Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          WF9E8ZeG5yppgTqcMxHYhmDcPLcdPcloh3WC8OdIoEs=
Subject key identifier:   06:FA:6F:9E:B7:EF:58:E8:C7:0C:D7:97:B6:33:80:28:B4:58:15:AF
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       0198D6CD67124A87C4B7A600D179E3CD360B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          011F
Signing time:             Sat 23 Aug 2025 12:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:42 +0000
Files and hashes:         1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: 3+IXvXe3LWJpFgmFYDbowTyI/tCg7hRoRquVW+R7gAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:67:12:4a:87:c4:b7:a6:00:d1:79:e3:cd:36:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Aug 23 12:00:42 2025 GMT
            Not After : Aug 24 12:00:42 2025 GMT
        Subject: CN=06fa6f9eb7ef58e8c70cd797b6338028b45815af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3a:04:40:53:50:1c:b8:01:c7:52:14:01:20:
                    56:91:eb:4f:c8:16:62:26:2c:8c:4f:ae:f3:3b:db:
                    9a:11:b9:cc:39:c7:a3:ea:32:9f:8b:e8:af:d1:70:
                    39:42:e7:e8:c3:07:7b:1d:f1:1e:31:55:5c:cb:78:
                    ec:5b:9f:c5:60:ab:1c:a8:1a:f2:48:3f:7f:1c:95:
                    7b:0a:fb:77:79:6d:2c:1c:81:e4:1c:34:f3:e0:33:
                    30:c9:c5:ac:57:ed:e7:24:1a:5f:68:2d:4b:9e:ef:
                    88:a9:e4:86:0c:95:91:d1:5f:a4:19:b7:70:2b:6d:
                    23:89:4b:e2:3f:58:48:0d:13:ea:cc:a1:26:b3:69:
                    0a:11:63:9a:1d:18:1b:09:c1:b2:36:e6:8e:62:85:
                    8a:40:ad:dc:93:1e:4f:e3:8b:b2:cb:16:55:1f:a7:
                    93:dc:bb:e8:77:14:5b:44:6e:67:25:82:15:a2:e9:
                    58:61:3f:53:b4:6e:75:1d:67:98:9d:22:a1:04:5b:
                    83:0d:7f:11:b8:13:25:e3:1d:55:58:43:50:0b:71:
                    4a:41:6c:da:ef:82:15:cc:5d:91:37:d0:09:d5:34:
                    55:fa:38:3f:15:01:27:f8:7f:99:6c:d1:7e:d9:bf:
                    1c:01:e0:7f:84:31:0e:9b:76:92:0b:5f:ab:b3:29:
                    53:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FA:6F:9E:B7:EF:58:E8:C7:0C:D7:97:B6:33:80:28:B4:58:15:AF
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:45:2d:90:ef:a4:55:3c:68:28:22:4f:d7:2c:51:69:4e:
         cc:89:b3:ec:fc:76:cb:3e:f0:85:c0:cb:d7:b4:91:5b:f7:cd:
         f7:93:55:c1:fe:bf:81:ec:e9:6e:6d:e9:98:6a:3e:53:3e:06:
         42:e9:71:be:59:4e:2b:8b:f3:40:86:b5:8a:17:98:30:27:c0:
         af:cd:81:10:3e:35:c5:dc:75:ea:e2:92:d2:1d:04:c2:5d:05:
         24:99:79:71:39:c0:f4:6a:99:17:b0:19:a9:22:d4:31:2e:03:
         55:87:f2:cc:ec:7d:85:85:5e:af:e9:05:bc:d4:7d:9b:6c:d6:
         79:04:d9:cf:4a:c4:c8:4f:a4:65:e0:ef:4a:14:37:12:b3:bf:
         e8:41:d3:02:3d:ea:08:07:0f:94:1e:69:d4:32:a5:d7:f9:65:
         30:04:fa:f1:a3:64:c6:63:36:7f:cd:49:3e:e7:6e:a1:63:1e:
         79:ef:5e:fc:ad:35:8f:c3:24:18:fa:00:68:af:bd:34:41:fc:
         33:60:97:6b:16:b0:cc:c2:3c:d6:ec:ae:09:b9:66:bd:4d:ba:
         1e:bf:29:4f:de:3f:a1:7b:6c:b5:cf:7f:fe:ed:0e:c9:e6:56:
         e2:ee:61:22:a1:59:71:13:8a:c5:2f:74:ce:59:f3:d4:c5:73:
         8e:b3:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:20 2025 by rpki-client