Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
File:                     VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json)
Hash identifier:          9VH5gTtBxI53Dz5aI41WR1lvsdTCiTV8Odrnw7h2rx4=
Subject key identifier:   2F:D5:1E:2B:82:08:70:08:4A:BF:F9:D4:6B:20:5A:63:FD:88:01:3B
Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Certificate issuer:       /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Certificate serial:       01976C2A94601E4FA834453E7E78086B8979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
Manifest number:          8C
Signing time:             Sat 14 Jun 2025 02:00:19 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:19 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:19 +0000
Files and hashes:         1: 0qvu7Ik4qOydod-67-aS8UYVRt4.roa (hash: 9dnShS1pPGDLKB9HEL/30IZt5FlagVMcCMwGrXSyfAg=)
                          2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: kBerpbdjBMg5vRZDv3HeTYkOGxPBC1PKRMAB7YEdCXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:94:60:1e:4f:a8:34:45:3e:7e:78:08:6b:89:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
        Validity
            Not Before: Jun 14 02:00:19 2025 GMT
            Not After : Jun 15 02:00:19 2025 GMT
        Subject: CN=2fd51e2b820870084abff9d46b205a63fd88013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d1:a9:8e:5e:c4:7e:1f:68:98:11:29:1d:1b:
                    68:a1:ea:93:8b:5e:c8:a9:34:42:61:0e:1b:60:aa:
                    53:66:95:0d:7c:04:d2:91:23:a2:60:44:fc:80:62:
                    3f:91:9a:b0:29:e9:93:24:a3:2b:e6:23:a5:fe:93:
                    c6:9b:77:da:9b:e2:74:c1:35:87:77:13:52:18:c3:
                    3f:e0:aa:03:1c:cd:c2:aa:31:e2:73:cd:58:ee:43:
                    3d:e2:11:d2:44:f5:44:9d:48:c0:ee:3e:92:73:fb:
                    76:3c:4e:db:73:7c:db:1c:26:05:df:d4:cf:b2:2f:
                    28:6d:91:d5:e0:38:17:a5:4f:45:d3:99:cd:2c:34:
                    94:7e:be:1d:bb:5e:bd:02:0c:2e:1a:a0:21:6f:9e:
                    be:7d:2f:6b:71:38:74:15:dc:eb:8d:34:15:f0:4b:
                    dc:a1:70:c2:62:38:7d:ff:0b:32:c2:1d:0b:34:61:
                    7a:7e:b2:cb:4c:77:f2:76:88:e2:27:a7:67:4f:40:
                    87:80:35:47:ae:f9:07:b0:54:17:51:80:a3:0a:22:
                    6f:9c:b1:2a:54:e0:02:bc:44:02:c8:c2:93:8b:72:
                    d3:d1:d7:91:40:2c:6e:6a:d4:24:72:2f:01:65:66:
                    03:48:7f:ba:da:a9:6c:6e:5a:8a:4c:6f:e0:20:4c:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D5:1E:2B:82:08:70:08:4A:BF:F9:D4:6B:20:5A:63:FD:88:01:3B
            X509v3 Authority Key Identifier:
                keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:61:3f:d4:c5:b4:b9:21:58:7e:fe:2d:26:8c:1e:54:5c:af:
         b5:06:52:69:f9:bd:9d:0a:b0:78:5e:6f:86:e7:ab:4e:29:f1:
         d5:0c:ca:8b:94:94:c2:4e:72:80:fa:ad:b8:c5:00:93:65:bb:
         46:c0:be:b3:26:28:4a:14:75:29:3e:c5:a9:00:6f:a6:54:df:
         80:cf:06:da:0f:d5:c7:31:5d:7d:d2:e8:1d:aa:3c:7a:40:11:
         82:72:df:78:2a:ad:a8:49:e0:f0:48:44:3f:41:93:c5:37:88:
         e1:a0:82:6b:dd:9a:f8:24:98:76:39:15:d3:84:14:b2:01:6a:
         64:f0:6e:95:65:50:e6:51:62:76:7b:44:4d:56:0a:98:9e:b8:
         fe:4e:a9:d6:38:a0:cc:49:e5:2e:11:37:6c:4c:28:7f:11:40:
         8d:c1:6d:8c:1a:03:ad:3b:29:01:cc:d6:96:53:0e:a6:44:9b:
         4b:bd:2a:44:ce:1c:2d:52:44:b0:67:2a:b8:9b:01:c1:d3:4e:
         56:40:94:98:5f:97:af:63:3a:0d:b8:85:e3:c2:e5:9c:2a:8e:
         a6:e2:e4:43:27:88:67:07:b1:fa:23:99:c8:35:da:0f:a9:e8:
         e6:ce:94:6d:33:ce:d0:87:35:60:5d:cb:6e:bf:71:5a:5d:50:
         30:d0:e2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:48:49 2025 by rpki-client