Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
File:                     vQScpC4dgs4ntUu_0Bd4HVRaebc.mft (raw, json)
Hash identifier:          cwVKnkzwc2sdcJ4VrlzQfwlM9pfm0a0Z/Uvg0AHxiW0=
Subject key identifier:   46:19:8A:D8:6C:44:4F:EB:88:0D:17:D8:06:43:9A:F9:5F:3F:BE:64
Authority key identifier: BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7
Certificate issuer:       /CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
Certificate serial:       0198D65F4B012C3BAEE4774B4DE5613D090A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
Manifest number:          0831
Signing time:             Sat 23 Aug 2025 10:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:25 +0000
Files and hashes:         1: QDWgbXviJq4AecTUTzdtmUBRPkM.roa (hash: w5dWr+EFjY2DSPcv8scrS3s0nFXLYMuY90DVs/hZPLI=)
                          2: vQScpC4dgs4ntUu_0Bd4HVRaebc.crl (hash: 6hPXf+X2ZHKvro1Xb5V2NSfdqOtwnwAyUOjjYA3943o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:4b:01:2c:3b:ae:e4:77:4b:4d:e5:61:3d:09:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd049ca42e1d82ce27b54bbfd017781d545a79b7
        Validity
            Not Before: Aug 23 10:00:25 2025 GMT
            Not After : Aug 24 10:00:25 2025 GMT
        Subject: CN=46198ad86c444feb880d17d806439af95f3fbe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b2:d9:48:ee:6f:53:0b:34:11:26:ef:b5:0e:
                    f4:ad:12:ff:4d:dc:8a:14:8a:a1:6b:67:30:d1:79:
                    95:e7:39:03:10:52:51:d6:ef:67:0e:3d:8d:91:9c:
                    32:8a:67:74:c2:59:26:c4:c8:ec:10:dc:60:2f:93:
                    1d:e1:f8:22:ea:eb:69:72:b0:8a:8c:ec:6c:61:d2:
                    d3:0c:12:c9:59:e0:3e:52:5d:fb:f9:34:17:e6:b1:
                    9c:4e:10:a8:ea:61:23:08:99:44:c6:25:40:23:20:
                    a9:8c:aa:81:73:b6:e2:d0:7e:0a:cd:d6:05:e8:42:
                    cf:13:ec:92:e4:c9:d7:86:9b:56:e1:6e:6a:31:e3:
                    a2:e7:47:16:85:13:e5:73:5e:68:a9:af:42:35:4f:
                    33:51:62:d6:28:22:ea:ef:4b:d0:44:eb:6f:19:9e:
                    19:16:62:f0:ee:65:32:c4:1c:7e:73:32:8f:27:c7:
                    3f:e1:bd:26:97:58:7a:09:b0:b1:10:07:19:51:cd:
                    4c:07:9f:a5:f3:5f:1d:bb:83:f0:4e:af:c6:a5:c6:
                    3d:98:f5:8f:d7:87:7a:4a:bb:df:b4:76:9c:29:99:
                    c5:44:78:33:fe:90:ce:19:17:b8:b5:0c:01:6c:05:
                    1b:bd:f4:e8:97:29:c3:d3:03:b7:59:56:da:82:b3:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:19:8A:D8:6C:44:4F:EB:88:0D:17:D8:06:43:9A:F9:5F:3F:BE:64
            X509v3 Authority Key Identifier:
                keyid:BD:04:9C:A4:2E:1D:82:CE:27:B5:4B:BF:D0:17:78:1D:54:5A:79:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQScpC4dgs4ntUu_0Bd4HVRaebc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f4820f-e815-44f3-af65-1aa034a2af9c/1/vQScpC4dgs4ntUu_0Bd4HVRaebc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c2:9d:57:14:8e:5b:e0:57:cb:59:41:e7:0e:4e:2f:31:20:
         ab:fb:c0:e0:83:a8:82:36:6b:ab:e6:5a:86:c9:e8:2f:d2:67:
         b0:bb:3c:db:4d:8b:f3:8a:a6:9c:55:18:82:7e:c8:cc:1b:2f:
         6c:a0:99:3f:64:99:c3:57:7a:83:32:6f:e5:09:e1:bf:90:79:
         f3:7a:5f:47:b6:2d:0b:e9:dd:a9:98:fb:a9:6c:09:ad:40:17:
         6e:5a:26:cb:39:fc:86:05:c5:f5:fc:28:f2:42:f9:47:c8:8b:
         51:10:d2:73:72:8d:ec:91:18:4f:a6:cb:33:3a:6b:bb:86:c9:
         14:fb:f7:be:e6:3e:0f:2d:9f:d8:9a:59:73:55:d1:07:67:5d:
         62:e5:20:c2:d2:9f:56:9c:e4:04:05:6a:90:82:b3:5b:0e:5a:
         66:a8:7d:5e:ad:58:89:13:59:f4:d1:17:a7:3c:2b:0d:b7:3f:
         4a:26:aa:65:50:2e:ed:ee:f3:ab:af:00:7b:bd:0d:0b:e5:94:
         ed:c8:c8:9a:06:09:ce:e7:7d:e4:e3:77:84:ea:da:28:84:1e:
         9a:9a:61:32:ba:69:a5:89:2c:46:5c:31:1e:5c:e7:48:a6:4a:
         5a:83:bb:57:05:2f:b3:4b:81:1b:12:21:30:cf:0f:ba:50:0e:
         98:37:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:53 2025 by rpki-client