Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
File:                     1-VA8B1ppBVa9RiEiskaZ4baxkng.mft (raw, json)
Hash identifier:          bJIDpUSoctI7LElErBq4u/vI14RVEmdfipSmrQnOGAY=
Subject key identifier:   E0:80:F9:B0:CA:E6:B6:57:93:A7:36:5C:63:21:AE:E1:A2:23:E6:33
Authority key identifier: F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78
Certificate issuer:       /CN=f9503c075a690556bd462122b24699e1b6b19278
Certificate serial:       019687A4525FBBF9D3D007558E2A2243DCB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
Manifest number:          1520
Signing time:             Wed 30 Apr 2025 17:00:14 +0000
Manifest this update:     Wed 30 Apr 2025 17:00:14 +0000
Manifest next update:     Thu 01 May 2025 17:00:14 +0000
Files and hashes:         1: 1-VA8B1ppBVa9RiEiskaZ4baxkng.crl (hash: I+L4GGw/SGxegG+x70+H/jkFXgcejeRZOk041QjmQYs=)
                          2: p2SVo4qsSiAegswh4Tt4B2CgnX0.roa (hash: ZR7WcDeaKIDHi9EqUsqBzkr/KcnAMrpHKscQ/Pybjlk=)
                          3: q2ZLX08w7-Dcrgr57h1hgcnfkXY.roa (hash: uFC0sIXPmgIMFYS0E5zDcKQoPca0pnQPm/3b/35uS2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 13:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:87:a4:52:5f:bb:f9:d3:d0:07:55:8e:2a:22:43:dc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9503c075a690556bd462122b24699e1b6b19278
        Validity
            Not Before: Apr 30 17:00:14 2025 GMT
            Not After : May  1 17:00:14 2025 GMT
        Subject: CN=e080f9b0cae6b65793a7365c6321aee1a223e633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:58:df:dd:03:b5:54:7b:dc:bc:f1:03:e1:
                    cc:91:d5:71:13:80:ef:08:cd:6d:0c:ab:f6:9e:e9:
                    81:2c:68:1d:c4:5f:68:e3:e4:f9:cc:96:b4:3a:e0:
                    8e:01:22:b6:e1:32:82:0e:5f:1c:3a:6a:e9:cc:42:
                    80:18:de:6e:86:ad:67:9c:ce:e5:43:b2:54:18:f2:
                    72:a5:4f:17:b5:a7:ae:88:1a:a6:50:53:ca:d9:04:
                    11:45:e7:54:0b:3b:f9:a8:c1:2c:b1:99:96:c4:67:
                    ac:e8:20:4a:80:7a:92:f1:38:b2:10:f4:0c:c6:c3:
                    5e:d7:a1:23:52:80:89:b8:ac:c5:68:25:fe:cb:63:
                    af:de:42:6d:06:5a:88:a8:5f:0c:5b:32:18:9e:56:
                    dc:1d:82:e7:4b:61:7e:de:49:72:0f:97:7d:ea:0c:
                    37:c7:78:79:fb:6a:84:8e:51:1c:df:9c:df:01:80:
                    1b:49:9e:05:c5:ae:2c:15:0b:06:fd:4b:8d:f1:b0:
                    8a:b3:e6:a6:64:8e:1d:ef:df:7e:c4:8c:0d:29:18:
                    4a:4b:69:c0:58:6d:33:9c:6a:12:12:30:e8:a2:fa:
                    dc:6d:c1:0e:b4:ff:96:3a:ea:9a:2b:ee:02:79:e1:
                    07:a6:71:a1:a9:a5:2f:87:e3:fc:19:f9:ab:5e:69:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:80:F9:B0:CA:E6:B6:57:93:A7:36:5C:63:21:AE:E1:A2:23:E6:33
            X509v3 Authority Key Identifier:
                keyid:F9:50:3C:07:5A:69:05:56:BD:46:21:22:B2:46:99:E1:B6:B1:92:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VA8B1ppBVa9RiEiskaZ4baxkng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4fa4b4-7c96-4eb7-9940-3f2316b553f5/1/1-VA8B1ppBVa9RiEiskaZ4baxkng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c9:8c:12:10:07:32:1a:28:ff:20:c1:e8:6b:d0:b3:60:76:
         c6:31:8d:3a:1e:a5:59:4b:8b:80:49:91:f1:49:68:d6:c8:e3:
         cb:06:a0:65:08:f6:f8:64:9c:70:a4:1c:8e:8e:2f:45:5a:bc:
         f7:08:61:9b:34:76:af:c7:89:e1:6e:7d:aa:bd:7d:a7:76:d1:
         cd:33:3f:ed:e2:32:1f:98:2f:c9:fa:d1:b7:09:90:47:92:08:
         9f:f1:d2:2c:1a:08:d1:b0:e5:00:07:3c:86:9a:e4:88:fd:76:
         93:d1:fb:81:79:c5:1c:fd:a5:98:4c:68:45:67:18:2c:13:0c:
         00:55:c5:8b:b8:7b:a0:15:fd:54:de:be:68:c0:34:b7:a6:18:
         2b:e1:e1:fb:8c:21:0a:03:24:b0:e2:de:6b:b2:ce:f2:d5:e8:
         73:85:68:e0:77:80:35:e9:1c:c4:25:00:04:d4:b0:f6:27:7e:
         72:42:5e:72:2e:93:96:ee:90:d7:53:c4:5c:53:76:6c:71:2d:
         2e:c3:51:a8:30:d5:09:1a:b6:59:cf:79:1d:89:94:06:e0:4e:
         fe:3b:0a:20:84:10:75:be:e5:25:e1:59:93:a2:ec:43:ab:79:
         bd:48:88:11:d0:8f:11:24:19:20:5b:8f:35:4c:88:a5:19:70:
         93:77:a3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:43 2025 by rpki-client