Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          fwGp1FlSoKFzfPzn3zoYh4SQ6f4LD723h7475f8OfHU=
Subject key identifier:   7A:8F:3E:4F:2D:12:B0:A5:E4:FD:C9:9B:66:72:92:6E:AC:8E:37:7E
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       019889576878B58062F20FB71F31ED547F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          09C0
Signing time:             Fri 08 Aug 2025 11:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 11:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 11:01:03 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: Sucl-ga8bKlbfGlHsxsq1Oo80t0.roa (hash: k1Htljgs56uFbBPsZWyrCnN1sbAvxLT63YyfljrMCbY=)
                          4: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: 8K8gZcyn2v3FDiUfG39XO5qFJWvoEYmqCJcq6cmOk4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:68:78:b5:80:62:f2:0f:b7:1f:31:ed:54:7f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Aug  8 11:01:03 2025 GMT
            Not After : Aug  9 11:01:03 2025 GMT
        Subject: CN=7a8f3e4f2d12b0a5e4fdc99b6672926eac8e377e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0d:85:71:1e:08:5b:0b:ae:44:4f:8e:db:24:
                    7f:fe:af:dc:e8:3d:0a:e6:98:23:1b:1e:e1:e9:88:
                    73:98:c9:1d:ab:c0:aa:89:77:39:44:3d:64:a1:fd:
                    c6:22:99:08:d5:6a:eb:bc:77:ac:24:cb:6a:7f:f5:
                    e3:b1:cd:f1:6e:a5:c7:8b:19:15:38:84:9a:41:7b:
                    ec:0f:69:e0:93:fa:2e:9b:89:29:da:66:ed:9d:3c:
                    81:86:55:89:c0:1c:56:10:ac:11:cd:d4:8b:4e:3d:
                    73:ea:de:72:97:f2:a0:9a:cc:21:0c:dc:b1:d4:ee:
                    82:62:9b:ad:8c:1e:93:9b:1e:1d:3c:5d:60:64:e7:
                    eb:11:4a:f1:73:1a:db:fb:b2:db:a2:95:ad:78:a6:
                    38:9f:32:89:c8:d0:86:ab:17:fd:aa:2f:e7:ea:bc:
                    17:aa:be:8c:70:20:55:72:64:df:15:0e:33:81:00:
                    f2:92:13:59:6c:6b:cb:02:ed:8e:d3:ea:c0:63:4b:
                    26:ea:f1:53:18:ea:e5:cc:69:bd:3c:24:ed:45:ae:
                    d2:06:f2:cb:9e:5f:88:4d:bb:8c:56:c7:21:19:41:
                    eb:51:60:68:a9:96:0e:32:b4:f7:9d:e8:4b:44:29:
                    c5:e3:10:28:89:a8:82:fe:a3:59:5f:74:84:72:63:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:3E:4F:2D:12:B0:A5:E4:FD:C9:9B:66:72:92:6E:AC:8E:37:7E
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:f0:b5:e9:3c:42:a3:67:f4:56:8f:fc:03:9f:95:6b:f8:
         91:44:a9:47:a1:56:3a:05:15:8e:34:b2:01:e9:c6:cf:5f:6e:
         c7:28:dd:77:03:33:55:37:7f:1f:d0:dd:39:cf:42:f2:28:a1:
         92:01:d1:39:0c:0a:22:67:ca:f4:e9:0f:07:f6:c6:a7:f3:74:
         49:83:7b:e4:b6:4a:2f:1b:29:43:be:47:4b:71:98:96:38:07:
         36:92:9d:33:4f:a4:4c:f1:93:76:2e:39:55:4a:05:6e:93:4e:
         da:55:a8:d6:e5:ed:86:b9:c8:d0:df:af:9b:c8:b1:0e:b4:df:
         0e:13:31:b5:5e:99:0d:65:59:e5:f8:59:af:f0:5f:c1:68:d3:
         3a:7f:02:22:89:f8:0c:fb:b0:f3:2a:34:e9:81:ba:6d:59:09:
         f5:46:3a:e4:f7:ae:f6:f4:15:d7:23:e1:01:83:f3:c9:73:0c:
         70:80:59:77:db:16:4b:3f:17:5b:52:77:df:f0:85:60:29:e7:
         82:66:1c:9c:53:8e:da:fd:03:23:c1:ef:77:79:10:62:9d:b4:
         ac:57:cf:eb:4b:46:67:b0:ff:8e:42:b1:0e:d2:78:d7:5d:18:
         a6:8e:4e:3b:86:03:f8:9f:50:9f:4c:21:0f:98:a5:c5:93:54:
         07:3c:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:21:41 2025 by rpki-client