Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          jYVC04dFQahrb3U2rSwR0NH8fIY8GOk80Hl1I3W4sMc=
Subject key identifier:   AE:7E:8C:1C:B4:30:46:F7:23:90:EE:77:71:E5:16:74:41:37:11:3A
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       0198D5BC37D4BD4AD96340FEEB013C53DD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          0C22
Signing time:             Sat 23 Aug 2025 07:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:18 +0000
Files and hashes:         1: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: X/XOEqpRk+OihCdSBMtDE1mffTup+gE9LBXM5x8OW6A=)
                          2: cyR0MG358cE31yYquNutXJ-iDF8.roa (hash: L+ASvmDkfATGzQpFgRk2AnKdML9CN0Rr1X6uRXAEZ1E=)
                          3: epa_afuyCzBcfU-VTREOHg-Um7o.roa (hash: FFmDpvGyVVShIsfmkU3hs/l9PjpSmPKRLTcUFUMcp0k=)
                          4: g6TuPyfjfZm3a1iJ6jmpBrCZOyg.roa (hash: CNlUV4jR+NQLLp2J8IPpPlsmA4JKIepJsPSZTdBGAho=)
                          5: nE6ZJSY3uZnD_6G1EG5pg8N9veo.roa (hash: Kxexihews9YF1QZ3WH31HHS7CIi4TDdNrZ0Pl6O2Xyg=)
                          6: ytDh0ELobkf6U6UFJvD32uKf2TU.roa (hash: 6lPwePJBHo15gagGb2dahE1/Q3UgWM6DtWlU5CdkrLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:37:d4:bd:4a:d9:63:40:fe:eb:01:3c:53:dd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: Aug 23 07:02:18 2025 GMT
            Not After : Aug 24 07:02:18 2025 GMT
        Subject: CN=ae7e8c1cb43046f72390ee7771e516744137113a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8f:79:93:70:4d:2b:51:92:54:b3:e1:cb:7c:
                    19:eb:fd:a5:bf:9d:0b:6c:98:ff:36:4b:fc:1d:0f:
                    12:a1:46:e6:f7:54:84:27:b3:8a:d0:19:93:05:6e:
                    78:80:29:ce:cf:2e:e9:74:87:13:2c:38:53:15:16:
                    49:0f:c0:e9:c3:a9:a2:f6:bc:35:82:f9:15:8b:0f:
                    db:88:a3:ca:dc:79:ac:e4:73:10:3b:b9:a3:e9:68:
                    61:6c:98:16:7d:43:df:67:3a:df:c5:6d:5e:7a:a1:
                    31:77:f5:35:bd:59:bf:eb:6b:3f:1f:e4:85:1e:d9:
                    f1:5f:28:fc:f0:27:1c:6f:ca:34:d2:1d:f6:3b:6e:
                    f2:bb:e3:df:de:86:a4:95:56:19:c3:c8:2f:69:c4:
                    13:5f:d2:05:74:65:80:c9:9c:60:53:56:a5:b1:8e:
                    c1:fd:ad:83:7b:db:43:43:50:32:55:0a:47:e5:8d:
                    af:9d:b5:cd:1f:0b:72:4a:b4:c3:9b:e4:26:ba:b2:
                    a4:f6:5a:37:2c:34:17:b4:15:46:60:f3:9c:6c:d2:
                    a8:6a:24:ed:22:20:73:03:8d:82:dd:72:29:b9:91:
                    fa:38:23:24:f4:66:1d:27:42:4c:4d:9b:b8:72:e4:
                    48:76:80:e8:a6:08:dc:1e:e2:f3:0c:0b:9c:74:1a:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:8C:1C:B4:30:46:F7:23:90:EE:77:71:E5:16:74:41:37:11:3A
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:98:45:a6:10:08:54:87:15:fb:a0:58:f8:0a:9e:d6:6e:71:
         70:32:0a:5a:ea:78:c6:90:10:81:7c:eb:c2:2b:c3:0e:8e:c0:
         6e:10:b3:27:db:35:8b:b9:3c:3f:21:10:ac:5c:28:4a:e6:dc:
         de:5b:be:00:c4:32:3a:0e:65:fa:cf:a7:56:7d:75:a7:80:6e:
         7f:6b:9a:3a:26:1c:6f:19:6c:a3:01:49:be:79:64:49:da:ad:
         41:a0:16:ef:40:48:c9:87:f9:87:22:7d:20:ab:05:33:c5:8d:
         30:7b:ce:2e:84:6e:b7:61:08:31:61:e7:98:aa:a3:e2:8e:78:
         03:49:7b:42:02:5d:dd:87:22:e3:78:e7:08:59:6b:7d:25:d6:
         b8:61:71:af:48:b3:b6:ea:db:48:68:68:e9:43:5d:5b:13:39:
         d1:fd:09:9e:0d:22:27:b0:72:99:ba:5e:40:c5:0a:b9:e8:d3:
         f5:27:b6:fb:6e:b3:00:31:62:04:df:25:fd:11:aa:e3:e2:6c:
         64:ea:fe:e4:3f:b3:c1:d3:3b:27:ae:d5:05:ad:c8:73:e1:df:
         d6:82:bb:3d:ce:1e:84:b8:43:f4:43:4b:86:bd:c7:a5:2c:d7:
         d8:64:a5:92:86:16:75:8a:5b:0d:86:b9:dc:38:8d:3c:9d:eb:
         24:1f:76:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDfUvUrZY0D+6wE8U90oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWNiNTFjYmE2OGViN2VmOTg2N2E3NWQxN2FiMjgwMTgx
OTZhYTEwHhcNMjUwODIzMDcwMjE4WhcNMjUwODI0MDcwMjE4WjAzMTEwLwYDVQQD
EyhhZTdlOGMxY2I0MzA0NmY3MjM5MGVlNzc3MWU1MTY3NDQxMzcxMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI95k3BNK1GSVLPhy3wZ6/2lv50L
bJj/Nkv8HQ8SoUbm91SEJ7OK0BmTBW54gCnOzy7pdIcTLDhTFRZJD8Dpw6mi9rw1
gvkViw/biKPK3Hms5HMQO7mj6WhhbJgWfUPfZzrfxW1eeqExd/U1vVm/62s/H+SF
HtnxXyj88Cccb8o00h32O27yu+Pf3oaklVYZw8gvacQTX9IFdGWAyZxgU1alsY7B
/a2De9tDQ1AyVQpH5Y2vnbXNHwtySrTDm+QmurKk9lo3LDQXtBVGYPOcbNKoaiTt
IiBzA42C3XIpuZH6OCMk9GYdJ0JMTZu4cuRIdoDopgjcHuLzDAucdBrW1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5+jBy0MEb3I5Dud3HlFnRBNxE6MB8GA1UdIwQY
MBaAFFcctRy6aOt++YZ6ddF6soAYGWqhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3Yzkt
ZGQ4NjI3NzRhMDkyLzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOGQyYTgtNTNhOS00MmMwLWI3YzktZGQ4NjI3NzRhMDky
LzEvVnh5MUhMcG82Mzc1aG5wMTBYcXlnQmdaYXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJhFphAI
VIcV+6BY+Aqe1m5xcDIKWup4xpAQgXzrwivDDo7AbhCzJ9s1i7k8PyEQrFwoSubc
3lu+AMQyOg5l+s+nVn11p4Buf2uaOiYcbxlsowFJvnlkSdqtQaAW70BIyYf5hyJ9
IKsFM8WNMHvOLoRut2EIMWHnmKqj4o54A0l7QgJd3Yci43jnCFlrfSXWuGFxr0iz
turbSGho6UNdWxM50f0Jng0iJ7BymbpeQMUKuejT9Se2+26zADFiBN8l/RGq4+Js
ZOr+5D+zwdM7J67VBa3Ic+Hf1oK7Pc4ehLhD9ENLhr3HpSzX2GSlkoYWdYpbDYa5
3DiNPJ3rJB92lA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:02 2025 by rpki-client