Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File:                     VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier:          MxJ9e0mpbWuU7eP7YvSKsU99XoWpYADumq8d67EnIkM=
Subject key identifier:   30:47:05:FC:C1:D9:49:F7:2A:D4:2D:05:90:D0:C9:52:88:D3:16:41
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer:       /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial:       019769614732A9A7F3346B55503538E07FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number:          0C74
Signing time:             Fri 13 Jun 2025 13:01:12 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:12 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:12 +0000
Files and hashes:         1: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: PpP5DvSkvOBI+snodqV7MFKAGgdWjYQsuxozOzpFDuM=)
                          2: XqfeZQF_1MV97o_zjJHjyzS8MaA.roa (hash: 7t9vzZ6FV6EcfJzjLHhMVS7Ff0/+2ubtRR3JHX0+dlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:47:32:a9:a7:f3:34:6b:55:50:35:38:e0:7f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
        Validity
            Not Before: Jun 13 13:01:12 2025 GMT
            Not After : Jun 14 13:01:12 2025 GMT
        Subject: CN=304705fcc1d949f72ad42d0590d0c95288d31641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:92:79:d1:63:6d:c2:36:a2:73:ad:09:9f:
                    5d:52:60:da:15:b6:f3:11:23:30:22:20:0a:a5:ea:
                    fe:45:f2:ca:12:44:66:3c:39:1d:cf:77:d5:37:8d:
                    0d:4b:db:d6:92:a5:bd:e3:43:fb:d8:57:39:f0:57:
                    cf:e4:cb:eb:86:d8:a1:7a:14:ea:5a:02:1d:d0:ff:
                    ba:d7:ed:47:db:1a:72:64:0f:8b:a6:1d:e8:d0:e5:
                    b7:2e:45:29:15:81:58:7a:ba:8c:74:b2:b4:f6:54:
                    60:2a:83:f7:24:3b:5c:68:aa:b2:5a:9b:f5:e9:ba:
                    46:6c:7d:8a:b9:95:6f:46:e1:fe:c9:77:7e:2d:6c:
                    b8:a8:92:8c:35:dc:23:17:c8:cf:0f:70:ce:1e:b6:
                    36:ea:ad:c5:86:69:7b:4b:a3:cf:a9:10:06:1f:d1:
                    8b:75:f6:a1:d1:d7:48:6d:69:09:9e:0f:f2:0d:58:
                    be:6c:ee:51:30:d6:f5:05:85:53:46:fe:7f:4e:f5:
                    31:d5:06:f2:a6:9a:1f:01:33:44:f4:b2:a2:8f:03:
                    fd:f8:01:28:2b:8c:5e:63:09:fa:81:ab:e3:21:20:
                    1e:c2:99:62:13:c2:80:3e:1e:9f:7a:42:33:f6:98:
                    23:f7:6d:40:39:7a:71:71:12:42:81:a6:15:e1:ff:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:47:05:FC:C1:D9:49:F7:2A:D4:2D:05:90:D0:C9:52:88:D3:16:41
            X509v3 Authority Key Identifier:
                keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:85:d4:6a:02:01:e8:ee:c3:61:47:5b:d5:80:de:8d:d1:d5:
         56:ae:c3:a6:42:ac:26:8a:02:57:9a:d0:3a:72:d2:61:60:30:
         b0:82:e8:23:4b:0b:6f:b9:11:72:05:3b:cf:9e:d3:df:fa:23:
         8b:ac:b4:03:26:05:97:5c:7b:30:6d:4d:4d:cb:c5:b6:51:62:
         81:75:00:4b:ff:e0:22:b4:a1:c3:bd:af:be:f7:2d:c4:b6:2b:
         4e:b3:8d:7a:ea:95:c3:63:f4:3f:5b:7f:b7:34:a1:fa:b8:b0:
         53:a5:e8:b2:59:54:87:7d:a2:fa:4d:9d:12:fd:ae:44:03:72:
         92:a9:23:15:83:48:8c:98:a2:4f:fd:90:0b:e3:81:a2:27:b0:
         51:61:28:d6:f8:55:4d:3c:f4:4e:df:8a:79:50:14:c9:5d:b5:
         e6:7c:62:b0:41:fe:b9:bc:31:30:6a:ab:35:03:78:83:9f:6e:
         a1:de:7a:01:3b:bc:71:31:94:96:fb:ef:12:14:46:58:ac:0a:
         7b:a6:79:53:09:90:f2:87:8f:2a:bd:22:04:d4:a5:5e:65:23:
         5d:7b:50:bb:8c:6c:0f:a0:18:c3:e0:04:c3:c8:53:49:52:7c:
         ac:71:32:51:48:3f:ee:69:f2:49:f8:76:35:1a:66:27:60:98:
         cb:ad:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:24 2025 by rpki-client