Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File:                     dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier:          WRi/BtHK5RywYtzWq2cui31oojIeVOD5umjuZDsG3vk=
Subject key identifier:   AC:B7:CE:61:14:95:CE:83:00:49:63:48:B6:90:72:99:4C:18:DA:FC
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer:       /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial:       01988CFEE7ACB2E60DB30341B5E29F38ADDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number:          094B
Signing time:             Sat 09 Aug 2025 04:02:52 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:52 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:52 +0000
Files and hashes:         1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
                          2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 4nGUefLtTbYot4lRaQlqOqluCpRm7Tz/g8wcMwKiJeI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:e7:ac:b2:e6:0d:b3:03:41:b5:e2:9f:38:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
        Validity
            Not Before: Aug  9 04:02:52 2025 GMT
            Not After : Aug 10 04:02:52 2025 GMT
        Subject: CN=acb7ce611495ce8300496348b69072994c18dafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:a2:73:ef:72:1d:5b:e6:63:09:0f:8e:7d:
                    f4:b9:d8:ae:57:3f:74:37:b9:10:71:0e:a9:de:78:
                    c7:38:cf:d8:82:24:aa:ea:d5:43:21:55:4a:ad:47:
                    e8:f0:98:cf:25:b9:8c:a5:1b:74:46:b5:23:57:95:
                    26:6e:da:18:57:9f:11:56:d9:2d:23:f7:16:b5:94:
                    81:7c:ac:cb:df:57:68:90:7f:1a:08:34:84:42:d2:
                    5a:33:4c:95:c8:49:33:d0:cd:4d:a1:14:e2:cd:ce:
                    8f:9a:db:02:11:87:3d:5b:29:b2:e9:84:ba:fe:3d:
                    61:ec:b5:c6:df:09:d1:d4:66:55:70:ac:8f:30:22:
                    27:14:28:88:aa:a6:9e:1e:59:2f:ce:dd:67:f6:1b:
                    8c:83:81:81:57:e5:47:d9:d2:d3:25:da:d3:91:53:
                    46:c7:b5:ec:69:ee:b9:a7:27:39:2f:2d:75:56:a1:
                    b8:bf:6a:07:bb:63:70:1d:a2:2a:7a:f1:0f:5d:14:
                    f9:b4:ee:57:85:d7:4b:4b:f7:e0:e1:60:ba:32:30:
                    eb:88:23:d1:4e:d5:dc:18:51:a2:12:09:a2:91:24:
                    26:66:74:c8:bc:64:32:6c:4f:00:2a:1b:63:15:f4:
                    2c:02:14:25:22:db:2c:6d:1f:7f:53:1a:60:11:f7:
                    99:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B7:CE:61:14:95:CE:83:00:49:63:48:B6:90:72:99:4C:18:DA:FC
            X509v3 Authority Key Identifier:
                keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:73:a1:f4:78:64:df:46:b0:b0:6d:44:e8:8f:65:80:b3:40:
         b1:13:d1:0c:07:36:79:ee:ab:80:ec:bc:23:53:bc:8f:03:ef:
         94:62:85:aa:75:0e:e6:19:aa:1d:1d:c3:64:a8:69:8c:84:6c:
         af:0d:c6:e9:03:c1:38:21:7c:eb:c8:e8:16:d6:e1:59:ca:ea:
         84:66:2a:f4:cc:5e:a8:b6:93:29:47:a4:8a:b3:41:43:da:3e:
         db:b7:ae:4b:18:a7:aa:a2:a5:d8:0a:9b:1b:aa:b2:29:6c:b3:
         ef:39:57:3c:b9:7c:66:7b:29:68:57:22:93:4d:56:41:54:25:
         32:2a:dc:5e:46:35:65:89:85:0b:57:44:34:be:2d:68:34:5a:
         f5:52:82:70:f0:db:5e:eb:86:f8:ad:f6:6e:51:8e:43:2d:80:
         33:b5:43:d1:ff:15:72:1b:33:d9:db:4b:31:97:c1:2e:6f:e7:
         d7:60:72:36:8d:f9:33:87:03:9b:77:76:1f:70:32:89:b0:9c:
         c1:b5:68:09:38:ad:13:aa:ca:f0:1d:fb:e1:c2:48:69:63:85:
         eb:35:2a:b4:21:91:d6:00:7e:ef:a1:c8:83:42:e0:39:01:b2:
         db:31:0f:23:72:34:37:78:c6:3d:09:ea:66:eb:dc:ee:84:5b:
         2d:74:7a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:26 2025 by rpki-client