Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          z9ewlwbmcVDQJrEKkeQJhQdJl0q82ENHhZWIafEO3fc=
Subject key identifier:   20:A0:89:21:45:A9:ED:43:A9:63:36:D0:53:8D:11:F9:69:D5:D5:18
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       0198D6CCD9012151C76FDD77B0878BBF6997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0AE1
Signing time:             Sat 23 Aug 2025 12:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:05 +0000
Files and hashes:         1: s27ESPJopt_N9W4hvPHWl2wqbyQ.roa (hash: apumiTd/x0yPmg9RAzVm+wQkBoO/X0o+cBTzpE4TMB8=)
                          2: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: Uz0cCrKGOd+h3bQfRc5sVOrEeHK+c32RkAGTdKJwLTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:d9:01:21:51:c7:6f:dd:77:b0:87:8b:bf:69:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Aug 23 12:00:05 2025 GMT
            Not After : Aug 24 12:00:05 2025 GMT
        Subject: CN=20a0892145a9ed43a96336d0538d11f969d5d518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:32:a0:be:f7:a7:b1:c6:b4:ed:1c:a1:b9:
                    99:00:70:f5:30:35:37:99:7c:71:f9:1f:40:8a:7b:
                    91:a1:13:fc:d3:77:e2:b8:b2:8a:ac:b3:b2:2e:22:
                    8f:4a:76:76:31:b6:5d:e0:ee:62:8d:54:e0:80:9f:
                    83:22:35:15:7e:e8:2b:bd:44:a6:1c:a9:4e:30:27:
                    10:18:52:ab:54:23:51:13:5d:f2:1c:6c:11:9c:01:
                    97:09:3c:82:25:e0:da:40:03:0f:e8:3d:74:0e:52:
                    d2:eb:bf:0a:c0:08:15:d8:3a:9d:f4:48:e6:20:4f:
                    b3:98:87:7b:3f:ac:1d:18:1b:fb:f6:f3:d7:ab:20:
                    57:ca:51:47:5c:10:fc:56:15:04:19:26:65:21:c4:
                    50:ab:f8:18:3f:74:9c:96:42:7e:62:e1:39:2e:a6:
                    6f:d3:60:bb:4d:97:9c:8b:c6:27:cb:9f:08:73:a0:
                    cb:70:cb:b5:90:8b:7b:a3:f2:f7:f2:10:71:51:a2:
                    88:43:37:59:39:3c:bd:3b:5b:c9:7d:cb:cf:16:15:
                    97:53:7c:2c:7e:4d:32:77:88:a2:09:9b:29:eb:2a:
                    00:ee:cb:b7:03:d0:97:2e:6d:bd:4d:5c:0b:c5:a3:
                    37:e1:d5:07:3b:26:eb:e3:ba:08:13:79:f9:89:4b:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A0:89:21:45:A9:ED:43:A9:63:36:D0:53:8D:11:F9:69:D5:D5:18
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:14:6c:4f:05:29:ce:47:97:58:b0:b9:86:c5:16:b3:62:ef:
         38:b4:da:d4:e5:9c:dd:21:c9:a4:da:9a:62:80:d7:e4:9f:fd:
         43:ff:b6:84:62:fc:54:86:8b:49:7a:2f:e8:23:4b:ac:26:8d:
         ca:d6:ee:a2:0f:4d:e2:61:f7:a6:d5:55:bf:2d:b9:77:e0:9c:
         cc:a7:e2:88:46:12:c7:fc:b8:87:42:ca:42:5a:5b:03:74:3d:
         8d:9c:a3:17:34:c1:b1:7a:02:42:47:6b:bc:f1:bd:98:6f:dc:
         49:c5:08:7c:a9:cb:7f:9b:1d:74:de:21:6e:d5:78:a4:10:b3:
         df:cb:fd:47:db:3c:08:4a:41:7a:d3:79:ca:a1:67:d6:87:ef:
         45:b5:76:b3:02:34:87:3c:dc:10:00:ea:f3:f8:d9:c3:98:f8:
         70:ba:29:89:4b:41:7b:68:95:46:f8:c5:98:e9:9f:5a:a7:be:
         0e:59:1a:5b:47:62:c5:b4:5c:c1:e0:97:d2:88:4c:cb:db:b4:
         09:9d:81:a2:73:8f:12:a0:b0:8a:d2:55:3b:76:12:ba:42:41:
         bf:2b:34:a5:35:0b:7e:db:ff:8e:1f:2a:2e:3c:af:38:98:93:
         3b:94:fd:88:7b:75:f1:7d:94:c0:6f:92:74:2f:90:c7:43:70:
         83:19:93:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:48:36 2025 by rpki-client