Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
File:                     vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft (raw, json)
Hash identifier:          Dv2sVuQdfkOdqx/g5+o8etdWktzMXF4w1Sy0xiTsF+k=
Subject key identifier:   31:1E:54:6D:2C:F2:39:EE:7D:58:6D:42:FC:D0:B4:63:57:81:2E:E2
Authority key identifier: BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34
Certificate issuer:       /CN=bd974dc8c645ed235145caaa1355ba85f5257634
Certificate serial:       01967DC619B687573519082D07E7ACF4751A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
Manifest number:          122F
Signing time:             Mon 28 Apr 2025 19:00:56 +0000
Manifest this update:     Mon 28 Apr 2025 19:00:56 +0000
Manifest next update:     Tue 29 Apr 2025 19:00:56 +0000
Files and hashes:         1: uulQ7vEdGhsy6Awn7kfrVQnLiMU.roa (hash: tZVgJDesulw5XmQQyaxeLBz/Dpnfz7Z3L4uwLGw8CzQ=)
                          2: vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl (hash: M3OPGytYIvP0nKyS0HJNxSjplv6NQwsIz8d7Go1L16k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7d:c6:19:b6:87:57:35:19:08:2d:07:e7:ac:f4:75:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd974dc8c645ed235145caaa1355ba85f5257634
        Validity
            Not Before: Apr 28 19:00:56 2025 GMT
            Not After : Apr 29 19:00:56 2025 GMT
        Subject: CN=311e546d2cf239ee7d586d42fcd0b46357812ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:7e:7c:ba:0b:9d:92:0c:f7:62:a2:c1:67:
                    e6:da:d9:76:5c:af:fb:0d:1e:3e:4f:1f:f3:85:52:
                    4d:88:54:a5:27:89:48:27:a3:6d:e9:2e:64:65:dc:
                    b6:03:ac:51:11:d5:72:34:99:bd:af:3a:af:d6:01:
                    c2:7f:f3:ed:39:0c:8c:2e:ac:d7:75:e1:1f:91:d4:
                    de:57:72:05:70:49:b6:37:bd:a1:1e:fb:ee:2b:20:
                    59:eb:fb:c3:e7:0d:a3:6c:e9:97:5b:6f:5a:97:29:
                    e7:f3:ad:40:9b:db:e2:c5:e2:51:2b:21:0d:aa:9b:
                    e2:b3:93:79:3b:76:30:0c:83:c9:00:3f:b9:e5:a7:
                    d4:44:68:9c:f2:04:e9:69:a2:4c:06:30:d8:77:0c:
                    35:ed:48:14:1b:57:7b:40:ca:9a:96:35:e9:78:5b:
                    40:a9:86:01:60:31:b6:ff:8b:7f:c9:3e:34:57:64:
                    7f:f3:28:38:dc:aa:ce:0e:0f:00:4f:f1:17:a5:bf:
                    f7:ba:1a:c4:15:84:0b:7c:be:44:69:b4:f2:23:0c:
                    ab:fd:5a:5b:b3:9c:18:76:05:ce:cd:37:1c:04:09:
                    ab:d7:52:23:cb:8a:01:b3:01:98:0a:d6:4a:f0:96:
                    56:43:d0:87:a7:04:0f:47:03:d5:8d:3e:16:c2:9a:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1E:54:6D:2C:F2:39:EE:7D:58:6D:42:FC:D0:B4:63:57:81:2E:E2
            X509v3 Authority Key Identifier:
                keyid:BD:97:4D:C8:C6:45:ED:23:51:45:CA:AA:13:55:BA:85:F5:25:76:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZdNyMZF7SNRRcqqE1W6hfUldjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/88c5b7-b126-4ed3-9d7a-e5ba4bfa171a/1/vZdNyMZF7SNRRcqqE1W6hfUldjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:3e:b4:74:0c:d8:95:e6:1f:cf:3f:b4:56:11:eb:2c:e5:
         24:59:2f:f9:36:7c:24:ac:e8:0a:b6:69:ed:0a:3b:0d:f6:6c:
         f3:ab:84:38:79:87:78:47:06:5d:a9:8c:df:2f:92:d3:d1:b3:
         f2:35:e7:72:03:69:11:cd:3c:1a:25:b1:3c:e5:b6:85:31:44:
         5e:4e:dc:2d:d4:b3:94:c6:79:a5:c3:40:10:20:22:0e:29:d2:
         fe:a4:66:8d:fc:d9:57:3e:b8:cb:93:a6:c9:6d:31:6f:98:23:
         8a:19:6d:92:de:18:24:eb:c7:6f:82:54:19:3e:86:41:b1:8b:
         80:05:56:ec:68:9c:5e:25:93:e6:bc:e9:f1:c0:da:62:d5:80:
         72:32:19:3d:e7:9d:e0:ac:99:42:f3:55:d6:76:26:72:46:85:
         6a:05:d6:81:7d:b0:7a:bf:89:6c:60:94:6a:c8:dd:8e:ff:23:
         92:dd:83:8b:c6:08:a8:69:6a:51:15:fa:a0:2a:6b:f9:9d:a2:
         20:b9:b7:32:a6:4a:e4:71:95:f3:47:9b:e0:b7:68:3a:b3:15:
         0f:d5:a0:57:9f:42:d3:03:1a:6d:a9:38:9e:97:31:87:b0:bf:
         0e:2f:d1:a0:1b:8d:85:b0:74:1f:e4:29:72:03:de:5e:e8:d7:
         3e:63:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:51 2025 by rpki-client