Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
File:                     bVedHV-n_SpEW13Y7o8mN7QfDUA.mft (raw, json)
Hash identifier:          x1BBonypLHHZ+J211ma9ZfARkKw9YDUAMvhPe6gdbk0=
Subject key identifier:   37:08:BB:B1:F6:8F:88:77:E6:24:7E:FB:13:66:CE:FB:E8:6C:E4:1C
Authority key identifier: 6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40
Certificate issuer:       /CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
Certificate serial:       0197808DD6DDE79DD8993320029F48F5CB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
Manifest number:          05C4
Signing time:             Wed 18 Jun 2025 01:01:08 +0000
Manifest this update:     Wed 18 Jun 2025 01:01:08 +0000
Manifest next update:     Thu 19 Jun 2025 01:01:08 +0000
Files and hashes:         1: bVedHV-n_SpEW13Y7o8mN7QfDUA.crl (hash: 7vHmUz4YegrM2pX5lhr97dIdEJxbDs560/DqJr6OVJc=)
                          2: mzLij97rDFnqDN0duCdCx-Rq3j8.roa (hash: P5wlmqQrgR6CiI5pzh35DLiXF58sMvrykYTh7m5zA7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:8d:d6:dd:e7:9d:d8:99:33:20:02:9f:48:f5:cb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d579d1d5fa7fd2a445b5dd8ee8f2637b41f0d40
        Validity
            Not Before: Jun 18 01:01:08 2025 GMT
            Not After : Jun 19 01:01:08 2025 GMT
        Subject: CN=3708bbb1f68f8877e6247efb1366cefbe86ce41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:31:91:57:44:d9:1c:d7:42:4f:5c:68:da:
                    be:77:88:95:36:b2:f3:73:cf:b6:3e:54:f6:41:e7:
                    aa:a6:7a:95:40:3b:d2:23:ef:69:3c:e1:31:9d:4f:
                    42:6b:71:53:cf:2b:91:ae:c1:34:c4:7b:cf:6a:88:
                    d8:ea:eb:40:0f:4f:4e:1a:10:7d:92:b7:a1:3b:75:
                    e7:78:a1:b6:2f:4a:ef:47:3e:06:fe:c1:d4:7c:4f:
                    3e:62:52:ac:c3:6a:cc:76:1b:73:00:91:5b:4b:ef:
                    90:5f:99:e5:23:71:eb:84:0f:7b:04:67:5e:9b:69:
                    3d:22:1e:ab:fa:1c:40:62:58:10:72:64:50:c4:a5:
                    cf:d7:e5:f9:18:3d:ca:dd:35:21:39:09:50:44:0d:
                    a1:4b:6a:0a:31:08:66:72:89:98:ee:43:8f:ad:b1:
                    c4:5a:bb:26:17:ca:ca:2a:3f:cb:8e:73:3e:64:a7:
                    26:57:dc:eb:da:cc:f9:f1:58:f0:70:2f:6a:80:c7:
                    65:27:8c:ae:3f:7f:dd:14:8c:be:5e:33:0b:d3:ae:
                    3f:82:87:45:7d:a0:3a:f4:89:dd:a3:50:ae:73:34:
                    8c:8c:b3:be:b6:0a:11:6f:b7:b3:d3:e7:2f:03:fb:
                    56:1e:d6:9e:36:86:d9:4c:19:66:ca:fd:55:4b:44:
                    fa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:08:BB:B1:F6:8F:88:77:E6:24:7E:FB:13:66:CE:FB:E8:6C:E4:1C
            X509v3 Authority Key Identifier:
                keyid:6D:57:9D:1D:5F:A7:FD:2A:44:5B:5D:D8:EE:8F:26:37:B4:1F:0D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVedHV-n_SpEW13Y7o8mN7QfDUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c5ee7d-e544-421a-af47-f6395860fc98/1/bVedHV-n_SpEW13Y7o8mN7QfDUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:9c:b2:36:c9:8e:97:06:82:23:f3:84:b9:b2:96:e0:00:08:
         d4:6b:28:7f:37:ba:b7:da:18:57:3e:46:0d:1e:e9:0d:22:00:
         df:b2:ed:e0:b8:d8:6b:6c:67:10:ea:92:06:eb:4c:5d:94:2b:
         f3:8c:22:bb:2a:61:86:4d:48:48:f6:bf:44:4a:b6:a3:25:b3:
         f1:fb:1b:f3:8c:12:43:01:8b:72:1e:9d:70:4e:e7:39:3a:d6:
         74:71:fc:97:39:ed:c1:36:55:ef:89:17:58:ed:f4:4f:e7:f3:
         d4:f2:a7:70:2c:ad:a2:ba:11:19:28:89:c7:77:4a:48:1f:8d:
         e7:75:ab:b4:c4:86:44:2d:28:df:1d:a4:fd:4d:8f:7c:97:0d:
         1e:05:d1:27:38:52:53:73:e2:75:95:25:31:c0:be:90:db:b2:
         79:4b:13:35:22:ce:a2:53:fc:2f:04:50:45:68:9d:ad:62:6e:
         22:b1:04:97:5f:22:01:dc:15:79:65:19:3f:67:4c:fc:05:a3:
         ac:ac:f9:f3:7f:96:69:7a:d3:a9:f3:01:c4:41:e8:8f:ab:2d:
         f8:8e:db:ee:a6:76:6b:24:41:d4:77:18:33:a7:ed:75:2f:4d:
         94:6c:30:87:56:5c:cd:a3:a0:c3:d7:2e:c8:6d:c0:f4:c5:98:
         8a:c8:8e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:13:39 2025 by rpki-client