Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File:                     vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier:          3sUE9D1dlCOGRdtJVytKWf1h3pCSrwVLmzv3VgvY0U4=
Subject key identifier:   DA:6F:71:7D:A6:B0:4A:06:06:15:22:A2:6B:E3:E0:B0:24:B9:1A:95
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer:       /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial:       0198D583BC6782A22115329B317CBC69FF2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 06:00:37 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:37 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:37 +0000
Files and hashes:         1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
                          2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: CvwI6FGUWJZRyW25uSZExDuQIkdlP2opvCjwXAkVmU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:bc:67:82:a2:21:15:32:9b:31:7c:bc:69:ff:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
        Validity
            Not Before: Aug 23 06:00:37 2025 GMT
            Not After : Aug 24 06:00:37 2025 GMT
        Subject: CN=da6f717da6b04a06061522a26be3e0b024b91a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:66:1e:82:02:8c:ab:c8:b4:1f:a5:a1:c5:bb:
                    e6:64:ee:51:20:46:99:08:2e:8c:57:4f:b1:f4:30:
                    30:c4:37:b0:f9:0b:01:55:6b:9c:bf:db:fd:2f:ed:
                    1c:aa:6f:16:22:87:ce:97:61:25:00:d1:38:17:69:
                    82:43:5d:9e:5d:98:6f:f3:1f:87:02:86:dc:e2:e6:
                    db:a5:8d:1c:d1:d6:bb:25:32:df:9d:c5:64:35:c0:
                    f2:00:9c:5e:ae:72:0f:ba:05:43:08:e2:c1:42:2f:
                    1b:38:1b:80:2c:78:fa:a2:14:30:ad:50:83:a1:72:
                    39:84:5f:74:4e:12:ce:9c:11:e1:db:33:ca:50:17:
                    ec:25:35:63:df:a4:82:93:b9:c1:18:ed:da:a9:a8:
                    fa:a3:9c:20:eb:9f:e0:ba:8a:2c:d8:a4:cf:07:00:
                    e2:e1:89:f1:59:d5:8d:08:a3:68:f5:34:5c:7d:f5:
                    52:dd:ee:c1:e3:06:11:9f:36:14:7d:0b:c7:b6:57:
                    a4:f7:a6:46:24:49:0a:7a:cc:64:63:95:e0:e9:35:
                    49:c8:17:c4:7a:a3:d7:74:69:82:99:19:a9:6e:a7:
                    9d:d2:8d:b8:f2:a8:a9:96:73:26:68:2b:52:76:b2:
                    22:96:bf:d0:a4:05:16:45:67:af:12:ff:0e:64:c1:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:71:7D:A6:B0:4A:06:06:15:22:A2:6B:E3:E0:B0:24:B9:1A:95
            X509v3 Authority Key Identifier:
                keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:cc:a8:7d:db:23:60:21:67:75:b4:6f:40:e9:ee:5b:e9:
         fb:c2:21:13:53:9f:ed:c3:5d:6e:f9:88:ef:38:74:e4:f5:20:
         84:b0:22:00:3e:b2:05:08:eb:62:33:90:74:98:65:55:e0:b5:
         48:7e:43:78:19:50:9d:e9:46:83:9e:1e:d0:0d:e4:a5:60:0d:
         b6:23:b0:84:09:3e:9b:df:22:c3:78:1a:58:d5:55:34:db:8c:
         5b:93:27:25:8f:ad:3b:19:de:08:ae:54:01:8c:c5:79:8b:a5:
         48:c1:eb:fc:05:48:84:43:8d:e1:5c:4d:e5:72:9a:e7:04:6a:
         83:85:9f:49:d2:f8:7d:4a:6f:6e:39:ac:2f:e0:59:d5:ce:13:
         7c:2d:ca:ef:f2:d5:04:9a:dd:5a:58:f2:80:59:10:d3:7a:d5:
         3b:52:f6:cd:7a:20:3d:07:40:35:44:0d:f6:cc:b2:02:fe:63:
         d0:e6:1b:f8:1f:f5:8f:f6:14:05:5a:f5:75:e4:dd:1f:d9:bc:
         40:20:bc:24:78:1b:39:da:1e:44:53:9b:fe:ac:56:2a:0f:60:
         d8:7d:50:32:3f:a7:e6:97:c5:74:de:8a:06:b4:d6:17:59:8d:
         76:e5:e9:8b:e9:8f:96:38:0a:7e:62:20:3d:dc:2a:1e:c0:70:
         92:4b:ee:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:32 2025 by rpki-client