Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
File:                     beisSVlyXk_tHDMNIrXNBgJBpRQ.mft (raw, json)
Hash identifier:          hHHXifzbqUvEZwt7J5t2lisFnaJGC9vgWvH12bLUDK8=
Subject key identifier:   73:04:23:2D:96:1F:D5:90:F1:CC:CC:FC:2E:98:7C:CB:8D:81:0A:DE
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Certificate issuer:       /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial:       0198D58395AA043F88C2E188E0D10B8F56B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
Manifest number:          0570
Signing time:             Sat 23 Aug 2025 06:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:27 +0000
Files and hashes:         1: 0YIOVBW-uwL5vGELnsoWXjbdbbc.roa (hash: YnwOh3rBgK7q6cV+gaFLtLus1V2Wyasj+jLsXsDsPIs=)
                          2: beisSVlyXk_tHDMNIrXNBgJBpRQ.crl (hash: DYg8V5mnoUyH+BBG+i6JAOTLrCs+/BIq0ly4LrsH/2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:95:aa:04:3f:88:c2:e1:88:e0:d1:0b:8f:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
        Validity
            Not Before: Aug 23 06:00:27 2025 GMT
            Not After : Aug 24 06:00:27 2025 GMT
        Subject: CN=7304232d961fd590f1ccccfc2e987ccb8d810ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e6:da:f6:d3:c0:25:c9:f1:fb:1b:25:0b:03:
                    7a:55:cc:b1:bc:b1:8a:bb:0f:2f:c0:54:d2:b7:97:
                    16:14:72:88:33:99:aa:48:16:b8:5e:1e:68:f4:4a:
                    fc:51:68:23:c6:eb:aa:92:e1:b9:1c:b4:2e:60:34:
                    8e:bb:d4:89:c3:7f:5a:77:9c:91:21:3a:23:8f:1d:
                    cd:5d:61:5e:9e:b1:ca:62:ca:16:11:02:c7:22:8f:
                    d4:90:8f:95:65:82:db:65:15:0f:53:b2:b0:d5:f1:
                    91:14:f2:44:89:32:d9:4d:89:29:24:40:67:f8:4b:
                    fa:b3:3d:6e:32:76:ab:04:1c:77:f4:da:10:11:2b:
                    fe:d0:36:20:3d:c7:19:40:49:bc:46:60:65:b7:c1:
                    ee:ed:5a:fa:bc:6f:6f:38:79:5e:06:94:68:ee:24:
                    81:34:4c:4e:f2:c9:6e:e7:e0:06:6b:79:41:65:08:
                    c8:ce:ca:21:45:86:53:aa:27:41:a9:53:9f:ea:49:
                    79:26:ce:dc:ed:0e:78:75:d2:39:82:b2:5c:f5:c0:
                    e4:b7:62:45:5f:3e:b8:51:68:53:25:e1:2a:47:0e:
                    65:3e:be:d0:d7:35:86:e7:c2:d6:cf:a5:67:b8:03:
                    fa:a6:69:18:22:74:b3:0e:8d:b8:96:01:ba:fa:12:
                    f2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:04:23:2D:96:1F:D5:90:F1:CC:CC:FC:2E:98:7C:CB:8D:81:0A:DE
            X509v3 Authority Key Identifier:
                keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:30:1a:98:3b:df:6a:2b:40:11:db:81:88:f0:59:48:46:29:
         4e:15:45:9b:53:de:34:a2:1e:5c:34:54:d9:99:d5:92:f8:c8:
         83:36:bf:90:0f:d9:0f:cb:cf:62:6f:57:37:eb:99:32:5f:82:
         38:df:d6:23:39:58:1a:ae:84:d1:dd:2e:e6:ac:91:a7:40:75:
         b4:86:32:6a:72:a3:3e:a2:95:8a:00:36:cf:3c:1a:bb:51:30:
         3f:fb:b0:ab:52:62:7f:0a:13:66:03:4b:d9:35:bc:27:22:ac:
         35:57:d4:0d:e6:63:48:f2:b8:9a:86:23:50:ea:93:e3:37:63:
         e9:a1:26:1d:ef:2c:73:d7:34:f2:5f:fe:79:5a:13:e2:e7:75:
         a7:e1:9f:f0:86:5b:a6:72:de:22:8b:0b:33:47:35:21:87:25:
         11:62:5d:e4:fa:9f:52:64:13:dc:2d:2c:ed:15:35:28:a1:f4:
         4f:62:de:eb:e9:bc:4c:ab:5c:03:4f:d9:5c:72:2f:81:a0:fb:
         56:a0:6f:cb:38:9c:44:9e:4b:de:ad:02:76:14:d3:b0:02:e0:
         47:e7:0b:ed:76:91:17:22:dd:d1:34:95:3d:dd:dd:b5:22:74:
         4d:e7:a9:e7:c1:74:43:71:cc:2f:96:48:5c:ba:c0:c0:c7:9c:
         f2:4d:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:32 2025 by rpki-client