Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
File:                     VZe006Zk2swkk01I3RiOoY6PJ8E.mft (raw, json)
Hash identifier:          eKf73i2c5Y9ISUBsJAKa/EuNY5x4hhOLswAX7B/AFmw=
Subject key identifier:   50:11:16:95:32:2A:78:F7:BA:62:FD:1A:6F:37:68:E6:8F:95:71:A6
Authority key identifier: 55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1
Certificate issuer:       /CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
Certificate serial:       01967FB4F00A953C18EF433A2796ED9D067A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
Manifest number:          0BFB
Signing time:             Tue 29 Apr 2025 04:01:26 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:26 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:26 +0000
Files and hashes:         1: 8kfnwOtBgq_5_lkL_XTWGS_DW2A.roa (hash: R1ovdHUKN/hPy17oklKDPDEJOp9Mxs/OWbcQb2xo5Ek=)
                          2: VZe006Zk2swkk01I3RiOoY6PJ8E.crl (hash: y7lYxF6NUz+HLsq77eYY5dk9fddSEXXwqw6q85lIyNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:f0:0a:95:3c:18:ef:43:3a:27:96:ed:9d:06:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5597b4d3a664dacc24934d48dd188ea18e8f27c1
        Validity
            Not Before: Apr 29 04:01:26 2025 GMT
            Not After : Apr 30 04:01:26 2025 GMT
        Subject: CN=50111695322a78f7ba62fd1a6f3768e68f9571a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:09:82:ae:b1:af:8e:44:4b:60:d7:f0:b9:
                    b9:f4:09:56:01:a0:7a:05:bf:10:c5:7c:e3:9d:3e:
                    18:af:35:6a:da:a3:23:77:93:91:ff:0c:bc:73:d0:
                    62:5c:c3:39:4b:2f:47:3b:09:0f:c9:1b:38:0e:f4:
                    31:82:48:4e:9f:51:94:4f:de:8e:e9:87:3e:31:16:
                    49:16:c4:5b:5f:fa:6a:34:1c:b4:aa:98:08:01:e0:
                    75:01:7d:31:a2:a2:ac:89:d6:35:95:d7:08:4e:3e:
                    6e:7e:56:9d:8a:82:f8:6f:07:ac:6f:4b:d5:bf:32:
                    b3:8f:0b:23:07:cf:d2:23:ff:38:33:f1:2a:68:e9:
                    6e:40:9a:99:22:eb:e2:e3:8b:58:2d:8a:6e:44:2b:
                    4a:34:47:7c:d6:f4:1e:48:6c:6f:f2:31:40:02:07:
                    44:bb:66:c4:12:20:d0:0b:dd:fa:92:1e:0c:a0:19:
                    d4:f0:77:8b:7f:69:ac:b2:ee:a2:32:dd:dc:ae:8d:
                    92:84:4f:0f:c6:0e:be:ab:0b:8f:f3:de:05:61:77:
                    d8:29:e4:58:c8:a1:b0:28:c6:f9:73:93:0d:67:fc:
                    34:89:dd:9e:8d:17:59:08:98:3d:e4:87:8f:41:2a:
                    80:cc:21:95:f2:5e:cf:13:9a:1e:c6:a7:5a:a0:f3:
                    12:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:11:16:95:32:2A:78:F7:BA:62:FD:1A:6F:37:68:E6:8F:95:71:A6
            X509v3 Authority Key Identifier:
                keyid:55:97:B4:D3:A6:64:DA:CC:24:93:4D:48:DD:18:8E:A1:8E:8F:27:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZe006Zk2swkk01I3RiOoY6PJ8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bac182-d8f9-4b44-b83d-03a63ae1c7c1/1/VZe006Zk2swkk01I3RiOoY6PJ8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:00:7f:22:1c:5e:85:1b:18:07:bd:ff:5a:b8:4c:dd:d7:ca:
         f6:c5:20:01:f9:2e:15:c1:00:73:8b:a6:1b:7f:82:b6:eb:ad:
         26:b6:c5:4d:44:be:9c:35:4e:da:a0:19:d9:2c:54:fe:78:8f:
         1b:7b:1d:30:d6:61:0e:bd:db:de:f5:46:35:9a:2e:01:39:da:
         8a:d9:d1:3b:c4:40:31:b3:12:f8:4e:fe:dc:20:0c:9a:c5:3d:
         0c:50:db:4a:c2:f0:6b:ef:1a:12:91:a0:a6:b4:2b:1f:fb:cc:
         ee:b3:1a:be:43:ce:15:78:c9:fa:e6:ca:28:22:4d:e9:ce:d4:
         f7:85:a3:6a:97:0b:64:30:b9:80:9a:82:98:fd:6b:ed:9a:77:
         d3:8f:99:ea:0b:14:cc:cf:37:bb:04:bc:8a:5c:dd:b5:6a:74:
         7c:be:04:f6:27:5c:f6:6f:e1:24:c5:a3:30:c2:e0:dd:cc:92:
         ba:fa:e7:3e:25:e9:83:c3:cf:a3:8f:1e:28:c7:87:ed:be:34:
         38:b7:77:13:dd:1b:70:aa:d3:96:5c:25:47:9a:2c:40:6b:95:
         dd:e5:1a:78:a6:d7:8b:b0:cb:9d:6e:dc:80:dc:1f:d7:70:29:
         52:f9:a6:0e:b8:7a:a0:36:29:0a:75:9d:6a:8a:7a:7b:5b:de:
         fe:b1:6d:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tPAKlTwY70M6J5btnQZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTdiNGQzYTY2NGRhY2MyNDkzNGQ0OGRkMTg4ZWExOGU4
ZjI3YzEwHhcNMjUwNDI5MDQwMTI2WhcNMjUwNDMwMDQwMTI2WjAzMTEwLwYDVQQD
Eyg1MDExMTY5NTMyMmE3OGY3YmE2MmZkMWE2ZjM3NjhlNjhmOTU3MWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH0Jgq6xr45ES2DX8Lm59AlWAaB6
Bb8QxXzjnT4YrzVq2qMjd5OR/wy8c9BiXMM5Sy9HOwkPyRs4DvQxgkhOn1GUT96O
6Yc+MRZJFsRbX/pqNBy0qpgIAeB1AX0xoqKsidY1ldcITj5ufladioL4bwesb0vV
vzKzjwsjB8/SI/84M/EqaOluQJqZIuvi44tYLYpuRCtKNEd81vQeSGxv8jFAAgdE
u2bEEiDQC936kh4MoBnU8HeLf2mssu6iMt3cro2ShE8Pxg6+qwuP894FYXfYKeRY
yKGwKMb5c5MNZ/w0id2ejRdZCJg95IePQSqAzCGV8l7PE5oexqdaoPMSzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFARFpUyKnj3umL9Gm83aOaPlXGmMB8GA1UdIwQY
MBaAFFWXtNOmZNrMJJNNSN0YjqGOjyfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlplMDA2Wmsyc3drazAxSTNSaU9vWTZQSjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iYWMxODItZDhmOS00YjQ0LWI4M2Qt
MDNhNjNhZTFjN2MxLzEvVlplMDA2Wmsyc3drazAxSTNSaU9vWTZQSjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iYWMxODItZDhmOS00YjQ0LWI4M2QtMDNhNjNhZTFjN2Mx
LzEvVlplMDA2Wmsyc3drazAxSTNSaU9vWTZQSjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwB/Ihxe
hRsYB73/WrhM3dfK9sUgAfkuFcEAc4umG3+CtuutJrbFTUS+nDVO2qAZ2SxU/niP
G3sdMNZhDr3b3vVGNZouATnaitnRO8RAMbMS+E7+3CAMmsU9DFDbSsLwa+8aEpGg
prQrH/vM7rMavkPOFXjJ+ubKKCJN6c7U94WjapcLZDC5gJqCmP1r7Zp304+Z6gsU
zM83uwS8ilzdtWp0fL4E9idc9m/hJMWjMMLg3cySuvrnPiXpg8PPo48eKMeH7b40
OLd3E90bcKrTllwlR5osQGuV3eUaeKbXi7DLnW7cgNwf13ApUvmmDrh6oDYpCnWd
aop6e1ve/rFt9A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:18:20 2025 by rpki-client