Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          7YN8sr/s3Nu8v+8mwGNYF+4bMUqXFfcB3yJjKHEOYP8=
Subject key identifier:   6E:09:70:EB:67:7B:B2:F2:40:9A:4B:94:9E:67:E3:98:7C:39:B6:23
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       01988430DBF1FC99CC50EEBF472154267817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          15B0
Signing time:             Thu 07 Aug 2025 11:00:51 +0000
Manifest this update:     Thu 07 Aug 2025 11:00:51 +0000
Manifest next update:     Fri 08 Aug 2025 11:00:51 +0000
Files and hashes:         1: 5mIqDi-qSZMNQfzVabCDYIualIY.roa (hash: emChHnQclj1wViLAe/VRE5oA1OWGgrZwj1qbaE68eS4=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: KkdBNVvoK7SrpS2HNDhJ3TXuuy4VMMUIr79qg7iADNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:30:db:f1:fc:99:cc:50:ee:bf:47:21:54:26:78:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Aug  7 11:00:51 2025 GMT
            Not After : Aug  8 11:00:51 2025 GMT
        Subject: CN=6e0970eb677bb2f2409a4b949e67e3987c39b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:39:65:2c:80:9f:f5:6a:c3:43:79:94:ee:
                    ae:ea:8d:4a:c4:f2:43:20:a2:c4:1d:9f:b2:d2:ee:
                    b1:cc:87:3e:76:ca:57:03:b5:8e:c9:16:f1:95:62:
                    ac:b6:82:4f:4d:88:b5:a5:aa:c1:96:e5:b8:84:13:
                    11:c9:bd:14:ac:6f:a3:f6:2d:1c:8b:79:a4:33:e5:
                    cf:a2:46:f4:0a:0b:f4:64:4e:79:1f:5a:f7:02:f3:
                    a0:d7:a0:27:d7:b0:51:c0:14:05:80:04:e5:cb:10:
                    10:03:43:35:77:27:49:0b:d9:90:da:6f:46:68:36:
                    6a:5b:8e:42:a5:e9:75:7f:96:e6:39:ee:d8:5f:e1:
                    68:e9:33:80:ce:de:cb:7d:03:86:bf:b1:ca:04:12:
                    8d:32:e5:ca:5d:2f:f9:b3:c2:fb:cb:a0:2b:cc:aa:
                    f6:d8:eb:7f:b6:eb:7d:d8:68:97:fd:3f:a4:6e:c6:
                    f9:96:23:0d:df:e1:21:90:6a:b2:32:5d:55:e7:45:
                    de:16:fd:92:6a:74:0a:11:73:3d:bb:f2:41:ca:0c:
                    c0:8b:91:e7:5f:39:14:21:fa:07:ec:c7:12:96:7f:
                    64:89:c4:2e:77:c2:92:18:6f:3f:f3:a7:a7:e9:6f:
                    65:a6:28:a8:21:13:1a:08:17:a9:9f:91:e6:1d:2b:
                    06:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:70:EB:67:7B:B2:F2:40:9A:4B:94:9E:67:E3:98:7C:39:B6:23
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8a:3d:5d:33:2a:0c:49:c5:8e:7b:b9:06:4e:ea:7a:c4:d7:
         ca:e8:51:ba:0e:52:ad:93:11:58:4f:f5:ef:02:9e:7d:8a:a4:
         81:4d:95:91:9b:5c:7f:28:b6:0e:31:ca:72:fe:0a:da:51:3a:
         1c:40:c2:17:cc:4b:9a:03:85:e6:18:10:ac:1e:c8:62:cf:2e:
         74:5c:5c:e7:37:46:c7:11:f2:9d:b3:6b:97:13:73:90:9f:56:
         d7:4a:0f:19:c5:b2:03:c8:99:41:54:42:d4:34:73:07:73:24:
         f3:ba:c0:0b:15:83:b1:36:67:33:66:81:19:86:ab:ae:d4:07:
         60:dd:49:52:f7:00:fa:c2:e8:b2:83:80:65:52:c5:32:9c:ca:
         f5:c2:98:5c:22:a6:69:3c:f8:76:0c:6c:5b:7e:59:73:dc:c6:
         70:9d:87:77:a6:e2:ed:56:3a:b3:ab:cf:9c:36:c2:43:ad:3d:
         9e:3e:31:7f:f6:89:e5:78:28:89:e1:84:0e:1f:14:b1:67:9f:
         fb:6e:c9:2d:4b:6b:93:dc:0d:80:f2:a4:66:b7:dc:8e:87:8f:
         30:30:ee:b9:5b:de:87:e1:be:68:84:1f:85:07:86:34:e5:f1:
         11:bb:c6:db:c4:c3:77:e2:37:32:45:06:3e:9c:2e:09:61:90:
         33:eb:47:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMNvx/JnMUO6/RyFUJngXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MWEwZmMwMTJlZmI4OTY1MGE3N2U2ZmJkMTJkY2FiZGE0
MjhjYjAwHhcNMjUwODA3MTEwMDUxWhcNMjUwODA4MTEwMDUxWjAzMTEwLwYDVQQD
Eyg2ZTA5NzBlYjY3N2JiMmYyNDA5YTRiOTQ5ZTY3ZTM5ODdjMzliNjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkg5ZSyAn/Vqw0N5lO6u6o1KxPJD
IKLEHZ+y0u6xzIc+dspXA7WOyRbxlWKstoJPTYi1parBluW4hBMRyb0UrG+j9i0c
i3mkM+XPokb0Cgv0ZE55H1r3AvOg16An17BRwBQFgATlyxAQA0M1dydJC9mQ2m9G
aDZqW45Cpel1f5bmOe7YX+Fo6TOAzt7LfQOGv7HKBBKNMuXKXS/5s8L7y6ArzKr2
2Ot/tut92GiX/T+kbsb5liMN3+EhkGqyMl1V50XeFv2SanQKEXM9u/JBygzAi5Hn
XzkUIfoH7McSln9kicQud8KSGG8/86en6W9lpiioIRMaCBepn5HmHSsGAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4JcOtne7LyQJpLlJ5n45h8ObYjMB8GA1UdIwQY
MBaAFFcaD8AS77iWUKd+b70S3KvaQoywMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUt
OGI0OWRhYjE2NmE0LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNjc2NjEtNDMyNC00ZTdhLWFjNmUtOGI0OWRhYjE2NmE0
LzEvVnhvUHdCTHZ1SlpRcDM1dnZSTGNxOXBDakxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4o9XTMq
DEnFjnu5Bk7qesTXyuhRug5SrZMRWE/17wKefYqkgU2VkZtcfyi2DjHKcv4K2lE6
HEDCF8xLmgOF5hgQrB7IYs8udFxc5zdGxxHynbNrlxNzkJ9W10oPGcWyA8iZQVRC
1DRzB3Mk87rACxWDsTZnM2aBGYarrtQHYN1JUvcA+sLosoOAZVLFMpzK9cKYXCKm
aTz4dgxsW35Zc9zGcJ2Hd6bi7VY6s6vPnDbCQ609nj4xf/aJ5XgoieGEDh8UsWef
+27JLUtrk9wNgPKkZrfcjoePMDDuuVveh+G+aIQfhQeGNOXxEbvG28TDd+I3MkUG
PpwuCWGQM+tH9w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:11 2025 by rpki-client