Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          jJUy1HPafd2Whs3mcuTAcHA79rfoCZJ+ry1kSWczCJ8=
Subject key identifier:   87:FC:08:C1:1D:D6:57:17:45:88:35:6C:32:BD:49:4D:48:B4:DD:03
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01976D3DF43D6D60A1AEE5841608245B8A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          1224
Signing time:             Sat 14 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:06 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: 1qxThpkczRlFNtiXdPRBgfquHUGD7Fz3URG8S/Xya0I=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:f4:3d:6d:60:a1:ae:e5:84:16:08:24:5b:8a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Jun 14 07:01:06 2025 GMT
            Not After : Jun 15 07:01:06 2025 GMT
        Subject: CN=87fc08c11dd657174588356c32bd494d48b4dd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:24:f9:e3:88:e3:15:46:3e:4b:c2:be:eb:
                    6b:58:5f:54:ca:e5:f8:8a:a3:4d:9b:e5:79:85:90:
                    fa:dd:08:b5:16:d4:bb:f2:ec:de:54:28:5f:09:ea:
                    38:ba:0c:1b:e8:16:12:16:bb:89:78:71:10:63:17:
                    d8:96:c7:df:c8:9e:77:24:60:e0:5c:20:29:ce:d9:
                    45:c2:97:f0:dc:4f:d4:70:6c:88:4d:29:38:04:45:
                    fc:fb:cb:dd:c2:24:03:1f:7a:5a:08:9e:c6:93:b3:
                    38:9c:81:9f:b3:bb:12:ea:99:4b:73:e2:24:16:ce:
                    b6:1b:84:87:4a:ac:c5:d3:93:85:5c:06:21:fb:b7:
                    34:f7:ea:e4:d4:40:90:1a:2f:3b:4b:cd:ff:45:06:
                    c9:bf:2a:33:f1:46:39:9c:69:47:78:4e:ca:f1:26:
                    e3:5b:f5:3a:92:0d:f6:e3:02:fb:e9:51:42:1a:8f:
                    f3:a3:8a:e2:7e:7d:96:b8:bc:54:57:45:de:17:9d:
                    db:2d:17:9a:ce:44:e1:be:e1:76:7a:ea:1a:34:36:
                    87:ce:ef:d4:e4:87:07:41:67:7e:09:5a:aa:e9:45:
                    c7:5d:32:7c:d6:79:33:17:bf:ed:09:20:96:6c:22:
                    7d:33:af:a1:11:ab:f7:34:3c:55:eb:1a:d8:1b:6c:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:FC:08:C1:1D:D6:57:17:45:88:35:6C:32:BD:49:4D:48:B4:DD:03
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:d7:97:14:f9:cb:f0:cf:11:fe:0d:16:c7:63:a5:8a:88:
         6b:5a:e2:88:3b:93:a6:39:e7:55:fb:d5:e6:fd:1e:fe:f0:61:
         ae:69:61:4d:cb:58:49:30:d5:16:5e:c1:f7:0e:4a:04:0f:45:
         08:b7:84:b0:ec:ad:45:f4:ea:f3:d6:35:fc:00:a3:7a:4e:9c:
         ab:59:86:c5:3a:27:ba:4b:ea:6d:14:6e:54:85:4d:98:b7:1c:
         65:87:d0:38:7b:3b:5d:11:0b:1a:61:da:e0:12:c2:33:cd:51:
         19:4e:af:7d:ed:72:aa:34:6a:c7:8c:68:c9:ee:6c:f8:28:c8:
         8a:a4:3a:33:c4:0b:54:45:fe:76:6d:64:52:8f:09:82:f7:fc:
         8c:42:9a:17:5a:5a:da:1c:15:cc:5f:50:83:ea:19:88:e0:f9:
         09:c4:18:11:94:c6:94:25:bf:55:7d:4a:f3:92:d8:c8:c3:05:
         96:1a:d4:d5:ea:c3:7a:64:3b:90:bb:c8:85:42:7a:9e:79:0c:
         07:28:9d:cf:c5:15:c7:fe:1e:80:d3:c2:a4:68:ca:74:09:be:
         a2:56:46:c1:83:58:18:17:40:b0:ce:07:ba:d5:66:f0:93:7d:
         94:2d:04:c1:e7:9d:15:ed:3b:de:0c:da:a7:1b:dc:9f:16:76:
         c3:2c:e1:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPfQ9bWChruWEFggkW4qPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx
YTU1MWYwHhcNMjUwNjE0MDcwMTA2WhcNMjUwNjE1MDcwMTA2WjAzMTEwLwYDVQQD
Eyg4N2ZjMDhjMTFkZDY1NzE3NDU4ODM1NmMzMmJkNDk0ZDQ4YjRkZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Qk+eOI4xVGPkvCvutrWF9UyuX4
iqNNm+V5hZD63Qi1FtS78uzeVChfCeo4ugwb6BYSFruJeHEQYxfYlsffyJ53JGDg
XCApztlFwpfw3E/UcGyITSk4BEX8+8vdwiQDH3paCJ7Gk7M4nIGfs7sS6plLc+Ik
Fs62G4SHSqzF05OFXAYh+7c09+rk1ECQGi87S83/RQbJvyoz8UY5nGlHeE7K8Sbj
W/U6kg324wL76VFCGo/zo4rifn2WuLxUV0XeF53bLReazkThvuF2euoaNDaHzu/U
5IcHQWd+CVqq6UXHXTJ81nkzF7/tCSCWbCJ9M6+hEav3NDxV6xrYG2ygXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf8CMEd1lcXRYg1bDK9SU1ItN0DMB8GA1UdIwQY
MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt
Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4
LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7jXlxT5
y/DPEf4NFsdjpYqIa1riiDuTpjnnVfvV5v0e/vBhrmlhTctYSTDVFl7B9w5KBA9F
CLeEsOytRfTq89Y1/ACjek6cq1mGxTonukvqbRRuVIVNmLccZYfQOHs7XRELGmHa
4BLCM81RGU6vfe1yqjRqx4xoye5s+CjIiqQ6M8QLVEX+dm1kUo8Jgvf8jEKaF1pa
2hwVzF9Qg+oZiOD5CcQYEZTGlCW/VX1K85LYyMMFlhrU1erDemQ7kLvIhUJ6nnkM
Byidz8UVx/4egNPCpGjKdAm+olZGwYNYGBdAsM4HutVm8JN9lC0EweedFe073gza
pxvcnxZ2wyzhbw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:43 2025 by rpki-client