Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File:                     vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier:          affayQFRPC/KH1EUiTMW4tkQ3BdJ9HYJ4J4d4n0XXrY=
Subject key identifier:   76:13:CB:92:16:F4:15:CB:3B:C7:C0:9E:E9:D3:B6:77:6E:50:56:4B
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer:       /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial:       0198D4741A6FD6E55EDE93E36FF9F045D790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 01:03:55 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:55 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:55 +0000
Files and hashes:         1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: 2O6wcjIA9zF4THnO7joFlENgBCD5TCaAlcOcZW/BeBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:1a:6f:d6:e5:5e:de:93:e3:6f:f9:f0:45:d7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
        Validity
            Not Before: Aug 23 01:03:55 2025 GMT
            Not After : Aug 24 01:03:55 2025 GMT
        Subject: CN=7613cb9216f415cb3bc7c09ee9d3b6776e50564b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:75:2f:d3:62:1e:43:b4:e6:9d:cb:21:2c:
                    4b:d0:b7:6f:6d:a8:97:9e:3f:e8:46:7e:5e:ef:3a:
                    58:fb:cf:11:ac:da:01:c3:1d:2e:d4:fc:7f:58:a5:
                    7d:e8:9e:75:77:f9:3f:8e:1d:90:a4:c4:cb:9a:46:
                    0b:7f:88:97:4b:c2:fe:e1:5a:fd:1a:a0:90:bb:c2:
                    1d:b9:0d:e7:87:65:7e:80:14:f4:9c:2c:8a:7d:4a:
                    7c:92:b4:4a:35:71:a0:c0:c8:e4:7f:31:92:95:c8:
                    61:92:3f:ab:db:93:5f:0d:f1:6f:ab:56:0c:75:e5:
                    f5:71:1a:ec:7b:bc:34:5f:9e:3f:23:81:11:75:a8:
                    57:79:29:b3:39:1e:14:f4:f5:b6:2c:30:ac:2a:15:
                    a9:de:ba:77:17:ff:59:75:cf:8e:84:a9:da:59:89:
                    5e:0b:ee:56:c4:80:67:10:fe:5b:24:f6:28:03:c7:
                    17:5a:98:cf:6a:67:25:9a:c1:4f:9a:93:96:1f:df:
                    76:8a:57:ca:35:4d:37:38:93:62:11:02:7f:9e:2d:
                    f3:f3:eb:ff:a5:eb:48:e5:49:61:ce:dc:c5:1b:cf:
                    67:e2:c9:ca:8c:f1:d8:e0:4d:0f:fa:81:b7:ca:5f:
                    56:8e:4b:1a:ac:da:17:5f:a4:49:7a:5e:30:8a:89:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:CB:92:16:F4:15:CB:3B:C7:C0:9E:E9:D3:B6:77:6E:50:56:4B
            X509v3 Authority Key Identifier:
                keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:92:be:6f:b6:07:c3:ef:74:8d:74:a4:b3:e8:30:d9:18:
         b8:e6:68:93:e9:28:c2:ae:8f:42:9d:1c:de:ff:65:4d:a3:87:
         78:4e:b8:3d:a0:de:b8:18:ff:b2:f3:86:b2:dc:fb:1b:20:c8:
         88:8a:53:3d:4b:9d:31:e8:71:a5:70:57:92:6d:71:2c:97:7f:
         a9:5e:23:2d:5d:c3:d6:49:b8:82:b8:15:16:95:de:1c:ce:0a:
         01:86:af:be:e8:49:f3:70:c3:07:8c:aa:c0:e0:a3:62:48:1c:
         5f:82:7e:2b:60:24:a8:8f:64:3a:8f:5a:0f:c6:fd:3a:a7:c4:
         72:20:ef:f9:a8:d5:da:40:c8:c3:1a:91:9b:08:35:23:03:7e:
         9e:6c:34:8d:bf:6b:9f:5c:d4:45:d9:18:53:da:a6:36:cd:87:
         b8:7b:7c:aa:39:72:3a:60:4e:dd:4b:de:34:66:58:45:a1:ec:
         8a:fd:13:5c:22:c2:2b:0f:a7:11:13:a6:a2:6a:3d:11:34:62:
         0a:84:ea:e0:c9:6d:67:82:40:15:37:9d:eb:e1:27:a1:75:56:
         a5:65:9e:a2:f8:c3:4d:5b:dc:b3:08:0b:fa:e6:79:81:dd:6b:
         0c:5a:75:0e:95:4c:2d:ac:41:08:bf:63:6e:a8:9d:1b:2a:9f:
         b8:0d:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:53 2025 by rpki-client