Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
File:                     V8H-gINkZ0mBatP6ZAmDRfth6fU.mft (raw, json)
Hash identifier:          3QmJjsXhrxq2OwwQ3vhCyQLfqeDoE1hiKho7ngimIxU=
Subject key identifier:   6F:0B:FC:77:D1:7F:37:BB:49:55:90:E1:8A:43:1D:15:83:41:87:53
Authority key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Certificate issuer:       /CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Certificate serial:       0198744FC02822FE3C5684F7ACA5859FEFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 09:00:40 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:40 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:40 +0000
Files and hashes:         1: DtG9QHgbh6DEslt8mTDXVaxdqQ4.roa (hash: FeW6iqctyQqjdDbIjMhTvYTHZA4p9G/jqf5MmgvmOo4=)
                          2: V8H-gINkZ0mBatP6ZAmDRfth6fU.crl (hash: 6lcJbApFRl54t+goBX5lSDmRINUg8bMCvyRbFKvNmrY=)
                          3: VtwjP8CmtTeLWVW9N6o-K_qnKwA.roa (hash: HsIDoGOSVnTIqa9qpiTR9Xg//0nmdy2yaZaBVdQZxQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:c0:28:22:fe:3c:56:84:f7:ac:a5:85:9f:ef:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
        Validity
            Not Before: Aug  4 09:00:40 2025 GMT
            Not After : Aug  5 09:00:40 2025 GMT
        Subject: CN=6f0bfc77d17f37bb495590e18a431d1583418753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:cd:65:e1:84:02:9f:f1:b0:42:58:7f:d8:
                    33:c4:e4:d1:94:57:56:89:e8:de:08:1f:a3:d4:c8:
                    57:33:20:4d:ec:ab:d4:ef:a6:44:ba:f4:a4:35:40:
                    17:ef:3a:33:d7:db:60:3c:73:0b:81:1c:e1:95:80:
                    b5:31:49:db:ae:b4:4d:18:8e:0a:20:40:df:c3:e1:
                    dc:84:1c:d2:fc:c3:3b:92:65:43:11:32:f3:ad:9c:
                    1d:89:03:01:e0:0c:77:5f:aa:b6:cb:b5:57:f5:c4:
                    ef:d3:6c:55:dc:2f:0a:e9:ae:70:b4:4f:9c:3d:f6:
                    25:97:dc:ae:78:79:b4:ce:43:49:a8:7f:2d:40:42:
                    58:7c:42:44:08:9f:00:00:c1:75:4d:23:8c:60:76:
                    1c:99:8b:d2:cd:6a:02:e3:3b:ee:b0:39:58:37:f2:
                    11:f0:f6:0f:d1:d9:2b:b8:67:51:a7:a0:9f:ad:9d:
                    73:77:a8:a7:c5:2f:b3:fd:a8:a8:b0:66:7b:a0:c4:
                    e3:02:f0:ed:82:53:85:4e:6d:74:70:eb:d8:0c:2e:
                    d9:9d:b7:c6:e7:78:95:a0:50:fc:1e:e1:af:2d:ba:
                    d4:e9:ea:55:ac:ae:88:25:9a:e0:7d:f7:d0:9c:9c:
                    dc:e7:f6:6b:0c:15:bb:05:22:ad:86:b4:8e:ff:35:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0B:FC:77:D1:7F:37:BB:49:55:90:E1:8A:43:1D:15:83:41:87:53
            X509v3 Authority Key Identifier:
                keyid:57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:11:7b:39:a2:ef:c8:c1:ad:96:77:55:14:0a:6b:0b:b8:
         54:b9:c5:62:f4:4f:2c:ff:0d:84:1a:22:69:e9:69:ee:f7:d1:
         39:15:ff:3a:c6:18:c0:b7:a5:dc:09:d4:e3:00:f4:ce:82:71:
         33:e3:44:a5:5f:e5:f6:8c:50:6b:f2:dd:27:f0:55:99:af:2d:
         d0:f8:4e:77:d2:4b:e3:83:ab:83:ea:36:29:1b:63:d4:05:21:
         3e:9c:e5:5e:4f:ea:18:7a:15:0a:3f:59:d2:e6:1f:dd:3d:33:
         dd:f4:b3:0d:b3:23:87:03:f6:b1:8f:f4:47:29:d3:13:dc:a5:
         9e:eb:36:6f:dd:71:ef:8f:1c:00:5c:7e:fe:4a:63:29:bf:7c:
         04:b0:8a:b9:9c:93:e5:cf:fd:f8:5b:9b:51:2d:74:8e:dc:e4:
         b2:4a:d8:da:1c:a9:ab:b1:de:94:0d:2d:de:21:16:2f:a9:54:
         d4:ce:ed:49:21:83:14:62:6c:5d:59:70:c7:a8:c0:c8:a6:3a:
         a3:bb:c0:65:61:e3:8b:07:c7:d3:cc:cb:c5:24:fb:9d:ba:df:
         1a:af:cf:86:ef:40:1d:23:ab:d7:d4:53:a8:e9:7a:f7:3f:d8:
         b7:c4:ff:d0:97:89:92:05:89:3c:eb:ad:e7:09:4a:69:3d:0c:
         32:cb:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:06 2025 by rpki-client