Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
File:                     VggFtzAYcRab0JuIZWnR9p3Bm1c.mft (raw, json)
Hash identifier:          kAjwJI6yG5AMn/rVlaGaJHGaa907wYM6gKF2T9wRz34=
Subject key identifier:   1C:FF:9D:A7:3B:58:D3:36:88:D6:99:4A:B5:A5:93:11:31:78:B5:65
Authority key identifier: 56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57
Certificate issuer:       /CN=560805b7301871169bd09b886569d1f69dc19b57
Certificate serial:       0196767A3B2DB5F239CFB35E07DED4517940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
Manifest number:          1511
Signing time:             Sun 27 Apr 2025 09:00:44 +0000
Manifest this update:     Sun 27 Apr 2025 09:00:44 +0000
Manifest next update:     Mon 28 Apr 2025 09:00:44 +0000
Files and hashes:         1: VggFtzAYcRab0JuIZWnR9p3Bm1c.crl (hash: 99ysxsd6/Tu8QrlPlQnKYJW6DyU/zjMMrnsgb2/UPq4=)
                          2: yXXR2fzrFaQnF3NWV4_d0yBPIgU.roa (hash: nTOlg6X5m06JtLL56eIgSs3eGUVRFrI3X2RQbngIypQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 07:29:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:3b:2d:b5:f2:39:cf:b3:5e:07:de:d4:51:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560805b7301871169bd09b886569d1f69dc19b57
        Validity
            Not Before: Apr 27 09:00:44 2025 GMT
            Not After : Apr 28 09:00:44 2025 GMT
        Subject: CN=1cff9da73b58d33688d6994ab5a593113178b565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f6:74:f9:d9:70:2e:73:6d:6c:a3:d9:cb:f5:
                    d4:cd:8a:5c:cc:56:54:71:42:a2:b2:ec:b7:ae:66:
                    dc:47:2b:bd:65:06:59:50:58:7a:00:41:c3:09:b5:
                    fd:d5:0b:41:48:6e:4d:a8:e3:98:4b:2d:85:18:d9:
                    98:fe:85:13:5f:b8:db:f4:e0:58:47:24:80:8c:2f:
                    c5:c3:aa:b2:4f:5c:f7:40:5b:42:d4:e4:04:c3:bc:
                    d9:e8:d3:ac:fc:7f:f9:f4:1f:28:43:a9:7b:24:02:
                    a9:39:8c:76:29:1d:34:8c:4a:12:a1:73:0a:5c:2e:
                    7f:74:46:28:77:0d:a7:cb:68:83:04:a0:c0:c1:54:
                    8c:8c:b9:4e:10:1b:6f:db:26:11:8d:db:9b:4a:a5:
                    39:83:4a:17:da:b6:43:ff:74:bd:ca:a7:8a:b5:dd:
                    66:2c:42:a0:34:fb:8a:96:dc:86:4c:7c:59:70:8f:
                    60:63:78:47:5e:c0:06:36:43:e8:3c:b4:59:95:2f:
                    94:61:bb:0b:9b:1e:a4:e7:4c:fb:49:e0:76:7b:d3:
                    a5:53:04:7b:e3:bc:1d:ae:8b:af:0f:70:90:42:27:
                    5e:e8:76:24:ef:9c:fa:cf:64:c9:b2:8a:ba:fa:0d:
                    8a:43:46:cc:97:1d:79:0e:ba:f7:22:df:0d:fa:bc:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:FF:9D:A7:3B:58:D3:36:88:D6:99:4A:B5:A5:93:11:31:78:B5:65
            X509v3 Authority Key Identifier:
                keyid:56:08:05:B7:30:18:71:16:9B:D0:9B:88:65:69:D1:F6:9D:C1:9B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VggFtzAYcRab0JuIZWnR9p3Bm1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7ccd2c-2c05-453a-b7be-08da420f28c8/1/VggFtzAYcRab0JuIZWnR9p3Bm1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:f4:8e:76:c9:63:29:b0:14:9a:d3:89:21:a3:0b:0e:95:
         e9:3a:87:65:7f:91:f1:72:33:5e:ae:d4:1e:83:aa:30:11:ed:
         74:82:ee:95:72:5b:44:f2:a6:1a:08:51:3f:95:27:78:df:6e:
         91:55:e5:b9:76:d0:b4:1d:09:8d:b3:ad:c1:0b:cb:e5:2d:41:
         00:87:57:96:1f:3f:53:71:fe:c6:d0:4f:89:18:8e:08:a9:98:
         ca:77:5e:33:07:7e:0f:50:9d:ab:52:b2:fb:13:79:5e:4a:c5:
         31:e0:fc:52:3c:c3:e3:74:92:50:68:06:78:fb:22:ab:3b:f0:
         61:8c:df:bb:08:1e:d7:77:49:1a:bf:5f:86:dd:47:9f:c8:7b:
         eb:71:38:eb:0b:90:c6:74:3a:5b:05:ec:ac:d2:89:f8:36:fb:
         6f:73:2c:d6:32:65:a9:6e:23:2b:4a:1b:56:a4:a9:cf:ba:ca:
         bf:8a:5b:d4:6d:18:87:d5:91:a9:bc:ec:34:64:f1:da:3e:63:
         4d:75:08:12:3f:d0:1d:a4:48:dd:c8:03:5c:14:37:c4:f2:39:
         27:c6:1d:a2:1c:21:90:00:dc:d6:45:e2:b1:9d:8c:5b:ed:71:
         0f:3a:31:31:c2:ce:98:03:91:30:31:df:ec:4d:a3:76:cc:4b:
         3c:2b:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:13:40 2025 by rpki-client