Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File:                     Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier:          7RW85bQeFHwwuueynTEFoQoGBG4NhWm+YTOLliWgK7I=
Subject key identifier:   EA:BE:4D:ED:CB:FB:E1:6C:37:FF:20:70:E2:8B:32:3C:C6:E0:17:F6
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer:       /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial:       019691BA68E7A8DCB27BE7086D1889769ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number:          1006
Signing time:             Fri 02 May 2025 16:00:34 +0000
Manifest this update:     Fri 02 May 2025 16:00:34 +0000
Manifest next update:     Sat 03 May 2025 16:00:34 +0000
Files and hashes:         1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
                          2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: akOxg9JyhObuFK/GJS/kSayeR79CC1hFE2E2zvVmBNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:68:e7:a8:dc:b2:7b:e7:08:6d:18:89:76:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
        Validity
            Not Before: May  2 16:00:34 2025 GMT
            Not After : May  3 16:00:34 2025 GMT
        Subject: CN=eabe4dedcbfbe16c37ff2070e28b323cc6e017f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:4e:8c:2f:3a:11:6c:6b:2a:01:ce:27:cd:
                    d1:75:a8:20:c3:05:3f:cf:0e:6c:f2:c8:8c:81:95:
                    3d:3b:a2:8b:bc:06:ce:72:42:9b:ee:05:da:5e:57:
                    ff:81:e1:6b:43:15:4b:9d:1b:5b:ab:47:96:3a:d6:
                    92:10:24:35:c2:73:4c:12:8d:2c:a0:ca:fe:f3:36:
                    f0:42:00:be:e3:1a:31:35:eb:6a:db:7e:a6:9f:d0:
                    dc:c6:e7:1d:0d:80:e4:83:ca:fd:1d:ad:17:5a:7d:
                    58:3c:8d:7f:cf:b8:2c:22:b7:b9:5c:ca:69:db:da:
                    bf:eb:e7:9a:b8:fb:65:6a:db:fd:7c:68:87:c8:0d:
                    fa:69:a4:ee:ac:35:56:55:5b:b7:99:09:9a:8d:9d:
                    cb:0c:77:ce:ad:c0:c6:fd:96:22:d5:3d:b9:bf:db:
                    99:fa:0f:1d:e4:ca:ea:d5:1b:55:2e:ba:bb:c4:7f:
                    29:cf:1f:24:e8:3c:a5:a0:1e:1c:98:ec:a6:3b:d6:
                    84:f7:7b:d0:99:4c:cc:37:c1:db:c4:93:0c:fd:e2:
                    ae:37:b7:5f:c8:be:3f:a5:7c:15:00:47:ad:f5:73:
                    bb:9e:58:6f:b7:43:c5:da:b3:1d:69:e2:76:bf:bc:
                    f5:b0:81:be:75:91:40:3a:4c:17:3e:f2:a8:96:db:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BE:4D:ED:CB:FB:E1:6C:37:FF:20:70:E2:8B:32:3C:C6:E0:17:F6
            X509v3 Authority Key Identifier:
                keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:22:6c:56:f6:67:10:5a:95:cb:f9:f9:6a:19:f3:61:2d:73:
         f9:fa:f6:50:4a:36:13:d2:b9:ca:8d:7a:ec:86:d4:0c:ca:49:
         1e:7a:a0:b6:9d:e3:2f:9f:fe:f2:3f:09:5c:da:99:be:93:4b:
         a6:a4:82:b3:02:b3:e1:85:ba:6f:e5:9b:6a:53:11:97:fe:a3:
         76:51:1f:b1:2a:67:11:86:c3:bf:96:ce:0f:8b:e6:97:c1:5c:
         3e:49:99:33:28:9a:19:a2:14:6c:d9:e3:bb:63:5d:f2:14:f0:
         95:5e:1a:4c:a5:45:4a:01:84:1d:f2:b1:b5:fb:d1:8b:1c:2c:
         fc:d5:11:0b:fd:92:00:04:75:4d:ae:b7:46:a6:cf:43:c9:3a:
         c0:a1:f5:2f:f8:49:ce:e0:87:cc:c3:4e:61:b6:55:7f:10:b1:
         01:34:f6:19:67:96:c9:01:4e:6b:c8:3e:ca:cc:7b:2f:e7:ce:
         68:76:72:35:c8:1b:5b:c7:7b:4c:b5:08:27:ba:5e:fa:02:a1:
         69:f5:9d:cd:ba:47:02:2e:fa:88:cd:be:8e:23:0f:9e:51:f2:
         e6:89:21:1c:67:69:26:b7:75:fb:c3:f8:b3:37:f1:80:ab:24:
         41:32:31:7a:8d:29:f4:f3:b9:df:90:39:ca:d2:01:b9:9a:0c:
         39:6b:e0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:37:42 2025 by rpki-client