Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
File:                     V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft (raw, json)
Hash identifier:          1R3P2MIU/8qs3apjHezuaGqIpKXNz++0oDDxLU+zf4Q=
Subject key identifier:   3C:82:EA:F1:E2:93:F9:C6:28:A7:60:AF:66:CC:C8:87:8A:DF:A7:15
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Certificate issuer:       /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial:       019A4DE1DF2E6BB0F395776EE3F8DC9CD8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
Manifest number:          1715
Signing time:             Tue 04 Nov 2025 08:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:39 +0000
Files and hashes:         1: 0HQu8Zx0bqoT8VblZx7T-KABTMs.roa (hash: PMmgS2CzSt2RGIZOxQkouUiRA5CO+OAI06wmRBvm14c=)
                          2: HAFTWYZhRl2JhSvJ17kRi_EORRw.roa (hash: 19em40Igf72cORttMpVzO/f9hKOd+3zplkZkJTc0zOw=)
                          3: V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl (hash: MlVMOgQ6Xlx07GkW5YJJDVzCq4T43UTxw/gIPp6dZOM=)
                          4: XzHbUO4u5QutpWYtZyqfUUIrRTI.roa (hash: dO0CtFUpXZ4k5F0vBkaTPTnFApdf6AbyjKu5COO/Zms=)
                          5: yQx5YUSfcqcgx3IA4ICMejwqPbs.roa (hash: cBatkYbqWez1EI7dU65y7uQSmyGeXkq58ToIkxccLCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:df:2e:6b:b0:f3:95:77:6e:e3:f8:dc:9c:d8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
        Validity
            Not Before: Nov  4 08:00:39 2025 GMT
            Not After : Nov  5 08:00:39 2025 GMT
        Subject: CN=3c82eaf1e293f9c628a760af66ccc8878adfa715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:46:86:d6:a4:dd:0a:34:64:e8:ec:fd:b6:fe:
                    78:25:74:06:c3:1b:e0:83:e8:98:55:37:0e:68:d0:
                    7c:e3:da:5f:bb:49:90:2e:4e:d7:bd:4e:d2:2a:6b:
                    e2:05:9c:93:86:1a:d4:f6:f1:13:88:61:5d:bb:c7:
                    81:51:ca:75:bc:6e:08:a5:f2:db:85:b2:6f:d8:a7:
                    a5:5f:c1:d6:62:72:e5:d4:1d:00:45:ad:b2:68:5c:
                    76:cc:6a:a7:86:32:e7:8f:63:7d:82:cb:58:0d:ec:
                    d7:bd:6f:83:b0:ab:7a:a2:a1:0e:a9:ab:80:4f:49:
                    5d:c0:c9:82:72:6a:ad:6c:d0:73:1d:67:18:01:33:
                    41:b9:f4:2f:5d:26:ff:33:0e:57:4d:86:0e:4e:7b:
                    33:d8:94:c5:d9:05:ca:3e:60:ae:a1:6d:84:51:82:
                    fc:40:0c:43:df:57:1a:93:05:a3:3d:8d:d4:1c:e8:
                    91:f5:b3:2b:60:1f:03:4b:ee:a5:0c:e5:82:6a:5a:
                    2c:cf:ff:aa:09:1a:ac:19:e3:9d:43:01:2a:81:a9:
                    0e:20:0f:be:66:05:88:83:fe:3d:a1:1f:dd:8c:a4:
                    8e:65:e7:8b:74:67:14:ba:ac:7b:7c:a7:95:d3:48:
                    d1:eb:ed:6e:0b:08:d1:c0:9f:9e:46:bc:98:f4:51:
                    61:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:EA:F1:E2:93:F9:C6:28:A7:60:AF:66:CC:C8:87:8A:DF:A7:15
            X509v3 Authority Key Identifier:
                keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:22:ea:fb:4d:77:a9:bb:91:07:e9:03:db:68:f9:ca:54:a8:
         cd:ec:c6:b8:93:be:e7:76:b7:80:13:26:13:62:30:65:f6:f1:
         07:14:06:a7:a0:8c:53:d0:03:b9:48:a9:1b:5c:4f:06:d1:43:
         c1:f0:90:3b:99:5a:86:e6:56:bd:54:1e:9e:00:b0:cc:a7:c7:
         0f:b0:ed:84:75:67:37:cc:bb:1d:74:75:c9:83:17:1c:3c:f4:
         24:ce:b4:a6:97:ae:b0:3b:b5:f1:68:26:22:3d:7c:87:02:c2:
         be:b2:85:94:07:c5:9b:2c:47:da:4d:b6:a9:cc:e4:df:7e:48:
         96:e1:d7:70:55:40:46:16:73:23:ef:6f:28:ac:72:4d:62:28:
         0f:ac:ed:23:06:85:97:79:49:b9:9b:49:db:d8:ba:b7:80:78:
         49:b9:c8:37:e5:cf:7c:29:85:08:0c:60:8f:1b:16:b4:e2:fe:
         9c:f7:b6:b8:7f:55:e9:27:cb:d9:64:5c:ce:74:07:f0:70:86:
         a6:89:21:39:8e:2b:3b:ce:17:da:a7:a1:c5:0a:fc:43:b1:48:
         8e:cb:8e:5c:96:22:57:fe:a3:29:b0:27:df:02:27:7e:f7:aa:
         c4:87:87:37:97:95:8c:77:54:dd:0c:b4:52:d0:a5:11:63:a4:
         3c:f4:cb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:22:26 2025 by rpki-client