Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File:                     vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier:          X49JdK5VOTPTqC8OVT3b9XWz+JSQMzV/luIgDSj6duc=
Subject key identifier:   E3:3F:82:89:17:1F:F1:B0:9B:FC:5D:64:7E:F7:9C:C6:DE:7A:36:B9
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer:       /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial:       0198D73ADF369AE6C1CEF57F4B63129F8085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number:          05A2
Signing time:             Sat 23 Aug 2025 14:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:16 +0000
Files and hashes:         1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=)
                          2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: RWzq20JrkKN76zrseztd7vBPF1GC7nAH+OkqgCcu/cY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:df:36:9a:e6:c1:ce:f5:7f:4b:63:12:9f:80:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
        Validity
            Not Before: Aug 23 14:00:16 2025 GMT
            Not After : Aug 24 14:00:16 2025 GMT
        Subject: CN=e33f8289171ff1b09bfc5d647ef79cc6de7a36b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:c1:ee:7d:00:24:de:d4:bb:0a:a1:39:e5:
                    66:fb:8c:2b:2b:da:9b:d9:ee:39:10:6f:2b:66:86:
                    b0:66:af:f0:85:bc:f6:15:21:19:4c:76:1f:e3:0f:
                    03:f3:06:b6:13:e8:b7:e1:9c:1a:53:e8:63:df:f0:
                    17:6b:9e:b3:67:14:3d:4f:67:d9:81:72:f7:d6:f1:
                    d4:cf:3c:2e:0a:8c:a8:be:07:f7:b2:5e:39:4b:4b:
                    dd:b1:8b:a8:11:1f:82:fc:c3:e5:d4:97:81:d2:fa:
                    2e:86:00:01:72:4d:4c:d3:94:06:28:c3:ae:84:c8:
                    67:c3:a9:ef:1e:a3:0e:97:7f:b0:10:6f:5f:b2:f3:
                    45:f5:44:49:5b:a3:e8:2b:17:a6:9b:5a:38:c7:9c:
                    4b:c0:2e:a6:fc:60:cf:56:80:fc:24:db:03:c7:b8:
                    48:5c:5b:73:2d:82:e1:eb:d7:01:e0:ef:0f:6a:d4:
                    3f:ac:92:82:7d:e1:05:59:32:e4:8f:75:f7:a3:27:
                    fa:00:ca:e7:3c:41:88:85:49:45:c8:94:db:81:27:
                    f3:ae:d2:e6:c0:99:bc:df:e4:8a:38:e0:78:32:c7:
                    f4:f2:18:49:ff:05:bf:40:e5:c8:fc:49:06:36:34:
                    ca:01:d5:a2:f8:37:fe:bd:19:e4:9f:51:92:f7:d4:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3F:82:89:17:1F:F1:B0:9B:FC:5D:64:7E:F7:9C:C6:DE:7A:36:B9
            X509v3 Authority Key Identifier:
                keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:96:0b:42:4b:85:5d:cd:85:01:ce:f1:5b:61:89:2f:ca:34:
         dd:ac:d9:ce:9b:ac:2a:c9:f6:4b:63:31:b9:b5:25:44:23:05:
         88:93:b6:2f:b3:55:27:d9:45:c1:8e:ab:58:26:54:67:51:b7:
         35:7c:46:de:f1:07:a1:66:88:fb:6f:34:80:d4:c5:85:1a:d0:
         b1:70:a0:be:d8:e2:62:bd:f4:de:24:0a:15:f3:aa:e5:9d:19:
         88:7a:15:69:db:5e:d5:3a:cf:a0:38:07:3d:49:b4:ad:b3:ce:
         bd:bb:4d:94:20:b2:05:f8:d2:d7:53:e4:99:69:18:f6:57:7e:
         44:08:c5:57:b1:5f:80:75:36:39:a9:ea:05:13:8b:48:28:bb:
         1e:3b:f4:ee:1e:61:46:01:02:ea:07:9f:0f:4e:cd:f2:ec:12:
         27:5c:38:5e:69:2c:aa:3f:31:90:f9:1b:c0:8b:9c:b3:f8:83:
         01:ee:85:70:bc:27:0e:b8:d8:5f:bf:70:12:6d:01:c9:c9:e8:
         48:9f:bf:06:70:a5:eb:55:33:8a:fc:ae:f2:40:51:c7:ce:d1:
         e4:c3:b4:51:6c:9b:6d:9e:4a:fe:52:1b:f1:84:dd:2b:53:b1:
         d0:87:11:38:29:dc:2f:89:1c:a0:ae:40:56:b7:78:7e:b9:2c:
         92:7d:02:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:13 2025 by rpki-client