Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
File:                     vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft (raw, json)
Hash identifier:          42kx4cGzXF7qLgvpfV5Q+keMv3JHqdpanZv5fSI3u2I=
Subject key identifier:   AF:B4:E7:51:08:77:58:A2:8C:60:D5:10:3F:16:F8:70:88:94:BB:98
Authority key identifier: BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94
Certificate issuer:       /CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
Certificate serial:       019692286F96F410AE324776A64BDEDC8B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
Manifest number:          151F
Signing time:             Fri 02 May 2025 18:00:45 +0000
Manifest this update:     Fri 02 May 2025 18:00:45 +0000
Manifest next update:     Sat 03 May 2025 18:00:45 +0000
Files and hashes:         1: SReOpAhCLmuOcAyk55_tk_b6gzU.roa (hash: HeVQ3nZoCRM6Iyc21jnOVqYiR72eDfZp5jwY3EJ/nAk=)
                          2: vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl (hash: dP+cfMDhOT/3AcPuKwntyQeMEGeRlr13Zt3+kHeqbm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 14:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:92:28:6f:96:f4:10:ae:32:47:76:a6:4b:de:dc:8b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be966dbeb641382a15f467f5a03e9a96fa1dc194
        Validity
            Not Before: May  2 18:00:45 2025 GMT
            Not After : May  3 18:00:45 2025 GMT
        Subject: CN=afb4e751087758a28c60d5103f16f8708894bb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:82:c8:91:f4:01:08:fa:8e:27:1d:e9:3e:
                    1a:4b:06:cb:b7:b4:46:80:93:7b:a3:b5:84:ca:af:
                    3a:66:d9:6f:d0:c7:4f:11:b3:88:60:71:3a:e6:a6:
                    48:78:a5:92:50:72:66:96:6e:2f:3f:85:36:67:38:
                    76:8c:ea:b4:2b:ec:f6:37:67:4b:40:98:30:a4:0d:
                    74:4a:42:70:5d:c3:63:14:dd:d1:44:1e:44:ea:e2:
                    07:24:38:de:7f:da:1b:ba:53:7f:0a:8e:b4:14:42:
                    a1:47:f3:38:c0:34:bc:ab:1b:bf:81:6a:c0:1b:19:
                    ee:82:d7:b9:2a:36:29:b2:2c:a8:d4:d9:c9:41:37:
                    c5:84:6b:b4:30:d4:fc:ec:90:08:1d:0b:4c:ff:ce:
                    56:0d:f4:4d:df:3e:e7:ac:49:23:b4:4c:44:9c:4e:
                    67:bc:71:55:2c:e4:90:3c:ad:ad:7b:30:74:78:9b:
                    72:c4:61:e4:9d:42:06:8f:9b:11:94:03:a0:05:19:
                    f9:2e:e7:cf:36:7f:1b:3a:7b:75:9c:ab:f3:cd:6e:
                    29:90:e7:9d:93:9d:67:25:25:bd:8e:31:90:15:cb:
                    c5:46:2e:5e:2f:9e:51:90:45:44:55:12:07:ef:8d:
                    de:66:04:24:85:e3:1d:a7:b2:22:50:08:37:2c:bd:
                    b1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:E7:51:08:77:58:A2:8C:60:D5:10:3F:16:F8:70:88:94:BB:98
            X509v3 Authority Key Identifier:
                keyid:BE:96:6D:BE:B6:41:38:2A:15:F4:67:F5:A0:3E:9A:96:FA:1D:C1:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpZtvrZBOCoV9Gf1oD6alvodwZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e212d2-fb72-48cf-8806-14b8d30f1397/1/vpZtvrZBOCoV9Gf1oD6alvodwZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:65:78:80:ee:70:c0:b7:9d:ae:0f:d0:69:18:83:a7:6c:6d:
         9a:51:42:6c:37:55:da:ef:16:4c:70:3d:ce:31:22:ef:56:c9:
         53:f2:87:db:4a:99:88:9e:e6:4c:37:cd:1d:12:91:60:2f:f5:
         99:08:0f:0e:67:84:dd:68:d6:fd:eb:ac:06:e8:22:5b:a8:10:
         62:5d:18:bc:95:12:c8:34:02:a5:fa:dc:7c:b4:85:24:39:41:
         6d:ae:6c:38:ec:dd:87:08:da:7d:ad:ab:d3:f0:fa:2e:ef:95:
         e4:61:0c:12:ea:c1:33:34:60:92:12:18:f8:0b:a9:7b:b8:77:
         37:50:54:0c:27:3f:eb:dc:07:39:2c:08:f8:7c:a2:e4:79:94:
         60:b7:a7:24:d6:70:03:5a:20:11:05:78:c7:1c:c0:78:dc:11:
         86:a5:a0:c3:c9:7c:31:81:d5:77:9d:83:1c:3f:cc:0e:5f:db:
         e2:f4:00:f8:1d:ab:bb:9d:75:3b:3c:97:5f:a9:65:70:a3:4e:
         a1:da:6e:80:3e:ff:03:f7:9d:0f:63:d3:be:68:f5:b8:99:21:
         de:cf:d9:ca:ec:d9:cd:d3:60:70:53:54:44:6e:f6:3e:4a:e8:
         15:5c:af:11:ad:48:ce:18:06:f2:27:b9:6b:fa:6c:3a:77:71:
         7a:8f:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:16:40 2025 by rpki-client