Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          aEMNJ5D5FtcWdWZ7718zcJWgJ6biLluZTTv3ZAbtlb8=
Subject key identifier:   80:89:42:4C:C7:DB:90:AD:42:5D:CE:30:BB:99:5F:14:81:C3:77:55
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       0198D7A96EBE0EF688F3FF692ACDBA8018B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          1679
Signing time:             Sat 23 Aug 2025 16:01:01 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:01 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:01 +0000
Files and hashes:         1: DFPMPjVgEXra9Yi746ueyHfFEfE.roa (hash: egcn+8V+rmTodHY7QllvkOnDLWLB5ryJAjHfdzE4gEE=)
                          2: FBtv0zQKgpSJGVwmOiWrJgdZXTQ.roa (hash: jZyVvy/AnilHzUcrfJcn+M+uqzeksVwB5ieR7HcmZ3o=)
                          3: JLZHp3zugUr0BJKEkPLt_peuCWY.roa (hash: xqh8b79ZtGYi3X/2gVjxCLbm1mPbREjzpn3t3zp8STc=)
                          4: QBbKMrewUV5LysqmZYBRCD2P-aU.roa (hash: pyCMXVW0aDhN3pnl3u7Ja6A+yxwNB3DI3wsCXDY581k=)
                          5: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (hash: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=)
                          6: a2N7ZqNTTwHGwfd7829psoPCAf8.roa (hash: l07jq1tDJlSMiPUaiQ9Tqz6dDSHfIb3Fw8fa48dds2M=)
                          7: laT6cLR_CsAMLDNRuHbw-QE9_Lg.roa (hash: /As0MXu+Jd4Zfmw66mysjQFz8bFMgrz+a8Z5fFD5uCE=)
                          8: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: Tl+geIJ4+5+dc9Xk7eUcVxowg4CrnKpH/sRPsLZF9ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:6e:be:0e:f6:88:f3:ff:69:2a:cd:ba:80:18:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Aug 23 16:01:01 2025 GMT
            Not After : Aug 24 16:01:01 2025 GMT
        Subject: CN=8089424cc7db90ad425dce30bb995f1481c37755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:ab:21:84:51:ad:9c:72:74:bb:cd:13:c6:
                    13:69:25:fa:dc:41:de:9e:db:ef:b3:34:a9:d3:4d:
                    6a:2e:f6:ee:93:33:04:96:55:b3:a4:99:8c:b6:a9:
                    e6:23:ee:29:6a:27:da:a5:bf:91:6c:52:8e:1b:3a:
                    52:03:6a:50:65:05:e8:95:57:bd:da:a7:c4:04:51:
                    50:4b:84:ed:d1:15:a6:e5:7f:24:b0:76:93:e6:d4:
                    e3:72:71:28:48:52:87:f6:69:42:da:b8:b2:f0:45:
                    45:0a:08:d5:ac:c5:42:45:e6:1d:2c:4f:94:de:a4:
                    c0:43:65:00:25:ad:e4:4d:e7:4e:01:3f:bf:2a:42:
                    8d:16:70:97:9a:9f:ba:73:51:26:35:09:84:34:ed:
                    b9:15:ef:7b:27:4e:7a:a7:09:9a:72:34:1d:b3:36:
                    12:ba:49:88:33:92:62:27:cf:49:5b:86:e2:a8:2e:
                    8d:3b:03:2e:e2:c7:8c:5e:f3:90:4e:31:0b:78:38:
                    1b:3a:2a:6c:d0:e0:b3:38:51:86:35:27:3e:bf:7e:
                    4f:a1:3b:6d:18:34:6d:4a:d2:cf:9f:3d:b1:c0:a7:
                    93:8d:3a:f7:1b:33:76:3d:48:8d:fa:09:2e:4c:15:
                    f2:ae:a4:b0:71:4c:ce:76:c5:57:b6:97:c5:34:97:
                    cf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:89:42:4C:C7:DB:90:AD:42:5D:CE:30:BB:99:5F:14:81:C3:77:55
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e4:7e:d3:4c:59:00:06:a3:13:c6:a9:b3:c6:99:e4:1c:71:
         9a:02:e0:ae:c6:aa:5e:11:5e:0f:d0:a3:d7:07:2b:a6:d3:c9:
         40:77:76:b3:7a:d6:6a:66:dc:87:7b:d6:21:72:f4:24:c5:e5:
         3e:37:c1:bd:90:9a:7d:8c:a1:4e:90:b8:de:ca:75:2c:14:8e:
         59:92:0d:0b:73:c3:22:67:4c:c2:31:55:d4:2f:43:c5:e5:e4:
         23:e1:c8:83:93:10:d5:c0:b8:8d:39:fb:89:fa:a2:c2:0e:ae:
         c9:2c:6d:6e:24:7b:fb:e1:19:ae:dd:e4:69:c4:38:c0:e1:84:
         e7:b2:f4:82:e9:2b:53:54:c2:82:06:ea:9f:10:44:71:68:94:
         11:af:6b:16:5e:53:2c:53:f3:4c:e7:ca:03:34:7c:67:b7:fe:
         fc:62:a7:fa:2d:45:08:10:f2:37:a6:a5:98:dd:12:39:7b:87:
         2d:8b:7e:90:14:30:73:c0:7b:37:e9:a5:39:98:12:c1:ce:2a:
         04:f0:f8:a0:22:04:d5:35:b2:90:c4:34:56:10:6a:67:1e:65:
         00:e8:b1:79:2f:14:6d:98:9c:34:38:a2:d6:8f:55:7b:61:b9:
         10:08:71:c5:1c:17:6f:80:1b:95:8e:2a:af:37:0a:21:56:23:
         5f:07:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:12 2025 by rpki-client