e:b2:73:6c:26:e7:cd:fe:4e:83:9f:5e:c0:
                    a9:5d:91:6d:7a:58:3b:02:2e:95:56:c7:4d:f3:14:
                    f2:d1:cb:b4:ad:b5:91:56:23:d0:eb:dd:71:93:28:
                    7a:d1:09:62:af:85:5c:ff:b4:b7:8b:90:e7:58:4d:
                    80:4c:6d:e4:c2:b2:75:94:07:e8:04:1c:a5:87:1b:
                    9a:b5:75:f8:1d:c7:17:2a:80:ee:5d:0d:e8:8e:b0:
                    2b:74:56:8e:03:a1:26:a2:4e:f7:5d:7f:20:05:ef:
                    be:48:f9:82:3f:4f:90:18:e6:9d:44:27:76:cb:98:
                    24:c4:05:19:06:a4:4e:c3:e4:d8:93:b0:07:e0:c9:
                    b9:f4:67:50:b8:f6:8a:e2:7b:45:93:37:8b:db:d3:
                    b1:b1:8b:85:7f:c7:59:93:0b:21:df:4c:89:ef:9a:
                    f5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:E6:B2:66:BB:10:8B:2E:85:16:E2:65:BA:B5:FF:8D:3B:D7:DE
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:ea:43:06:ad:b4:7b:6c:8c:85:6b:af:43:28:40:30:5a:
         95:a7:b3:91:dd:d5:40:e2:fd:3d:07:70:0d:57:c4:65:4a:59:
         05:2e:6b:e8:83:53:75:fa:bb:26:a4:9f:87:eb:99:0b:dd:34:
         20:6c:c0:21:1a:20:f5:8e:f3:91:1d:4e:9b:bb:f0:a9:01:0c:
         88:c0:74:95:e1:af:67:3a:3e:86:7e:b3:a4:f6:cd:87:a7:5e:
         4e:2c:66:80:9d:17:54:11:4f:2a:47:7a:a5:b4:b3:3f:94:2f:
         e3:bf:a5:6d:24:c6:72:6a:ca:43:28:23:34:ee:ae:ab:99:0c:
         a9:ec:f5:a3:85:fa:f5:03:20:be:bc:cd:58:3e:1d:8a:ff:86:
         bb:36:3c:80:df:30:40:1b:2d:76:b1:34:83:cd:d7:93:78:79:
         ce:9f:cc:2f:f4:15:87:11:58:60:dd:af:4e:40:16:50:b6:bc:
         54:e0:51:99:d1:73:27:42:c0:6f:a9:de:c8:98:c6:ff:82:01:
         29:9f:c1:27:e2:16:32:9d:62:c2:99:16:06:4e:4a:c3:69:94:
         67:f7:67:27:f4:f5:44:ec:40:c8:88:f2:61:61:3c:aa:3c:af:
         6a:b9:ee:09:11:1a:06:0b:30:c6:92:31:b9:64:c5:90:25:6c:
         84:e1:bc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:03:56 2025 by rpki-client