Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File:                     ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier:          +yCyM5wIt/rpIhJV1ID2ifFDMd/3yg5Rs4rPsNZ2D7U=
Subject key identifier:   49:ED:A2:50:2D:4D:95:92:6F:4E:69:3C:AC:5A:DC:1B:71:A8:8B:E3
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer:       /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial:       0198D404CE131C889146AD34697656CA6CB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number:          070B
Signing time:             Fri 22 Aug 2025 23:02:21 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:21 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:21 +0000
Files and hashes:         1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
                          2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: qqFi7/mwR1CU2arWqPVm00gcPqgSrww4zyH7RBaBt20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:ce:13:1c:88:91:46:ad:34:69:76:56:ca:6c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
        Validity
            Not Before: Aug 22 23:02:21 2025 GMT
            Not After : Aug 23 23:02:21 2025 GMT
        Subject: CN=49eda2502d4d95926f4e693cac5adc1b71a88be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:02:6b:71:c8:41:6f:2f:e1:cc:c1:d1:4d:2f:
                    15:e6:11:ff:60:ff:21:fb:24:12:2f:ae:ee:0b:c4:
                    29:3f:44:fa:39:5a:a3:a5:67:6d:94:05:ad:09:a3:
                    55:42:1a:31:fa:37:c1:67:fc:e4:2d:e3:02:66:8a:
                    3e:cf:05:58:4b:ca:8c:74:58:ae:44:7d:ee:84:76:
                    33:94:f2:f1:5e:9f:a7:99:93:08:d6:12:aa:ec:9d:
                    0f:62:ab:bf:7a:0a:a9:47:65:1d:dd:b4:a8:e9:16:
                    13:9f:56:f0:b1:cd:e6:6a:a8:1c:33:16:fd:d5:50:
                    40:28:20:53:e6:a4:83:c3:0e:09:b7:dc:c3:09:31:
                    52:72:92:fb:e2:1f:b6:f3:73:46:9c:7b:65:f4:66:
                    3b:2a:fc:63:6d:0c:15:19:6f:c6:87:3e:b4:3c:08:
                    61:09:47:29:65:16:52:fd:30:92:8a:c8:c6:17:9b:
                    9f:bb:39:f8:e6:78:25:2a:ea:88:7d:4e:19:cd:8b:
                    48:d0:a9:05:c6:23:39:de:e4:61:7f:75:2f:d6:f3:
                    a4:6a:73:bc:40:cb:99:76:08:f3:cc:93:1d:b3:aa:
                    01:39:da:6e:b4:db:4e:a5:5b:08:92:17:08:d6:a9:
                    57:b0:78:8c:16:fd:e8:a4:18:f8:2f:b7:9d:7d:06:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:ED:A2:50:2D:4D:95:92:6F:4E:69:3C:AC:5A:DC:1B:71:A8:8B:E3
            X509v3 Authority Key Identifier:
                keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:f9:cc:d9:ed:4a:28:dd:f5:22:e2:40:fb:be:56:cf:9f:
         22:df:62:b2:47:87:96:59:fb:c3:ca:66:e2:49:08:19:fe:eb:
         61:34:9b:77:50:66:e5:8a:91:2c:e1:a9:c2:69:26:96:12:ea:
         59:07:2d:0f:79:99:d3:15:62:f2:cd:74:26:9b:4b:ca:99:6e:
         b9:3a:5e:1e:b6:1c:76:04:00:be:27:61:f7:a2:3c:98:1f:a7:
         3c:be:42:09:56:c8:3b:fa:99:3c:1c:c3:15:0e:b2:d5:19:41:
         3e:70:3d:03:ee:a4:e6:93:38:77:d5:05:5f:1a:0f:c4:cc:6c:
         ea:f6:49:a1:fe:89:d2:53:12:e1:5e:f8:27:ca:03:ec:a2:88:
         e2:47:9b:1a:1b:be:d0:80:12:71:5a:98:8e:88:aa:d2:a1:7c:
         2d:29:6d:77:34:46:83:3e:06:60:a2:93:f4:05:59:36:6b:3e:
         62:29:b6:59:8b:48:c4:ec:be:a0:53:50:4d:92:28:94:e4:e2:
         02:d4:bc:d8:b0:ee:1c:fc:c3:e1:7f:31:4e:d2:6e:fc:6a:74:
         b7:7c:58:02:5d:bf:a1:84:6e:d9:ff:20:e3:b8:1a:47:21:5b:
         6c:b7:99:1c:68:44:b2:7f:50:ee:af:f7:34:54:4b:46:1c:63:
         a0:e6:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:20 2025 by rpki-client