Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File:                     0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier:          YsMBvQJJb4KI8Mn2EF69Y2duf+dFbOFFOI4FEuwM4JY=
Subject key identifier:   05:55:DC:6E:55:71:43:34:88:5D:1B:82:C7:3A:27:15:3F:80:B8:AD
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer:       /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial:       0198D5BB92A1FBB506E7CAAD82D16FD20D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 07:01:36 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:36 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:36 +0000
Files and hashes:         1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: s7Kzdt7BKi7JXtXBS5+hRCeJ8YsQAoWNKzxgj4BzC8A=)
                          2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:92:a1:fb:b5:06:e7:ca:ad:82:d1:6f:d2:0d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
        Validity
            Not Before: Aug 23 07:01:36 2025 GMT
            Not After : Aug 24 07:01:36 2025 GMT
        Subject: CN=0555dc6e55714334885d1b82c73a27153f80b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:9a:ad:aa:b2:84:17:4c:3c:0f:d9:d3:90:
                    9f:dd:47:44:bc:54:f7:47:fc:41:80:6d:bf:a8:88:
                    ed:b8:14:f1:0e:7c:45:da:d3:2d:b4:52:9b:a8:f1:
                    0a:86:18:e1:06:93:71:80:d1:f1:c2:f2:49:9a:0a:
                    5d:a1:c3:4e:31:98:1b:0b:8b:5f:f5:cd:d0:54:4f:
                    87:aa:45:43:c7:e1:b1:05:9e:cf:c4:3e:18:eb:08:
                    60:8c:94:02:6c:4b:ca:29:61:41:50:89:59:2e:81:
                    cc:56:e1:89:bc:40:86:c2:99:c4:0a:86:20:d7:5d:
                    86:d0:1a:43:77:0b:97:f1:92:f2:5b:5b:70:91:7a:
                    ef:4f:04:48:b1:15:bd:60:9e:b2:0d:34:e4:20:1a:
                    22:88:2a:46:7b:21:1d:73:af:a4:4f:52:4f:5e:0b:
                    cf:df:f1:07:45:9f:5f:9f:b2:33:21:49:29:d1:8e:
                    cc:35:13:7f:8e:36:00:bc:ae:8d:bf:9c:8d:87:6f:
                    ef:1c:62:6a:a5:11:0a:58:c2:27:e0:de:a9:ff:5e:
                    d3:f2:d4:3a:b0:c3:eb:e1:53:25:cc:cb:30:db:08:
                    a6:93:5c:5e:fe:c4:19:fe:bd:98:67:0a:c1:d6:bc:
                    1d:90:ff:35:8f:ef:69:e1:5c:54:07:83:c4:b6:ae:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:55:DC:6E:55:71:43:34:88:5D:1B:82:C7:3A:27:15:3F:80:B8:AD
            X509v3 Authority Key Identifier:
                keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:13:ad:ab:13:b2:0c:ae:46:99:67:c7:53:ef:6a:b2:06:
         82:64:24:a1:17:79:1e:26:a9:c3:64:72:7b:20:3f:81:29:17:
         64:bb:7f:a8:8f:52:1f:39:4c:0a:3f:b2:6e:a5:1c:db:e4:4a:
         34:1d:61:c5:c3:b9:08:10:a4:32:32:a1:43:72:83:9c:6b:b4:
         b5:ad:4d:10:e3:1a:6c:f3:54:8b:f2:fe:96:55:4d:ab:d4:05:
         0a:33:e2:6f:96:29:36:e0:36:b7:26:44:07:3a:f4:51:3d:00:
         74:89:13:0b:11:29:6f:64:f9:2e:4b:c9:7b:dc:6e:46:b7:a8:
         61:45:5c:ac:bb:88:69:ba:60:76:e6:5f:b4:2a:12:a1:79:63:
         c0:0f:68:79:16:8e:4f:7e:04:d2:bf:d5:f3:a8:71:63:2d:41:
         0d:9a:3e:79:88:bc:ca:d4:c0:84:3b:de:cf:1d:ca:85:29:1d:
         90:64:ec:df:14:cd:9c:df:f3:6d:0e:47:37:76:49:18:13:19:
         a0:6b:b0:40:75:0a:43:bb:7d:9b:1b:93:3d:66:a9:e4:52:d7:
         64:26:b3:9b:aa:81:cb:53:69:72:f6:0b:5f:58:d8:4f:22:e8:
         2a:d3:6c:25:75:b5:fc:43:48:af:aa:28:5a:ae:94:b2:4a:34:
         14:7d:11:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:17 2025 by rpki-client