Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          VIUbbPa5t5w9kKplC5aIthRkVWl0+FYnEOeVknr1ibs=
Subject key identifier:   E1:A9:50:1D:BF:CE:60:08:5F:8B:53:21:0C:DE:4E:AD:46:D8:2C:A8
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       019873E2285BEB468C325E249ED2D36352B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 07:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:57 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: vVgJzxrtsQ/meDKueWmrQYsU8zrcUY7mgxT1UEbH9uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:28:5b:eb:46:8c:32:5e:24:9e:d2:d3:63:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: Aug  4 07:00:57 2025 GMT
            Not After : Aug  5 07:00:57 2025 GMT
        Subject: CN=e1a9501dbfce60085f8b53210cde4ead46d82ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:89:b6:fa:52:63:12:d1:68:1a:1f:50:cf:1d:
                    5e:7e:46:a2:77:39:ac:03:0b:ff:88:30:ff:95:34:
                    13:25:95:d7:82:59:98:a4:23:09:ab:6b:2f:38:76:
                    23:ae:3a:58:1c:b8:6e:f3:a2:93:90:21:37:81:9d:
                    be:20:2a:e2:04:e1:0b:14:d2:97:c2:90:bf:35:c9:
                    79:2f:07:07:91:94:1e:1a:aa:a6:8e:5f:b2:37:ff:
                    8c:70:49:cc:57:38:13:5e:80:b3:c1:61:4d:99:c1:
                    35:44:24:22:c6:36:95:16:2a:f5:66:db:23:7e:4a:
                    5b:d1:f0:e8:ba:db:9e:58:68:c9:c1:8b:ff:45:05:
                    e2:81:cc:fe:b5:08:38:14:d7:10:99:75:27:88:df:
                    8b:29:78:66:79:63:82:77:19:fc:0e:e8:68:12:9f:
                    cb:2b:56:8c:02:f9:05:56:e6:06:80:93:9a:13:51:
                    58:14:c2:f6:9b:76:48:48:ac:0d:90:92:a2:97:6a:
                    41:50:50:2e:0e:c0:34:30:63:d7:91:e6:f7:6c:86:
                    cd:37:29:95:9a:ad:f2:66:00:99:c0:77:9b:d1:58:
                    55:4a:f1:98:cc:27:fd:da:f5:71:1c:a6:53:22:a2:
                    92:c8:56:79:13:b6:f3:e7:0b:7b:d8:6d:98:d1:28:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A9:50:1D:BF:CE:60:08:5F:8B:53:21:0C:DE:4E:AD:46:D8:2C:A8
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9f:6c:64:9f:55:ad:44:fe:f3:6d:28:11:7e:87:98:8b:58:
         bc:cb:59:dc:b3:e4:5b:e9:f8:c0:75:8a:44:cc:99:46:74:66:
         5d:4b:ab:c7:c4:bd:01:75:7c:95:b0:22:2c:76:e3:13:9d:30:
         0e:62:e7:0c:82:0f:39:53:3d:81:32:ca:5e:18:36:42:c4:50:
         77:24:32:94:1b:5d:2e:94:e3:94:87:ce:b2:96:43:9e:d4:67:
         f1:d3:40:b5:f6:e1:05:78:7d:68:69:ad:f8:1e:2b:83:0f:87:
         cc:d2:91:10:a0:e9:37:df:23:13:9a:fb:e5:3e:c2:d6:2a:95:
         5c:67:41:cc:98:da:26:e5:9c:b7:cc:ca:6a:6d:07:54:e2:68:
         81:a9:26:87:af:f9:9d:9e:e1:3c:72:c9:89:80:21:d4:bd:ab:
         97:bf:36:73:d1:db:08:28:15:86:54:f8:1c:58:01:08:f2:53:
         2a:63:1a:88:f4:0a:9c:6c:6a:cd:cb:17:33:be:43:4a:d2:65:
         68:1d:95:a8:90:fd:9f:23:4f:48:1f:e9:d7:7d:3d:04:b6:44:
         cc:10:03:6a:ff:cc:4a:3f:c2:a4:b7:a5:8b:e9:11:46:5c:b7:
         68:23:90:b7:b0:69:be:1b:25:7f:b1:7e:f2:79:6d:71:6c:5d:
         35:47:e2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:46 2025 by rpki-client