Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          1dH6FqNOMjK8od4wVbZOXsTf4DjeWyqliZPW05LlciE=
Subject key identifier:   3A:D7:6D:3C:80:7E:F3:85:07:15:59:70:BF:8F:8C:F7:1A:25:B3:93
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       0198D65F2E31DB1D9697DE138B85FDA63DAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 10:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:18 +0000
Files and hashes:         1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: nHHluWTmrHkLA/KAzpQjmg0su3EQX8DfJ3Ip8HzXVZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:2e:31:db:1d:96:97:de:13:8b:85:fd:a6:3d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Aug 23 10:00:18 2025 GMT
            Not After : Aug 24 10:00:18 2025 GMT
        Subject: CN=3ad76d3c807ef38507155970bf8f8cf71a25b393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:d9:17:bb:1f:0d:f7:95:42:43:b0:ba:90:
                    e0:eb:00:2a:fc:9a:c4:b9:c7:19:5d:ec:62:cf:91:
                    84:7b:02:98:65:e0:c4:ad:e5:53:58:1c:42:59:20:
                    a4:05:2c:c3:ef:fb:91:93:f1:93:00:d2:35:3d:16:
                    ff:08:12:16:ae:46:7c:77:68:df:9b:9c:2a:ca:6b:
                    5f:97:1f:a7:9e:94:bb:ec:ac:ae:d3:f3:c5:3a:de:
                    df:4f:4e:70:1e:50:af:fc:68:a0:98:c9:1c:94:fc:
                    0c:50:2d:1d:36:00:48:e5:b2:0a:37:bc:4c:0f:c5:
                    67:93:c1:34:00:ab:ec:48:82:4a:15:f8:68:ea:d8:
                    42:59:60:6f:9e:46:69:fb:19:2d:69:fe:33:13:bc:
                    21:86:16:bf:63:8f:6f:49:e2:33:3b:84:c7:73:82:
                    34:b9:46:31:db:76:6e:2b:76:e8:b8:7b:23:ab:73:
                    c1:bd:3d:b2:00:cd:f9:0f:94:be:95:18:72:3d:f3:
                    6e:a3:cd:75:fe:3a:53:ee:51:07:9b:21:45:34:5b:
                    97:22:56:14:52:1a:3c:d6:35:7c:89:16:c8:35:79:
                    8d:4a:84:1b:a1:84:1c:04:3e:4e:5b:6e:97:19:9d:
                    ab:ac:89:a9:a1:9f:e8:61:4c:5f:88:c1:82:c6:e7:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D7:6D:3C:80:7E:F3:85:07:15:59:70:BF:8F:8C:F7:1A:25:B3:93
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:21:de:17:db:02:60:40:73:3c:62:0c:6d:f0:1e:3e:ec:
         92:9c:7a:9c:32:36:31:9a:55:57:c9:03:2e:68:49:39:c9:c4:
         58:25:c0:86:b8:0e:6f:17:dd:d0:11:a9:6f:df:58:03:78:11:
         d3:dc:ad:e6:48:f6:00:96:16:6c:95:10:3d:e4:dc:70:c4:be:
         2a:ad:e4:9b:3d:2e:a8:d1:ab:b6:14:70:19:90:66:dd:7e:25:
         69:f1:e0:e6:af:3c:f6:aa:5d:bf:58:9e:05:7e:bb:54:9b:54:
         7b:4c:fa:3c:fc:99:60:03:3d:bd:81:87:39:0d:d3:9c:67:63:
         45:0b:07:74:a1:2f:32:c7:f9:3d:b4:e2:1f:f9:36:b9:ba:32:
         14:a0:9f:59:7a:32:a1:36:a5:50:17:6a:29:22:37:46:01:dc:
         2c:7e:70:bc:6a:7c:fc:bc:33:8a:fb:27:08:cb:3a:4d:bd:e1:
         c2:92:b1:91:5d:4f:7a:08:bd:09:75:92:7f:0a:18:c5:03:2c:
         f5:b0:88:10:ae:20:b8:cb:eb:4b:8c:e7:0c:ce:d9:be:71:dd:
         a5:6c:e2:b1:26:89:e8:e5:be:f1:40:0c:b0:8d:fa:f4:ca:6d:
         22:54:b7:b0:de:e9:15:e9:e8:4a:d5:c0:57:01:2f:2d:1f:04:
         93:60:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:02 2025 by rpki-client