Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File:                     VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier:          SKm/xa9L/aOPRVLn0up0ezdv3ZdMrhTKeX/xHcjqKf0=
Subject key identifier:   E0:64:BA:06:9E:78:E7:8C:49:14:17:EF:E7:29:9F:A1:1D:E5:BA:2E
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer:       /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial:       019776E55BB02B2FC64753D1F5787F2F0C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number:          10BC
Signing time:             Mon 16 Jun 2025 04:00:32 +0000
Manifest this update:     Mon 16 Jun 2025 04:00:32 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:32 +0000
Files and hashes:         1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: QXdKaEfrWMbjwv/hR/xAoHAllKOfyVURTFSBZAmP1aQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:e5:5b:b0:2b:2f:c6:47:53:d1:f5:78:7f:2f:0c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
        Validity
            Not Before: Jun 16 04:00:32 2025 GMT
            Not After : Jun 17 04:00:32 2025 GMT
        Subject: CN=e064ba069e78e78c491417efe7299fa11de5ba2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:cd:86:bf:60:31:5d:8d:90:31:4e:cb:4a:
                    52:e9:09:a4:31:84:5f:27:89:66:a1:8c:5b:fd:60:
                    a5:6f:78:1e:b8:d3:8a:90:ba:95:0e:4f:02:57:bd:
                    20:a0:12:f3:20:e9:3d:04:86:e9:61:8a:14:28:47:
                    c1:de:97:b8:32:d0:a2:72:c3:34:1b:be:1e:c9:5b:
                    d9:dd:d5:3e:c6:6f:ee:de:27:64:68:b9:fe:c8:36:
                    ec:19:9f:bb:04:ef:b1:be:64:a4:ff:d1:be:30:24:
                    44:ff:4c:3b:b7:f8:d4:b5:2d:0f:e6:9d:4f:5b:04:
                    d2:c2:b0:00:d3:fd:56:72:f6:5d:40:a1:f7:99:e2:
                    b0:a3:fe:57:4d:13:b1:f3:65:47:4d:73:2f:75:98:
                    eb:d6:ea:7d:1d:88:15:dc:bf:6d:a8:b5:70:3c:64:
                    b3:4e:fb:f6:48:27:f3:a9:60:07:f2:98:de:6d:be:
                    90:81:01:7d:76:d1:7c:9b:d6:dd:62:d8:35:de:0f:
                    ce:63:db:5b:6c:65:0d:ef:e7:92:70:3a:f5:1a:cd:
                    90:98:9d:93:da:9e:af:81:58:b2:13:17:a8:72:ea:
                    de:98:42:2c:ab:73:8e:2d:ee:0c:52:f9:d4:34:2e:
                    ee:c2:9e:e5:5a:42:b7:ac:2a:df:86:e4:0b:8b:9c:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:64:BA:06:9E:78:E7:8C:49:14:17:EF:E7:29:9F:A1:1D:E5:BA:2E
            X509v3 Authority Key Identifier:
                keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:52:aa:3f:47:5e:da:a8:91:e1:25:6f:e0:18:27:cc:f4:
         42:cd:2c:bb:c8:66:4a:27:fc:6e:3e:fe:64:a4:d0:80:e1:2b:
         0c:92:f7:71:60:37:f1:12:12:a2:41:1c:65:a2:f7:6b:b2:37:
         69:b7:ff:f1:b4:3c:34:ed:07:b2:ac:88:ef:e9:d0:63:bc:35:
         6e:89:59:3e:f6:60:50:ad:b2:3d:9a:9f:f6:d7:f7:8b:ca:2b:
         ae:bc:85:72:6c:f5:d7:d7:03:71:c0:4b:91:75:8c:d8:4f:40:
         65:ed:bd:1c:85:be:7d:75:96:9f:f7:b8:39:44:5d:b8:aa:8a:
         bb:2a:d4:18:83:d6:59:e6:09:48:4d:17:fb:03:45:4f:11:85:
         af:c3:a5:56:c0:c9:c2:a3:cc:c0:66:38:0a:4f:f8:bd:58:4e:
         e1:2d:60:f7:0b:6f:9b:5e:fc:9c:55:c8:2e:28:2e:46:fe:ed:
         d6:e0:82:5a:d2:d7:3f:46:5a:f3:b9:eb:c0:7f:25:7d:ed:3e:
         e2:9b:57:3b:e2:48:c8:b4:9e:fd:7d:06:33:70:8d:60:8c:43:
         3d:ce:64:e9:3e:dc:24:ed:08:24:34:29:c3:f3:40:c6:8f:4e:
         1e:3e:b8:0d:27:1a:a8:53:dc:1b:ee:4a:bc:8b:2c:b2:5e:35:
         7a:b8:56:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:29:52 2025 by rpki-client