Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File:                     mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier:          wuE2t7bsLJV6C7ROjsDSRLCpfsFarTgppE2qYbewLYQ=
Subject key identifier:   BC:3D:67:35:0E:A2:12:4C:65:A6:D5:C3:96:89:E5:60:91:1C:6E:9B
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer:       /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial:       0198D4731E8B39EB65A8146C4598A5686DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 01:02:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:50 +0000
Files and hashes:         1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
                          2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: XVApkKOlP1RgodAqB+PVHXDOUm2w/LwhmUsZirjTQi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:1e:8b:39:eb:65:a8:14:6c:45:98:a5:68:6d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
        Validity
            Not Before: Aug 23 01:02:50 2025 GMT
            Not After : Aug 24 01:02:50 2025 GMT
        Subject: CN=bc3d67350ea2124c65a6d5c39689e560911c6e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:c3:10:8c:17:50:14:63:53:0e:75:ff:c2:
                    22:17:23:95:23:72:34:35:0a:f1:e0:6b:3e:c0:55:
                    70:90:21:c1:6e:b6:b5:6a:6c:c8:d7:e5:0e:36:ac:
                    34:df:b0:e0:8f:94:af:50:a9:f7:c8:77:af:a0:51:
                    09:df:4a:bd:44:63:d1:d6:76:be:04:26:69:b6:97:
                    47:62:ab:a9:40:49:88:ea:a4:5d:2b:f7:75:ea:a1:
                    13:f2:d4:73:0b:6f:79:78:f0:da:1c:10:3e:3f:fd:
                    2f:aa:ab:5e:89:97:e8:95:de:d1:54:9a:a1:56:8e:
                    e7:fc:96:ce:31:d0:49:b4:5b:0c:e6:de:b5:09:0c:
                    62:4f:31:be:1e:fd:02:10:db:a4:64:bb:44:1c:05:
                    30:7f:67:4e:eb:e9:4c:4c:7b:f0:b6:cc:1f:dd:2e:
                    d5:11:22:00:2d:0a:03:b0:4c:3a:6e:60:dc:31:b9:
                    d4:8f:9d:29:6e:70:3b:32:c9:e1:a9:c5:5a:2e:68:
                    6d:94:87:fe:20:2f:b5:8f:e2:c7:1a:33:52:66:9d:
                    b1:3f:98:6b:8a:e0:0b:eb:f7:e9:86:96:a2:2f:a2:
                    48:6e:fd:2a:f9:c9:c1:b9:03:9f:37:ba:c9:53:db:
                    ce:91:f8:24:a4:e1:59:d0:b4:e5:58:da:7f:ae:e4:
                    0c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3D:67:35:0E:A2:12:4C:65:A6:D5:C3:96:89:E5:60:91:1C:6E:9B
            X509v3 Authority Key Identifier:
                keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2e:d4:22:0e:c4:05:23:33:91:13:fa:eb:91:81:d0:d3:19:
         e2:07:35:97:a8:27:eb:5d:33:99:7f:2a:b5:2b:7c:4c:e2:45:
         45:5f:16:76:82:9e:70:1c:4f:bd:a1:43:49:7b:e6:1b:f5:4c:
         c4:5e:ec:92:7d:45:5f:4d:ed:81:78:3b:bc:aa:ad:59:70:bd:
         e3:76:7d:fa:0b:c7:95:f0:e9:e2:89:98:ce:ca:3c:7a:ab:54:
         be:bd:cb:f4:ee:3f:96:9e:95:87:78:62:90:dd:fe:c4:73:ed:
         6f:51:89:68:43:6d:5c:56:01:17:22:48:c0:c0:7d:e4:fa:de:
         b5:54:e0:fb:4b:6c:f9:c6:31:8c:d3:6e:3b:52:27:72:8e:d4:
         b0:e2:a7:ee:3e:a6:ec:5d:62:6a:8b:f1:d7:f6:88:bf:5d:f0:
         ee:9d:4c:ce:f7:ba:8b:c9:3f:e0:29:06:1f:fc:17:5f:f7:1a:
         02:19:69:38:19:83:5b:fb:55:1c:34:b8:26:86:00:b8:0b:a5:
         6f:01:15:5f:ee:c7:6d:57:2e:67:9e:5e:af:07:32:17:d1:e2:
         25:97:e3:11:77:00:d3:f6:d3:65:7d:ab:89:14:4f:7d:d9:b6:
         cf:70:8b:be:75:94:f0:a8:06:b0:24:64:91:6a:aa:3c:3b:30:
         c1:cb:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:27 2025 by rpki-client