Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
File:                     vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft (raw, json)
Hash identifier:          W0ZA5t11Jj+jScs+wPVqDSGbM/iN7jbG2k/4Emv3c+A=
Subject key identifier:   57:FF:A9:EA:27:69:00:00:64:67:21:42:D1:A6:91:FE:9A:3D:F0:D0
Authority key identifier: BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF
Certificate issuer:       /CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf
Certificate serial:       019889575CE6C9F024C4EDC3F7787D8A5DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 11:01:00 +0000
Manifest this update:     Fri 08 Aug 2025 11:01:00 +0000
Manifest next update:     Sat 09 Aug 2025 11:01:00 +0000
Files and hashes:         1: Il2poWeT4F_H4KiL-0HdiaMsadA.roa (hash: VrsL8H9loMqzLX65T7cvzeckeITcvwECmwnt6mshIP0=)
                          2: vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl (hash: 36uUr+wcCMYsjEc86pEx59R5MWN3l25QNfW++1w8sHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:5c:e6:c9:f0:24:c4:ed:c3:f7:78:7d:8a:5d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc063d650534aa9f06931fd8ed6e0bb276ebd3bf
        Validity
            Not Before: Aug  8 11:01:00 2025 GMT
            Not After : Aug  9 11:01:00 2025 GMT
        Subject: CN=57ffa9ea2769000064672142d1a691fe9a3df0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:be:b3:6f:b4:95:bd:b4:91:8b:9c:82:ad:45:
                    bf:86:87:99:4d:9f:a8:f9:99:ea:61:2b:ca:17:94:
                    8d:78:a2:fe:32:56:08:52:14:c1:c8:28:ab:84:4a:
                    7f:83:18:33:58:d2:3b:20:03:d5:2b:8e:3c:1c:03:
                    ca:11:91:8a:d9:34:8a:85:bf:71:9b:d2:90:27:60:
                    19:80:28:57:8b:58:43:b2:1a:d8:39:21:f6:45:20:
                    31:33:db:87:87:25:f6:d5:05:f4:ff:38:94:38:f9:
                    12:24:51:f2:aa:f5:4d:ec:19:2d:95:10:a8:5a:07:
                    f1:37:6b:74:7d:b3:56:fb:d1:c8:50:60:19:8c:61:
                    6f:ea:1b:fa:ae:5c:2f:32:e3:96:84:7b:82:98:77:
                    bb:52:c6:1f:0f:88:5c:46:af:b0:64:b8:85:06:45:
                    01:ff:ea:f7:c6:91:2b:13:58:59:63:33:c1:e7:eb:
                    d3:59:29:58:5f:c1:2f:89:52:9c:87:cd:76:5f:6b:
                    54:da:0e:ab:ca:e9:83:12:31:61:0d:69:19:9d:83:
                    34:6f:dd:d2:b4:74:2e:90:28:52:39:05:43:6f:0e:
                    f3:b2:4f:78:ea:b3:97:48:d8:4b:e7:ed:7f:67:a6:
                    aa:03:70:4c:e7:7c:fe:33:5b:21:56:58:7d:b3:8c:
                    1c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FF:A9:EA:27:69:00:00:64:67:21:42:D1:A6:91:FE:9A:3D:F0:D0
            X509v3 Authority Key Identifier:
                keyid:BC:06:3D:65:05:34:AA:9F:06:93:1F:D8:ED:6E:0B:B2:76:EB:D3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1794e8-8998-4514-b7e1-216d289f1764/1/vAY9ZQU0qp8Gkx_Y7W4Lsnbr078.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:ab:24:88:67:d4:97:82:44:4a:28:98:a5:c9:c7:2e:1b:a7:
         78:6a:72:b3:9e:21:ee:c1:1f:cd:98:34:84:6a:dc:65:17:12:
         b2:16:db:4d:36:e1:4e:a2:e5:ff:9d:a3:6f:ee:e8:c8:86:87:
         0f:6e:ff:40:2e:43:6e:58:7b:69:eb:05:89:d5:55:f1:f8:fd:
         c0:0d:67:4c:9e:d5:bc:8f:ef:7f:00:6f:3c:9b:aa:fa:14:1c:
         ce:68:76:16:dd:cd:59:72:90:96:9f:cf:2b:e6:4c:55:2e:5b:
         5e:c3:b6:fc:10:f8:75:08:47:d9:17:06:1d:83:eb:75:46:6c:
         24:16:80:7c:a5:0d:d3:ba:89:ab:09:d7:28:ce:f9:96:63:1c:
         bf:79:28:3c:ed:20:e2:68:2d:9c:6c:a4:43:e2:01:10:22:4b:
         0e:65:fd:0a:65:76:d6:39:be:52:cf:b8:c7:d1:86:3c:75:f0:
         4e:e4:63:7b:4b:4c:ed:fa:51:0c:5f:bc:10:4b:23:fe:77:3e:
         15:db:f2:7e:77:6d:ca:fd:ef:7a:1a:5a:92:89:9c:b3:0d:33:
         0f:ae:14:6e:61:17:8d:3c:64:a5:25:cd:e4:99:fb:d2:7b:97:
         67:c5:dd:76:e7:0e:02:1a:36:2f:34:4f:6a:36:1e:2e:0b:24:
         65:83:cb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:19 2025 by rpki-client