Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File:                     Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier:          QGQ9Ez3hnXUrzXTXXq3Wq2cFTz11x++WAbydTKRaSqQ=
Subject key identifier:   49:61:A7:FA:40:17:F6:11:DE:6C:DE:4C:58:5E:FE:F8:D1:EA:76:49
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer:       /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial:       0198D73B99B312BB185882596867556749F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 14:01:04 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:04 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:04 +0000
Files and hashes:         1: 0yrxZSQJ1wUyH85Ez4W85_8deyk.roa (hash: oB/nrKT1HSAEvSmkGIU2bhiitJgSrJq6nsR9S6AnhzQ=)
                          2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: bSvtNphnNpjEhCtcyvS3WBk21BX9i6A+rVUwEDZC0UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:99:b3:12:bb:18:58:82:59:68:67:55:67:49:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
        Validity
            Not Before: Aug 23 14:01:04 2025 GMT
            Not After : Aug 24 14:01:04 2025 GMT
        Subject: CN=4961a7fa4017f611de6cde4c585efef8d1ea7649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d7:43:c1:40:62:5e:82:6e:86:a2:22:15:1e:
                    bb:ec:f6:48:7f:6f:f1:a3:14:12:a2:1f:c2:2b:08:
                    52:dd:bb:8a:5a:34:68:24:bc:da:c0:ba:79:b0:33:
                    4b:59:ea:bb:2c:7b:14:1b:62:7f:2f:61:26:8b:8c:
                    94:ad:cf:24:0e:35:0b:9f:e2:d5:08:94:e9:bb:26:
                    49:da:67:51:4c:ae:7e:a4:2f:8d:83:2f:5a:68:48:
                    30:f4:6a:5f:b4:6a:91:3c:01:82:2e:8b:f0:57:7d:
                    e8:e7:04:57:d4:0a:f7:81:28:5e:59:fe:46:03:4c:
                    b0:32:e5:18:ab:44:5f:47:a5:1e:d9:46:13:94:56:
                    1b:5d:5c:8f:00:9c:ea:82:8d:f2:42:15:02:b2:b5:
                    4f:91:d0:da:2f:9d:cc:52:88:50:68:d2:5c:4e:05:
                    21:ac:a3:78:12:e3:91:f8:f0:a7:17:28:3c:77:f5:
                    b3:9e:e8:03:72:f6:5c:60:18:5f:7b:dd:32:c2:5c:
                    46:6b:a1:70:56:75:53:d7:bb:c3:bc:64:01:3a:5e:
                    b7:d9:73:9a:17:44:f3:4b:08:7a:67:d0:8d:c5:2e:
                    1b:ea:33:79:2a:2b:aa:57:63:b8:79:0a:f2:12:43:
                    04:2d:ad:67:b1:f6:ac:2a:70:27:7e:4d:4e:aa:6c:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:61:A7:FA:40:17:F6:11:DE:6C:DE:4C:58:5E:FE:F8:D1:EA:76:49
            X509v3 Authority Key Identifier:
                keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:99:fe:ee:9a:5c:4f:7e:aa:ae:8e:19:7d:01:26:73:44:
         8a:44:e1:42:5b:80:d4:6e:af:d6:51:63:9d:4f:ef:91:ce:10:
         78:89:d3:a4:5b:10:50:25:57:d8:c2:c8:f9:d0:f1:a1:06:f5:
         15:f7:cd:24:20:a3:ec:d8:e9:6d:a9:a5:a7:e1:59:ab:c7:44:
         ca:aa:b4:17:46:dc:e8:f2:98:74:10:a4:cd:bd:4e:f3:67:3e:
         85:74:0f:10:ce:fb:6c:0d:09:27:10:2b:4a:00:5d:83:9c:54:
         86:d8:77:71:1d:af:e9:2f:ab:f3:04:c7:63:80:04:af:b4:cd:
         b8:24:f7:e3:93:a1:37:ef:ea:e1:9a:41:f3:0a:19:2b:97:f4:
         de:fe:91:27:42:0a:0d:b1:98:b1:24:12:47:0b:10:8b:bd:b1:
         ee:3e:fa:9d:59:c0:71:e9:1e:54:9a:d1:18:fd:26:8e:cd:0b:
         66:50:cf:39:10:a7:a7:fb:a6:40:38:b4:eb:b5:3f:b0:cf:d8:
         b0:1e:d3:29:0c:76:7d:bc:46:c6:8b:fe:0e:da:22:df:35:06:
         24:3f:d2:21:5c:58:17:34:c5:3e:33:8c:60:f5:0b:06:98:80:
         c9:0e:4a:d3:68:26:26:e0:9f:23:53:cb:4a:df:d8:7c:c6:bf:
         17:39:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:05 2025 by rpki-client