Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
File:                     VyWt0r_z5miuGFVL7r8xojpp3aU.mft (raw, json)
Hash identifier:          wzRYp5+MVhGbugYVX3c6LK2j2z7fZVWOEp3QPUGnqPw=
Subject key identifier:   0F:36:BF:53:71:37:15:C6:38:D1:E2:29:19:DB:1C:C0:CF:C2:92:9D
Authority key identifier: 57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5
Certificate issuer:       /CN=5725add2bff3e668ae18554beebf31a23a69dda5
Certificate serial:       01967E6AE5ADF41F5DED96D621A253203FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
Manifest number:          1515
Signing time:             Mon 28 Apr 2025 22:00:56 +0000
Manifest this update:     Mon 28 Apr 2025 22:00:56 +0000
Manifest next update:     Tue 29 Apr 2025 22:00:56 +0000
Files and hashes:         1: VyWt0r_z5miuGFVL7r8xojpp3aU.crl (hash: 6h3Auqn+EHu+FRTGBcRHTBcdcXy1T968jY1d8Gy2kAg=)
                          2: t0Kv0MY22kEd7yEkvuzKVP6NwDY.roa (hash: c5cNtbv2n0bwtPtYnHvGMxhfp9rjmRcTS2FRbov2ZW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:6a:e5:ad:f4:1f:5d:ed:96:d6:21:a2:53:20:3f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5725add2bff3e668ae18554beebf31a23a69dda5
        Validity
            Not Before: Apr 28 22:00:56 2025 GMT
            Not After : Apr 29 22:00:56 2025 GMT
        Subject: CN=0f36bf53713715c638d1e22919db1cc0cfc2929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:e7:fa:59:75:55:ed:a0:27:7e:56:d3:c6:
                    f6:b0:73:1d:65:fb:bf:10:79:7d:00:17:76:90:a6:
                    fb:58:8b:89:02:56:a8:ce:f2:8d:76:46:c9:2d:9f:
                    a7:aa:43:16:79:eb:0d:c9:c2:c0:55:f9:19:a7:e4:
                    91:bf:b0:3b:70:c2:1f:46:ba:ba:7c:ff:49:35:a3:
                    b3:2e:fb:08:bf:0d:da:36:9a:16:64:67:c0:3b:c7:
                    04:07:5e:ed:a8:0d:c7:97:2b:2b:a2:96:24:af:44:
                    09:72:e4:be:05:40:06:fa:e3:e4:d1:b6:a7:63:e3:
                    83:c4:ad:b5:fc:88:01:67:24:d8:ad:0b:6c:a0:22:
                    38:53:b0:85:a8:08:e9:c7:86:a9:7c:c8:3e:dd:3a:
                    39:02:07:af:c9:1a:a0:6f:47:2a:e1:5a:d2:1f:af:
                    54:e4:19:b4:97:bd:82:f7:5b:c4:54:3f:5e:af:fa:
                    ef:23:d1:d8:c9:47:60:df:35:50:75:34:ee:09:0c:
                    40:dd:94:37:a6:04:e3:bb:5f:31:a7:ba:95:a1:09:
                    cc:20:46:e0:ad:ec:6b:16:61:1e:39:d3:31:d9:bb:
                    3f:34:21:c3:cb:45:a4:eb:3c:f6:8c:d8:41:9e:10:
                    fb:8f:27:4a:8e:8e:da:b6:1d:e1:fd:c2:3d:8c:b5:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:36:BF:53:71:37:15:C6:38:D1:E2:29:19:DB:1C:C0:CF:C2:92:9D
            X509v3 Authority Key Identifier:
                keyid:57:25:AD:D2:BF:F3:E6:68:AE:18:55:4B:EE:BF:31:A2:3A:69:DD:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyWt0r_z5miuGFVL7r8xojpp3aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/da9489-6b8f-47b0-a69d-b69e44349395/1/VyWt0r_z5miuGFVL7r8xojpp3aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:70:39:dd:00:40:4c:75:c8:74:d8:16:dc:c7:d6:59:eb:be:
         58:6b:67:61:c8:29:a5:21:07:73:7f:12:90:66:95:5d:53:68:
         a5:12:2d:3a:e9:d5:ff:cb:c9:9b:6b:b9:c9:45:77:29:15:39:
         0f:82:de:14:da:6b:68:f2:74:21:19:1f:f3:cf:82:2e:78:28:
         a2:af:39:42:31:8f:e3:7d:16:c0:79:80:c0:ca:1a:1c:3e:35:
         c0:10:1d:7a:49:ba:01:db:d3:68:dc:79:c4:fc:7c:e3:90:b4:
         1d:4b:19:08:4f:fd:70:89:64:e4:11:55:8a:98:89:7b:57:be:
         14:4a:80:be:f1:76:0f:02:2c:44:50:5d:8a:11:bc:a8:da:96:
         f0:8a:a3:f3:21:5a:e3:1e:21:c5:df:b5:00:20:18:5b:b2:c8:
         7e:78:54:ae:99:82:ba:31:b4:4b:e5:7a:c5:2c:0f:e4:4e:b9:
         d0:68:ff:9f:ee:a7:15:75:90:2c:c4:87:2f:ba:c3:c2:1f:fb:
         30:2e:2d:5d:98:56:0c:90:dc:59:c6:e8:c7:e6:d7:ef:8f:33:
         3a:06:6f:72:75:4d:87:4a:f6:15:ee:ee:45:69:1b:13:20:fd:
         d8:81:c0:b9:44:43:04:43:e7:53:46:1d:a2:42:f7:a7:f8:87:
         0c:97:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:49:11 2025 by rpki-client