Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File:                     VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier:          gvez7+MaafDH6vR513av9nqPQuIOzA9qMtl+h4txN68=
Subject key identifier:   1B:6A:F9:C6:4A:AE:78:38:64:F4:B5:0F:BE:AC:54:09:B6:38:14:E0
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer:       /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial:       019889C4D090FA380543B092494B40EE3F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number:          1387
Signing time:             Fri 08 Aug 2025 13:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 13:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 13:00:33 +0000
Files and hashes:         1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: Fg2kxpeB8wnRuEKhnNs0LqsmypZQST+cyvwVejOcU4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:c4:d0:90:fa:38:05:43:b0:92:49:4b:40:ee:3f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
        Validity
            Not Before: Aug  8 13:00:33 2025 GMT
            Not After : Aug  9 13:00:33 2025 GMT
        Subject: CN=1b6af9c64aae783864f4b50fbeac5409b63814e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:f6:38:fd:15:b3:ec:b8:4c:6c:07:70:bb:
                    2e:50:63:46:6b:a4:64:4a:be:1b:37:6a:f2:09:dc:
                    e5:7c:ca:25:b9:7e:55:1e:3c:d5:7a:aa:5f:9a:e6:
                    07:be:a4:83:03:c5:89:6e:a5:a8:74:b3:e1:e0:3b:
                    35:59:64:6e:21:0c:56:7f:d6:49:69:0b:73:3a:5c:
                    7a:c1:8b:22:2f:9d:60:05:10:31:1e:53:22:a2:a7:
                    07:cc:8f:44:ee:0e:45:02:ea:28:a2:e7:59:9f:67:
                    36:de:90:21:70:3f:cb:7f:5b:3f:bc:ab:e7:e6:73:
                    d5:d2:96:cb:32:49:aa:e9:15:a5:2e:43:41:5d:71:
                    a5:0e:e2:34:dd:36:d3:14:63:6a:e1:0b:5a:98:ce:
                    c2:9c:4b:28:b4:72:2d:ce:b3:d9:c2:05:24:53:8d:
                    ae:7d:c4:8a:de:24:87:ef:3c:d6:f4:06:dc:b1:4d:
                    40:27:e8:25:26:57:47:7f:b2:28:78:6a:19:dd:98:
                    9e:a1:38:3f:c3:98:f8:f7:c0:f8:2a:44:03:38:fb:
                    9c:02:b4:ad:12:d1:3a:6b:5f:96:a6:92:5f:e2:2a:
                    3e:68:4c:e6:21:d6:62:32:4b:16:d7:cc:14:a5:b5:
                    a5:4e:75:99:4b:f3:50:68:b7:a4:e7:c5:c3:de:4a:
                    45:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:F9:C6:4A:AE:78:38:64:F4:B5:0F:BE:AC:54:09:B6:38:14:E0
            X509v3 Authority Key Identifier:
                keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:e4:90:e4:d2:f2:e9:20:ab:01:b6:6d:a6:09:4c:51:3e:52:
         c4:88:22:7e:bd:4d:d3:d8:85:da:1d:18:6e:f4:83:b9:d1:42:
         b4:2a:82:2c:6d:24:d6:e4:ad:49:cb:93:b3:60:b7:c9:b4:4f:
         0b:3a:ff:74:b7:2b:cf:af:73:bf:92:ff:d7:7c:b2:f7:2a:21:
         3a:ea:b1:b3:cd:62:4d:f2:9c:6f:51:5a:03:81:a3:b9:b0:24:
         81:fb:84:6b:fe:d1:41:bf:38:54:e6:bd:d3:d0:2e:7f:38:76:
         32:85:06:e8:92:2c:92:85:05:c8:cd:b3:e9:4d:58:af:66:6e:
         66:41:31:1d:d7:9f:b8:6a:2e:e8:25:ee:20:0d:bb:9b:a0:02:
         07:9d:22:b5:5a:35:4a:b8:1b:11:fb:c7:18:cd:03:73:8d:94:
         d8:f2:57:42:91:9e:7e:19:60:83:3a:66:d7:0b:bd:e9:07:2e:
         6c:ba:4a:a5:ce:12:70:54:b1:74:e1:ce:51:55:84:e0:4d:89:
         d7:e9:4d:25:ff:38:de:df:d7:5a:b0:df:25:60:77:05:cc:85:
         06:6b:b6:ba:da:d3:c2:6a:c1:f3:fa:9a:9b:20:62:ce:e5:99:
         44:37:f5:ad:e1:60:45:d0:09:aa:a9:63:91:2c:61:aa:15:d6:
         8d:ae:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:36 2025 by rpki-client