Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
File:                     vWqnNi02eSy8-oNgm111zJZfP68.mft (raw, json)
Hash identifier:          n9Vr2Xun5nZCr0R5tcZZdP+9JoFPIGaCXGt7pQTR2Zo=
Subject key identifier:   BD:83:39:22:82:66:43:5A:C1:6C:87:21:17:9B:F9:32:AF:42:1F:FE
Authority key identifier: BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF
Certificate issuer:       /CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
Certificate serial:       0198D5BC239405B781E9F214936901942D7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:13 +0000
Files and hashes:         1: Sl2g3CrSt9KX4nf7RqblAxhzwzY.roa (hash: V3ZD7OVN+yHlCXCBI+yKadNAgEWwEZET8SnJuQKupx4=)
                          2: vWqnNi02eSy8-oNgm111zJZfP68.crl (hash: AFBFKDwsj705RJdNNRZYs220c8xJKQN8WYxqtHJCtFM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:23:94:05:b7:81:e9:f2:14:93:69:01:94:2d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6aa7362d36792cbcfa83609b5d75cc965f3faf
        Validity
            Not Before: Aug 23 07:02:13 2025 GMT
            Not After : Aug 24 07:02:13 2025 GMT
        Subject: CN=bd8339228266435ac16c8721179bf932af421ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:e8:64:a8:19:85:82:a2:39:40:16:6a:da:
                    3f:5d:61:87:1d:89:be:61:e4:f6:03:65:37:c2:6e:
                    17:e7:40:8d:87:5b:86:c2:bf:e2:3a:57:f3:b7:39:
                    15:7e:f7:46:1e:cf:e0:53:57:b3:1c:8b:00:8b:08:
                    e1:61:0b:ca:d2:bb:d5:f7:4a:ef:d8:d1:96:30:66:
                    90:6e:b0:67:b2:5b:96:a2:fb:ea:b5:cb:9c:27:a3:
                    9d:3c:2f:28:5e:f5:97:64:a1:cb:58:57:ca:18:b3:
                    8b:72:fd:b3:69:72:c0:53:83:6d:d5:2a:3f:14:c1:
                    38:08:de:4f:06:78:3a:33:08:b1:b2:48:c8:b9:72:
                    d8:af:17:ee:e4:76:07:82:95:50:5e:bb:32:a7:b1:
                    6f:e5:6b:b9:4f:b5:7d:42:39:89:fa:ab:73:e3:1b:
                    12:98:db:e2:10:4b:07:6a:39:79:62:a1:c1:01:a7:
                    7b:d5:80:94:16:eb:13:3a:91:56:c7:d6:41:b3:05:
                    34:d5:0b:f1:e2:ec:c0:a6:25:a0:d6:17:b0:2f:bf:
                    25:d7:f9:52:1f:fb:78:8c:fb:93:1f:ec:cb:82:e1:
                    9f:de:19:fd:a6:bf:a2:cc:c4:9b:fb:01:44:95:47:
                    6c:87:ab:86:56:ef:44:fb:0d:8e:81:ad:20:2c:c8:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:83:39:22:82:66:43:5A:C1:6C:87:21:17:9B:F9:32:AF:42:1F:FE
            X509v3 Authority Key Identifier:
                keyid:BD:6A:A7:36:2D:36:79:2C:BC:FA:83:60:9B:5D:75:CC:96:5F:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWqnNi02eSy8-oNgm111zJZfP68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f9a8ec-f582-475c-8cc9-d5c8635bec88/1/vWqnNi02eSy8-oNgm111zJZfP68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8f:43:56:e9:dd:ed:82:99:81:da:6b:81:a2:3b:ce:a4:8a:
         1a:8e:1a:e0:f3:21:3a:6a:a3:90:6e:7d:fa:c7:06:bc:fc:96:
         66:3b:02:2d:91:5c:c8:ac:70:96:56:75:54:97:a4:0d:12:bb:
         fe:b6:38:74:fc:5d:3a:2c:8b:6b:0d:2e:4b:d5:84:a5:af:7b:
         ad:34:86:ce:60:ec:46:a7:a8:4e:15:cf:e6:39:ac:53:a7:b2:
         12:4a:7a:13:26:55:dc:13:71:77:6c:66:ba:4d:a8:21:f2:5f:
         53:ef:44:31:c7:68:2c:31:81:df:aa:75:0a:b3:63:37:d6:b8:
         42:e3:f6:0a:0a:99:c2:28:7f:10:a3:b5:bd:58:65:fe:a8:77:
         7a:a7:eb:c8:ee:93:04:2d:53:78:f7:03:83:b4:ba:9b:88:45:
         d6:40:68:33:03:35:e4:6c:22:1c:16:fa:e6:e1:2c:7e:ad:15:
         be:9a:64:c2:02:d7:f5:d5:e9:bd:67:cd:7d:17:eb:2d:43:15:
         45:24:bc:51:76:76:48:4c:5f:84:34:8a:85:5e:54:22:41:ab:
         af:54:9b:d8:a8:4c:87:b8:65:a0:c5:47:ce:bc:64:26:1a:68:
         3b:70:55:d4:2c:04:b8:20:a7:95:b0:a2:9c:2d:9f:12:c2:bc:
         50:c1:af:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:14 2025 by rpki-client