Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          Mp+/Jyifj4l2CbFlXK15jBQqvpmbENoAtfyR8P1Yhcc=
Subject key identifier:   03:B8:F5:8C:E8:96:02:81:D5:6A:60:D1:B6:2C:8F:41:10:FE:60:D5
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       0197B7EA423D0D2EB8920C37633B4E06756B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 19:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:12 +0000
Files and hashes:         1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: s2mVhUcTPmbjdccMIVuYQ44BwxtlI4qJ0hsuwqrHWaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:42:3d:0d:2e:b8:92:0c:37:63:3b:4e:06:75:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Jun 28 19:01:12 2025 GMT
            Not After : Jun 29 19:01:12 2025 GMT
        Subject: CN=03b8f58ce8960281d56a60d1b62c8f4110fe60d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:d9:c5:37:03:31:b9:49:d0:be:d5:50:36:
                    c3:20:6d:66:70:b8:dd:71:96:7b:3f:c9:36:77:bb:
                    a4:f1:66:2d:4d:1c:38:07:96:a7:82:c9:cd:ee:54:
                    d9:10:2d:d1:f5:90:be:a1:32:2c:b9:29:07:a2:10:
                    b6:46:f4:38:4f:be:2d:0b:67:7e:70:57:a0:01:c8:
                    3e:37:c8:dc:6f:b1:7f:e6:7f:fd:64:49:05:30:78:
                    ef:48:29:e5:73:f3:d7:d0:9a:c5:39:d0:5e:6c:e3:
                    6f:9f:72:4c:1e:b4:f0:50:08:11:63:f0:ba:c3:26:
                    e8:75:17:2c:0d:dd:13:cd:88:af:09:87:98:31:12:
                    27:e3:40:f1:e8:82:47:06:87:45:6c:be:ee:d2:f2:
                    17:9b:d1:69:6c:5a:13:ca:89:d8:d2:d6:d0:5a:ba:
                    b4:7b:d7:67:d0:f7:78:f5:73:e1:1e:46:00:b6:3f:
                    37:2d:3e:78:4a:1b:97:83:7b:92:6b:18:ad:bc:b8:
                    61:75:a9:48:00:30:6d:20:86:4a:e9:a3:4f:ec:a9:
                    6f:f0:58:28:fa:00:8c:ca:1a:75:f7:91:29:2c:e8:
                    0f:7f:af:23:18:88:b6:30:76:fd:88:7c:29:53:16:
                    4b:81:9c:7b:99:de:94:79:c1:3a:83:fe:cb:7b:04:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B8:F5:8C:E8:96:02:81:D5:6A:60:D1:B6:2C:8F:41:10:FE:60:D5
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:12:df:72:0f:53:3c:c6:d2:b9:f8:94:4a:09:11:ce:18:
         fc:62:a2:49:3b:fa:49:8f:bb:64:2a:c7:da:8a:93:42:3b:97:
         d7:cf:fa:43:87:f4:27:f4:c4:79:a8:3f:2a:57:c6:80:10:47:
         73:bb:5a:46:8f:39:fd:d8:01:eb:b0:9c:b3:0c:3a:5a:5f:85:
         15:8f:37:16:31:41:5f:eb:54:54:44:2d:47:10:74:af:ee:13:
         66:a6:bb:09:62:26:9a:9a:c6:ec:f0:6f:ef:8f:e8:1c:f9:37:
         7e:e4:ab:8a:31:3d:1f:8c:d5:9e:b1:c8:19:35:11:18:a5:45:
         e3:35:f2:c9:e0:ba:c2:32:d4:13:b3:3d:0e:fe:60:90:27:5b:
         5a:c2:22:7c:44:c5:10:cf:a4:b9:c5:d0:bf:38:6c:b9:2d:f3:
         51:56:a9:7c:8d:8e:9c:38:79:d0:0f:97:83:84:b9:65:ec:e4:
         0c:ee:6a:7c:a1:ff:b8:5b:ec:de:1d:1e:b3:03:a2:55:39:d8:
         d0:84:cd:53:1a:d8:86:ca:17:e1:7c:85:58:38:05:6a:9f:95:
         65:f3:4e:61:d3:55:99:24:9c:62:17:c6:2f:d7:8d:60:2b:3a:
         55:49:e6:90:3c:59:c2:11:a0:6e:19:b8:98:c3:5a:90:bc:ae:
         df:6d:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:39 2025 by rpki-client