Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
File:                     MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft (raw, json)
Hash identifier:          St0ciWUdhCSWlEzLoGRCsfbpsRY9VwFFSyKh4vyTIuQ=
Subject key identifier:   28:C1:77:49:08:91:0D:44:B1:6D:45:D4:0E:64:4C:87:85:6A:AC:9A
Authority key identifier: 31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9
Certificate issuer:       /CN=31533690ab184f433f1760f3feaa184c443e70f9
Certificate serial:       0196771E978511F8477AD1D50C19A305BC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
Manifest number:          04BD
Signing time:             Sun 27 Apr 2025 12:00:15 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:15 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:15 +0000
Files and hashes:         1: MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl (hash: rG2+w5xuQLt7vsn2CPIk9g6dTvP8yqpbPx/B7I8Xi80=)
                          2: oWYw73o0XVlV6OpLKF4dF1YQeis.roa (hash: 5U7LFltASNwuXUP6x/MbRpxou9KC14KfkL67az3+D4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:97:85:11:f8:47:7a:d1:d5:0c:19:a3:05:bc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31533690ab184f433f1760f3feaa184c443e70f9
        Validity
            Not Before: Apr 27 12:00:15 2025 GMT
            Not After : Apr 28 12:00:15 2025 GMT
        Subject: CN=28c1774908910d44b16d45d40e644c87856aac9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:95:8b:27:52:d3:57:de:19:22:01:e1:ea:
                    74:7d:49:4b:13:f4:da:e9:2e:4b:9f:3e:3a:a2:d8:
                    5b:ce:19:3f:64:53:68:91:ce:ad:94:76:13:b9:90:
                    1a:7b:62:48:96:d1:89:54:d8:51:88:ad:03:bb:5f:
                    d5:ad:7d:ec:32:14:b2:11:d3:d0:8c:46:25:cd:77:
                    3d:f3:5d:84:bf:d3:d5:b2:f9:70:ac:ba:06:7e:ed:
                    00:c5:ec:30:0c:18:4c:24:05:eb:d9:9c:b7:4a:04:
                    c2:fc:50:81:55:2e:03:c7:f9:06:8e:59:ce:a3:2b:
                    df:bf:16:de:e7:f4:ab:f3:7e:04:cc:46:0d:30:09:
                    71:9c:5c:30:7d:c0:ea:6d:36:16:14:93:3a:a6:2f:
                    a1:92:a3:e9:4c:29:50:56:ba:94:3a:07:9a:b0:a4:
                    02:e2:3a:9b:04:fa:f6:c4:8e:55:e9:66:60:7f:ba:
                    a4:0b:60:6e:78:11:f0:42:ea:7d:9c:b8:ee:a5:5b:
                    f8:bb:83:64:09:f3:07:e2:60:4a:88:07:de:49:5c:
                    a7:b4:83:92:15:e6:eb:e8:a4:6d:7b:cd:aa:2c:d6:
                    71:fe:44:62:86:ec:9d:ba:b3:27:f6:03:2a:60:d2:
                    2c:f5:84:b5:01:ad:6e:e4:70:c4:6c:a4:1f:0a:64:
                    7a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C1:77:49:08:91:0D:44:B1:6D:45:D4:0E:64:4C:87:85:6A:AC:9A
            X509v3 Authority Key Identifier:
                keyid:31:53:36:90:AB:18:4F:43:3F:17:60:F3:FE:AA:18:4C:44:3E:70:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b638a5-d903-4a31-9489-cb92bb3ed768/1/MVM2kKsYT0M_F2Dz_qoYTEQ-cPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:c4:1d:47:91:38:e4:b5:6b:dd:39:b3:c0:41:cc:59:f9:43:
         e4:0a:77:2e:a9:57:9e:cf:40:f5:3e:af:a9:94:e5:5b:6c:b3:
         2f:db:fe:e5:d8:1f:a8:02:ef:d1:a5:d9:5a:88:b7:a3:19:f3:
         b2:93:fd:17:ef:3a:30:7b:70:2e:fe:9a:9a:55:c0:d8:56:8b:
         98:68:21:db:e1:31:70:bd:8a:90:0a:19:89:8c:b9:f6:fb:7c:
         93:8d:7d:6a:55:86:c4:21:bc:61:7e:30:ce:35:5a:84:41:6a:
         7d:4f:ad:e8:47:b0:50:11:10:c5:a0:06:67:98:eb:34:d1:55:
         27:4e:ab:c9:7a:a3:fc:5d:1a:63:49:29:56:59:c8:a2:ff:e9:
         29:7e:48:c6:26:c4:3d:78:13:51:d2:fc:4f:92:23:f2:30:3e:
         bb:0e:4a:06:8a:b8:8d:69:bc:49:a2:df:d0:5c:db:3a:22:e1:
         32:14:7c:d1:4e:c3:78:98:fe:46:4c:b4:d2:92:8a:1c:45:ab:
         f4:c0:81:e3:a0:d6:f4:55:71:c3:2b:7a:fd:4d:b7:d0:ad:51:
         48:4c:ae:10:2e:4f:e5:7d:a1:0b:05:e8:b2:bd:c8:49:dd:9f:
         f8:b0:e9:3d:cf:de:0f:0d:55:4e:13:3a:ec:26:b4:0b:6f:a5:
         5c:fa:da:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:31 2025 by rpki-client