Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File:                     vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier:          ADqfVeGaNj4Lm49ZUlz2GGx+pT2+tszbGNPf3PQiLXc=
Subject key identifier:   CC:95:54:D0:1C:21:D6:CD:2A:45:94:51:92:9E:21:DE:E4:C5:6D:81
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer:       /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial:       01987DF7981B8704ED29A2040E61572A0C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number:          0886
Signing time:             Wed 06 Aug 2025 06:00:34 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:34 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:34 +0000
Files and hashes:         1: FSb-Rvye6YoA1Ii-rCKundZ-HD8.roa (hash: wEXQWTLVPy1UwtI4vOgrpyaszSEDzsytRnOaOtWiUUo=)
                          2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: wEoNx5ZZYYlbuAQmFdH/t239bj0bbKj2feu60GeNHqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:98:1b:87:04:ed:29:a2:04:0e:61:57:2a:0c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
        Validity
            Not Before: Aug  6 06:00:34 2025 GMT
            Not After : Aug  7 06:00:34 2025 GMT
        Subject: CN=cc9554d01c21d6cd2a459451929e21dee4c56d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:38:d9:b1:e8:80:8c:46:f7:45:58:e9:3f:8a:
                    0d:39:4e:f1:ca:61:dc:19:5a:60:54:40:14:ca:00:
                    81:e0:d1:dd:5c:49:6e:59:4d:3d:d4:2c:27:4a:bc:
                    89:dd:a1:f7:12:50:39:7a:84:3c:41:bf:b7:92:fe:
                    9f:f9:45:2d:39:12:dc:c2:9d:aa:a8:f4:ce:e1:8c:
                    62:49:90:28:02:29:45:bd:6a:75:3c:cb:ec:78:86:
                    cb:e6:ac:78:63:45:61:95:4e:65:84:f7:94:f7:e9:
                    00:e5:14:6d:05:85:14:ca:e6:af:0a:73:dc:c1:c6:
                    0a:4b:e2:88:be:73:0f:e7:fe:1b:94:9d:c8:11:af:
                    db:00:25:6e:a5:66:aa:dd:e6:af:44:6c:66:c9:d0:
                    7d:5f:13:1b:de:93:81:a6:02:35:ff:81:d2:91:80:
                    54:43:65:44:0a:e3:e9:86:4d:a9:53:1c:50:df:61:
                    3d:a3:71:d5:01:ac:ed:ec:ef:d2:a5:64:8e:9c:8e:
                    2d:a1:7c:e2:a0:f6:f6:03:b3:ce:7b:28:b0:92:15:
                    e3:f5:7e:e1:ea:bd:83:14:c0:16:3f:b3:1c:0f:f0:
                    42:cf:9c:b9:79:5e:e1:c0:e6:04:6c:35:f0:a5:b7:
                    be:d0:22:fb:7b:fb:12:82:18:ba:dd:7e:93:d4:ad:
                    19:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:95:54:D0:1C:21:D6:CD:2A:45:94:51:92:9E:21:DE:E4:C5:6D:81
            X509v3 Authority Key Identifier:
                keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a3:6d:95:16:d6:62:75:14:28:ce:e1:f7:3a:1d:74:47:5b:
         f9:14:0d:90:f9:b4:b3:5f:97:83:79:c8:76:78:9f:6d:03:02:
         da:42:db:c2:4d:04:62:87:ac:c2:b8:8e:6a:9a:02:5b:66:c3:
         b1:9d:79:6f:31:a4:43:34:e3:ba:31:10:1d:c2:38:c7:7e:58:
         ec:73:a8:9f:ea:8a:56:ff:a1:80:af:4c:95:6a:d0:9d:3f:fb:
         d7:53:9d:e0:95:bf:12:e7:5e:4d:3a:d2:d8:f1:0e:aa:4a:8a:
         40:ff:bc:2c:91:3f:3d:07:8b:7b:c5:cb:ac:8b:fc:64:33:25:
         5a:62:01:db:de:1f:63:f3:4f:09:8c:61:28:8f:b8:bc:92:74:
         de:ce:16:c7:8f:89:93:23:47:56:f5:73:14:60:55:69:34:8a:
         77:66:92:b6:63:53:da:d6:29:d7:7e:e9:c4:ff:71:06:64:53:
         e3:c6:c2:bc:be:8c:b0:a9:b7:60:9a:f5:13:64:f4:6d:35:29:
         c3:ca:15:14:ef:e1:09:29:b3:dc:79:f4:88:a2:81:7b:06:19:
         b8:20:00:22:74:45:b3:66:32:da:da:b8:76:72:a7:b5:1d:a9:
         3c:10:64:d5:85:ee:1c:1d:cd:82:88:17:46:49:f4:5f:12:ee:
         a5:c0:17:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:04:17 2025 by rpki-client