Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          SERIM8l6bEbOTxNODevFjqhh1PqZcw9/8QbToEyLu2M=
Subject key identifier:   58:AD:5A:2A:C4:88:D1:57:99:D4:AC:D1:2D:58:94:75:0F:C8:82:4C
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       01988166AABF11E7E0451DBFD4F6ABDA852E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          0469
Signing time:             Wed 06 Aug 2025 22:00:45 +0000
Manifest this update:     Wed 06 Aug 2025 22:00:45 +0000
Manifest next update:     Thu 07 Aug 2025 22:00:45 +0000
Files and hashes:         1: 911mu2Suj6Dc73U5ClpiV6uw4no.roa (hash: qEURFtDeY+J3VwVWw/O3Pp8clugIYSrMPdnPar+j3OQ=)
                          2: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: luePIike6WcqWbh7EWxXFyfbgSPE64VdkTmUM8ad07Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:66:aa:bf:11:e7:e0:45:1d:bf:d4:f6:ab:da:85:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: Aug  6 22:00:45 2025 GMT
            Not After : Aug  7 22:00:45 2025 GMT
        Subject: CN=58ad5a2ac488d15799d4acd12d5894750fc8824c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:eb:f9:5a:b3:c4:5a:50:2d:95:1f:3b:14:
                    52:92:f6:82:da:87:af:a4:3d:46:26:39:9f:53:dd:
                    08:08:06:bf:db:5e:78:3a:1e:3c:68:eb:af:d5:85:
                    76:cf:31:c0:97:f8:c5:55:e1:d9:7e:30:b1:99:97:
                    59:f8:06:c2:4f:c5:b2:7d:61:fa:23:db:3a:34:8e:
                    98:ed:fc:33:70:49:17:84:65:cd:7b:ae:d8:2f:ed:
                    82:b9:ed:3a:fd:5a:cd:99:a8:72:00:6f:de:71:e7:
                    b3:4d:f5:eb:b3:58:d9:5f:6b:08:3f:32:e2:41:ae:
                    cd:3b:b6:ca:28:47:ae:1d:50:3b:da:5c:2a:e1:40:
                    ae:2c:9b:d1:34:4e:11:90:54:10:32:03:e4:c4:3c:
                    9d:40:53:f0:5d:a0:49:45:6b:af:7f:19:d1:fa:8e:
                    ef:d0:36:c5:36:43:03:84:93:d2:a8:b8:4d:63:d6:
                    f4:de:0b:c3:ce:9b:6e:61:d2:38:6b:e2:eb:a1:08:
                    0b:c3:5c:c4:d7:16:c3:b4:3a:d2:3c:a2:33:9c:53:
                    5b:b3:24:e5:af:d3:16:76:87:89:fe:21:e7:45:95:
                    01:ab:00:91:36:c3:57:42:cb:3a:b5:b3:4a:7d:98:
                    ba:71:27:15:3d:3d:1a:c6:9e:b0:06:ca:71:d4:9d:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AD:5A:2A:C4:88:D1:57:99:D4:AC:D1:2D:58:94:75:0F:C8:82:4C
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7b:05:9b:ab:37:90:95:76:c0:68:f1:4a:70:9f:e5:44:d9:
         79:f9:0e:87:bf:e3:1c:6d:93:d5:8e:a9:30:5e:50:96:76:33:
         41:05:a3:4a:1e:07:2e:7e:84:ba:0b:e9:c6:da:87:4e:39:62:
         95:df:76:51:75:77:78:94:4c:2f:d4:4a:12:de:71:bf:a2:4f:
         e8:af:2c:92:10:d6:be:87:de:74:1d:ef:06:cd:e1:08:f7:7a:
         06:d4:22:34:6a:39:51:fa:56:69:a1:17:56:ab:37:57:2b:50:
         1f:3b:0a:0d:9c:13:29:93:a1:bf:67:6b:24:77:81:f2:49:89:
         5c:62:e0:62:7e:13:b7:5e:c5:8b:86:1d:c3:92:72:cd:43:0d:
         6d:46:85:56:b8:aa:ff:f1:f9:6e:5c:b8:92:97:de:fb:c7:73:
         fa:93:54:fe:19:1e:22:1f:55:d2:f0:e8:35:e9:ca:f9:d5:18:
         6b:29:84:fc:1e:7d:92:8e:07:17:66:45:6e:3d:6b:d8:69:de:
         af:50:e8:e1:96:ec:6d:b9:7a:eb:13:a2:7e:68:fc:c8:f4:58:
         8c:22:cb:aa:b7:46:ef:0f:e3:0f:e4:ca:f4:96:55:19:35:2a:
         bf:dd:c4:b7:6f:96:55:ff:52:73:6e:a2:8f:e3:97:fa:58:c6:
         56:a2:52:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZqq/EefgRR2/1Par2oUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj
MjIyMjUwHhcNMjUwODA2MjIwMDQ1WhcNMjUwODA3MjIwMDQ1WjAzMTEwLwYDVQQD
Eyg1OGFkNWEyYWM0ODhkMTU3OTlkNGFjZDEyZDU4OTQ3NTBmYzg4MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJTr+VqzxFpQLZUfOxRSkvaC2oev
pD1GJjmfU90ICAa/2154Oh48aOuv1YV2zzHAl/jFVeHZfjCxmZdZ+AbCT8WyfWH6
I9s6NI6Y7fwzcEkXhGXNe67YL+2Cue06/VrNmahyAG/eceezTfXrs1jZX2sIPzLi
Qa7NO7bKKEeuHVA72lwq4UCuLJvRNE4RkFQQMgPkxDydQFPwXaBJRWuvfxnR+o7v
0DbFNkMDhJPSqLhNY9b03gvDzptuYdI4a+LroQgLw1zE1xbDtDrSPKIznFNbsyTl
r9MWdoeJ/iHnRZUBqwCRNsNXQss6tbNKfZi6cScVPT0axp6wBspx1J2VtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFitWirEiNFXmdSs0S1YlHUPyIJMMB8GA1UdIwQY
MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt
NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz
LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3sFm6s3
kJV2wGjxSnCf5UTZefkOh7/jHG2T1Y6pMF5QlnYzQQWjSh4HLn6EugvpxtqHTjli
ld92UXV3eJRML9RKEt5xv6JP6K8skhDWvofedB3vBs3hCPd6BtQiNGo5UfpWaaEX
Vqs3VytQHzsKDZwTKZOhv2drJHeB8kmJXGLgYn4Tt17Fi4Ydw5JyzUMNbUaFVriq
//H5bly4kpfe+8dz+pNU/hkeIh9V0vDoNenK+dUYaymE/B59ko4HF2ZFbj1r2Gne
r1Do4Zbsbbl66xOifmj8yPRYjCLLqrdG7w/jD+TK9JZVGTUqv93Et2+WVf9Sc26i
j+OX+ljGVqJSVA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:42 2025 by rpki-client