Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          Cngwter5tf7F3gnV6RJNsPAy34lPxwIPoi2ny/RghgM=
Subject key identifier:   D1:25:52:89:53:9D:4D:DD:E4:C4:D3:00:55:F6:10:50:7B:97:A6:AB
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       019873E3C6F29B7C22EC636225576B2ED684
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0B0D
Signing time:             Mon 04 Aug 2025 07:02:43 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:43 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:43 +0000
Files and hashes:         1: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: jMBLfgqgcbzR+7qGMYNX2NRJCcoYlskjQT2YvJJTWgk=)
                          2: t3EOhCqhRV2WckdeZdMmZde2sco.roa (hash: 9YigDUievW+JnsoS3fARTo39jCVhAjMEThq2WY+OCkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:c6:f2:9b:7c:22:ec:63:62:25:57:6b:2e:d6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Aug  4 07:02:43 2025 GMT
            Not After : Aug  5 07:02:43 2025 GMT
        Subject: CN=d1255289539d4ddde4c4d30055f610507b97a6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:14:f2:fb:1c:ec:6d:6a:9e:82:2d:d8:e9:
                    43:d3:16:c7:b5:15:27:dc:c4:6f:90:11:2f:4e:19:
                    40:d9:bf:39:4a:74:b8:b7:e2:0b:0f:60:5e:e4:82:
                    92:d0:ca:65:bf:9e:96:95:9c:60:e6:cd:86:53:a9:
                    5b:4f:ac:9a:11:60:15:a0:e2:37:16:a7:f1:c1:fd:
                    31:b8:8c:b8:ad:35:9b:02:1a:ae:36:56:78:8f:ac:
                    e8:0c:7e:40:6b:16:ed:be:53:8a:0d:e5:86:4a:0f:
                    80:9e:8e:f4:e2:9a:79:86:8e:5e:0c:d4:8c:7d:75:
                    33:15:f6:07:df:b2:33:e0:48:d2:b6:06:43:e7:b3:
                    52:56:aa:11:40:01:68:41:36:50:00:27:45:1f:22:
                    87:cc:f5:bb:c8:4c:16:ce:a1:eb:8e:f3:36:a3:81:
                    a0:3f:3a:86:7d:d6:5f:4e:a0:3f:2f:51:7f:7e:c6:
                    b8:4c:e1:95:f1:b8:02:14:e0:11:a8:30:ff:d4:21:
                    06:dd:1d:24:b9:bf:a1:89:06:56:f6:4f:9c:6d:af:
                    07:86:de:0b:e2:a7:4e:6d:a7:6b:58:be:94:92:fa:
                    27:68:2d:47:d4:36:66:87:12:9a:b0:a5:1b:9b:29:
                    b4:ea:be:44:44:28:9e:b0:05:bb:f6:c0:75:e1:c4:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:25:52:89:53:9D:4D:DD:E4:C4:D3:00:55:F6:10:50:7B:97:A6:AB
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:43:aa:31:28:e7:29:15:1c:94:6d:f5:f3:12:08:54:79:34:
         b1:a1:72:9d:a6:dc:72:c6:2e:b0:60:9b:eb:b7:d3:e0:2d:a1:
         0e:be:3e:1f:a2:9d:78:46:3f:83:e6:c4:e7:e0:12:3c:7b:06:
         2b:42:9f:a8:32:a3:5a:00:d4:2d:fb:81:76:ce:09:57:a5:00:
         56:fc:85:87:ea:36:17:dd:74:68:8f:16:ce:1e:57:50:e1:43:
         02:9e:36:83:c8:6c:00:42:26:4d:5b:d7:e5:1c:8f:0d:a7:39:
         3b:f7:1d:f5:4e:bc:10:e7:17:d3:a6:4e:e1:da:78:63:f2:ee:
         52:92:28:c2:00:c1:f0:56:41:f0:cc:1e:ae:55:1c:f7:54:45:
         a9:c3:77:90:c4:23:17:73:58:ae:7f:b4:f9:b7:39:b9:47:dd:
         c6:d3:1a:9e:1e:34:34:df:35:ef:5e:bb:17:a4:d8:01:25:18:
         12:e4:d6:16:68:3a:c9:b1:f4:30:48:f7:32:a3:e7:bf:3d:aa:
         c2:28:4d:2e:71:f2:e4:db:dc:ea:e0:a6:b6:01:2d:8a:ff:90:
         c2:89:df:3b:28:5c:ae:c8:a7:cb:5a:85:50:ae:27:ae:81:1b:
         ee:9e:a8:c7:38:d6:78:3f:47:d6:09:62:3d:ef:47:f5:6e:83:
         35:2b:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:40 2025 by rpki-client