Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          x/7H9jEyINharKGcjtVm6G1bO4UaTE0HH6PjgwhDzH0=
Subject key identifier:   A8:81:F1:DB:E5:CE:D9:21:5F:8C:5E:66:DB:FF:31:0D:BD:53:63:9D
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       019892FF8927028A24FFD6D8CE4DC1FCE04D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          0417
Signing time:             Sun 10 Aug 2025 08:01:16 +0000
Manifest this update:     Sun 10 Aug 2025 08:01:16 +0000
Manifest next update:     Mon 11 Aug 2025 08:01:16 +0000
Files and hashes:         1: FzOWVnk6UyMtU7jUCjfT7xK7jUs.roa (hash: AAnWtLc0XNLDmh8MKuv5G+x9dydvMeajmyOK9NO07jQ=)
                          2: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: vLGetQ5j88U8yWIvId9AYh7C5t/mc4t0AZ5WAAUAu2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:89:27:02:8a:24:ff:d6:d8:ce:4d:c1:fc:e0:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Aug 10 08:01:16 2025 GMT
            Not After : Aug 11 08:01:16 2025 GMT
        Subject: CN=a881f1dbe5ced9215f8c5e66dbff310dbd53639d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:d1:d7:0e:51:ba:e7:a3:91:e1:3d:3f:67:
                    2e:e7:c5:b5:9f:b7:85:6a:98:4e:1b:d4:d0:4d:d9:
                    ba:5a:72:48:4d:aa:95:a4:98:34:b5:5f:73:e3:f4:
                    25:09:34:d0:76:8f:66:27:04:40:a5:2e:83:28:7e:
                    47:87:31:c6:5b:c2:ca:db:89:94:23:f7:a5:42:73:
                    82:fc:51:7b:30:d8:0e:b3:4a:08:19:3c:6a:94:f3:
                    04:b0:12:1e:00:0a:af:ce:ab:17:f7:63:12:f7:4c:
                    3c:12:3f:3d:fa:b7:84:08:2a:0d:64:b8:35:85:7e:
                    41:18:7b:fb:f8:7f:8f:2f:c8:12:a9:7d:91:40:89:
                    e8:0c:ee:7c:89:61:bc:75:92:05:35:a8:1d:94:39:
                    84:1b:80:da:df:af:6d:88:3a:5e:27:c9:e7:46:40:
                    aa:54:1b:1c:46:b9:cd:e3:8d:60:82:46:98:cc:09:
                    2f:1b:4b:d0:77:7e:50:f4:15:cc:2a:1a:46:ca:a3:
                    65:bc:e7:62:5a:7b:3b:ed:3e:0b:60:11:61:ce:50:
                    0e:79:46:ad:01:3b:7c:6e:61:20:27:5c:6a:5c:44:
                    10:24:2d:8d:55:58:87:cf:00:ed:75:99:85:d4:cb:
                    de:ad:f7:a3:a7:2d:ac:6b:a7:e9:c7:9a:f5:3f:b2:
                    d4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:81:F1:DB:E5:CE:D9:21:5F:8C:5E:66:DB:FF:31:0D:BD:53:63:9D
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:d5:07:57:fd:8a:61:a5:cf:ec:eb:f2:cc:0f:b8:46:88:
         f8:75:c1:1b:ea:95:78:7d:5e:8a:36:e7:b3:7a:57:35:3c:bf:
         5c:43:9e:9c:f0:32:51:8c:b3:40:e1:a4:57:86:fc:41:52:f5:
         b3:2c:81:2f:a5:3b:3d:80:0f:c5:b2:50:1f:79:dc:ff:ce:a2:
         cf:b6:c4:39:3a:20:b0:33:43:b8:bc:d8:8c:0c:1d:96:f1:c4:
         44:40:0b:f7:de:bb:f6:36:9b:f1:aa:a7:cd:fe:04:b4:48:5e:
         c7:ca:5e:50:4c:d5:cf:d6:bf:37:07:d7:75:9f:1f:27:7b:28:
         b7:d0:17:de:4e:a3:6d:3e:58:5c:9e:1a:cd:91:16:da:65:20:
         15:a9:d6:57:52:53:a3:10:93:76:51:ee:8f:c8:4b:f7:ac:4b:
         53:ad:ac:3e:01:0f:cb:37:05:e2:2e:49:20:fd:4a:37:b6:75:
         c2:a6:b6:66:0b:5a:7e:16:7d:62:fe:6e:7e:05:d6:5c:93:34:
         d4:a8:bd:5c:f3:e9:c3:93:11:22:21:87:2c:0d:7d:03:c0:b8:
         97:0a:00:f6:8c:ce:5e:59:01:f0:13:5d:d8:72:cd:6e:c7:ac:
         11:a9:9f:ca:e9:6b:d7:bc:1d:23:3b:e5:31:87:6e:73:8f:0f:
         47:7b:1a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:08 2025 by rpki-client