Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
File:                     v_1vzVFt27AQL1sDI6JsDtf2jCI.mft (raw, json)
Hash identifier:          Vg8FDFvNVpanOO29NT7RHj/QNKIqDNriRsIjxDwbfm0=
Subject key identifier:   E9:E9:32:20:28:96:D8:CE:63:79:B6:F8:3A:F9:01:7E:51:A4:D1:96
Authority key identifier: BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22
Certificate issuer:       /CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
Certificate serial:       0198D85199A4A7F2AB807E1F86C35F000CD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 19:04:43 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:43 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:43 +0000
Files and hashes:         1: v_1vzVFt27AQL1sDI6JsDtf2jCI.crl (hash: G/y42iv+/OqrN2oIDH9A8VHB36wkGtbiOAQRxkUOAjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:99:a4:a7:f2:ab:80:7e:1f:86:c3:5f:00:0c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd6fcd516ddbb0102f5b0323a26c0ed7f68c22
        Validity
            Not Before: Aug 23 19:04:43 2025 GMT
            Not After : Aug 24 19:04:43 2025 GMT
        Subject: CN=e9e932202896d8ce6379b6f83af9017e51a4d196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:22:c0:ce:e0:1e:8e:74:e8:5f:07:07:d7:
                    e3:d6:28:44:77:39:7a:4e:5e:9a:bc:14:4d:45:b5:
                    4c:dd:89:27:b2:19:3f:56:7e:42:56:db:bc:98:ba:
                    d0:e8:32:c1:73:d9:84:36:2f:5b:c0:f4:31:f0:8d:
                    96:80:46:23:47:84:ea:2f:27:f6:75:c7:a6:40:68:
                    ba:5e:e7:54:e4:be:2c:77:12:8a:a7:0f:59:e6:1f:
                    8e:7f:5a:63:0c:6d:db:0d:f4:0d:44:a2:00:7a:59:
                    60:a9:e6:c1:f0:0e:60:e5:78:d1:6a:c2:19:27:f8:
                    7d:28:7b:2f:3e:56:de:24:bd:a0:ed:c6:30:2a:8a:
                    f7:35:73:38:c3:29:4a:3d:22:b3:3a:f7:cd:f1:a8:
                    29:b8:85:22:30:db:dc:68:c0:d6:c4:d5:4d:2f:3e:
                    5b:4f:f5:46:24:4a:bb:e4:62:80:13:f9:ce:25:5a:
                    c4:ce:53:30:99:50:f4:ee:b5:fd:04:f4:ee:e4:0f:
                    cc:6f:31:e1:2e:51:71:b2:de:3e:7e:7b:d5:96:1c:
                    e5:c5:92:0d:04:3f:e3:8a:d3:e5:a6:a3:e0:46:45:
                    6f:48:46:53:a7:9e:63:9f:f9:3a:4c:54:b4:d0:f2:
                    49:b9:82:8f:d8:39:0d:8b:8b:e7:1a:7f:56:3b:a4:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E9:32:20:28:96:D8:CE:63:79:B6:F8:3A:F9:01:7E:51:A4:D1:96
            X509v3 Authority Key Identifier:
                keyid:BF:FD:6F:CD:51:6D:DB:B0:10:2F:5B:03:23:A2:6C:0E:D7:F6:8C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_1vzVFt27AQL1sDI6JsDtf2jCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e9e0de-df1a-4306-87c0-8abf1cb9d6cb/1/v_1vzVFt27AQL1sDI6JsDtf2jCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:77:f1:12:42:f9:c6:15:52:ff:9c:f4:57:5a:96:e9:f8:7e:
         d1:c9:96:29:d9:78:d8:fb:5e:23:54:a5:a0:30:a5:1c:85:c8:
         1e:f8:38:f6:36:58:ce:21:f9:0c:9e:2a:9b:36:d9:63:8d:d6:
         99:5c:90:2d:3e:b8:01:c6:03:7c:15:74:35:7a:b4:13:55:0c:
         87:d3:cc:13:57:7f:b8:96:f7:10:5b:40:53:2d:f3:8a:d7:0e:
         94:c1:b4:d3:3d:34:c9:a5:a4:7d:f1:8c:f2:6b:34:57:bc:7b:
         58:9a:ff:c7:e3:10:80:0a:27:35:53:4b:88:d5:51:3b:18:fe:
         b8:eb:89:a4:de:86:e4:d0:cc:54:26:69:40:3a:9f:37:ee:f2:
         45:9c:77:29:37:d8:e7:b2:37:00:15:c7:9e:33:9d:3f:bf:90:
         ce:bf:0f:ef:82:9d:e8:bc:06:e8:73:33:ff:c8:7c:87:f6:0d:
         34:4d:c6:4a:93:30:1d:2b:49:cf:79:26:6e:0a:61:d9:a3:a9:
         48:20:da:7a:d1:57:47:d7:5d:e6:3c:4f:b3:6b:7a:dc:bc:44:
         ab:8f:98:df:d8:dc:3c:63:d3:2d:26:db:81:99:d3:f9:c8:1e:
         39:ce:11:45:0a:d4:da:32:c4:1a:7c:6d:46:e8:40:b9:7e:fd:
         75:84:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:41:28 2025 by rpki-client