Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
File:                     _-vVS_BapQ7OnFJtDNVd5ivbEfs.mft (raw, json)
Hash identifier:          OXMFEHu9/wyWO6JGTP0EqpNNgP09+NdjDIhX6aNhodM=
Subject key identifier:   B0:1D:B7:4F:C6:0F:02:10:51:02:08:0F:DF:F6:BE:6C:86:76:C4:B3
Authority key identifier: FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB
Certificate issuer:       /CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
Certificate serial:       019873E336E7FB09BF06FD474EEC2B6A05F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:02:07 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:07 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:07 +0000
Files and hashes:         1: JL56luCvuDGX5I8C7rCb_vRgTps.roa (hash: VNaKz+fumiDvVVA3InCplAYx5jTevb5UEEZ//o1jyAo=)
                          2: _-vVS_BapQ7OnFJtDNVd5ivbEfs.crl (hash: 0LCEzIzHD81ythYLKUDBbFFZ2efBvU/QjzCo10Kyhas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:36:e7:fb:09:bf:06:fd:47:4e:ec:2b:6a:05:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffebd54bf05aa50ece9c526d0cd55de62bdb11fb
        Validity
            Not Before: Aug  4 07:02:07 2025 GMT
            Not After : Aug  5 07:02:07 2025 GMT
        Subject: CN=b01db74fc60f02105102080fdff6be6c8676c4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:12:45:94:77:57:d4:99:86:b6:a3:a1:9e:
                    c0:24:1c:73:23:94:63:6e:d4:43:12:ff:85:2c:45:
                    78:57:b4:84:e2:38:6f:4f:2a:35:cf:37:98:05:c2:
                    67:73:7a:7f:71:aa:d0:ea:da:0d:b6:d9:21:1f:67:
                    5c:0d:d5:db:c1:ce:65:81:4b:39:1d:dc:52:e0:50:
                    b0:30:a7:49:d1:cf:b0:8d:c9:7e:8e:0a:53:59:47:
                    4a:60:75:69:5a:01:7f:b1:56:fd:19:41:c9:07:06:
                    77:9a:32:10:39:71:8b:6d:bd:93:31:d8:c5:9a:f8:
                    72:99:96:eb:8c:b2:3e:54:e1:20:b6:3c:84:5d:13:
                    52:26:29:26:22:4c:83:73:29:9b:b7:37:31:8a:a0:
                    ae:5c:cf:ff:c4:ae:39:ee:5b:84:29:48:bd:09:df:
                    92:f9:af:9e:a3:00:3a:58:ef:a2:87:7e:c8:fa:95:
                    eb:46:00:b6:49:81:48:52:ab:8e:68:47:90:e6:40:
                    06:6e:a2:b9:8d:b2:90:5f:3c:d1:87:31:c2:de:43:
                    db:50:23:1a:3e:5d:3a:57:08:cb:95:d1:f8:b0:dc:
                    2c:df:e3:55:bd:10:ca:e8:d9:25:08:55:65:b7:9e:
                    92:c0:32:0c:64:94:b5:54:2b:e1:51:0e:ca:e0:d8:
                    7f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1D:B7:4F:C6:0F:02:10:51:02:08:0F:DF:F6:BE:6C:86:76:C4:B3
            X509v3 Authority Key Identifier:
                keyid:FF:EB:D5:4B:F0:5A:A5:0E:CE:9C:52:6D:0C:D5:5D:E6:2B:DB:11:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-vVS_BapQ7OnFJtDNVd5ivbEfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/91592e-aebe-42b6-8082-6fd67a92f18f/1/_-vVS_BapQ7OnFJtDNVd5ivbEfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9a:ce:12:75:d2:d6:62:5b:04:f6:d2:86:3e:f6:76:80:39:
         e2:10:02:98:a0:e2:b9:1d:ec:38:3d:ea:68:7d:09:c7:a0:8c:
         bf:b5:ae:ed:f5:09:73:a0:ac:33:6c:09:5d:e4:63:e6:48:36:
         25:97:c4:a3:2a:0c:22:d7:e6:c5:10:4b:b0:9c:22:29:6e:0e:
         e2:89:40:04:a6:6b:26:43:92:d9:08:c2:3a:52:05:7a:c7:8e:
         47:8f:13:10:e3:ee:b0:c1:9d:d3:c9:f6:62:19:c2:ef:83:61:
         8c:9e:27:89:5e:df:f7:28:77:90:ff:cf:b5:9c:ef:2b:2e:3c:
         69:37:a9:fd:e4:88:61:ed:e5:3f:f1:1c:02:b2:22:61:95:00:
         ff:eb:2a:ab:9a:28:5a:54:06:ef:38:af:3e:af:96:77:6c:67:
         a5:8b:83:35:0d:20:a0:d1:e1:de:cc:e8:8f:c7:9f:5c:9e:2b:
         96:c8:92:0c:06:97:c7:da:38:fa:3b:23:2b:8a:1e:a5:fc:dd:
         38:44:70:59:39:8d:fe:18:b8:7c:2c:ac:72:54:dd:46:24:53:
         b3:45:d7:3e:38:41:f7:53:8b:7c:c0:73:c7:21:3c:30:e6:c0:
         c2:61:d8:69:0e:ed:f4:57:a7:0d:86:9b:34:c7:97:f6:59:3f:
         0b:46:e9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4zbn+wm/Bv1HTuwragX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZWJkNTRiZjA1YWE1MGVjZTljNTI2ZDBjZDU1ZGU2MmJk
YjExZmIwHhcNMjUwODA0MDcwMjA3WhcNMjUwODA1MDcwMjA3WjAzMTEwLwYDVQQD
EyhiMDFkYjc0ZmM2MGYwMjEwNTEwMjA4MGZkZmY2YmU2Yzg2NzZjNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT4SRZR3V9SZhrajoZ7AJBxzI5Rj
btRDEv+FLEV4V7SE4jhvTyo1zzeYBcJnc3p/carQ6toNttkhH2dcDdXbwc5lgUs5
HdxS4FCwMKdJ0c+wjcl+jgpTWUdKYHVpWgF/sVb9GUHJBwZ3mjIQOXGLbb2TMdjF
mvhymZbrjLI+VOEgtjyEXRNSJikmIkyDcymbtzcxiqCuXM//xK457luEKUi9Cd+S
+a+eowA6WO+ih37I+pXrRgC2SYFIUquOaEeQ5kAGbqK5jbKQXzzRhzHC3kPbUCMa
Pl06VwjLldH4sNws3+NVvRDK6NklCFVlt56SwDIMZJS1VCvhUQ7K4Nh/NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAdt0/GDwIQUQIID9/2vmyGdsSzMB8GA1UdIwQY
MBaAFP/r1UvwWqUOzpxSbQzVXeYr2xH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODIt
NmZkNjdhOTJmMThmLzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC85MTU5MmUtYWViZS00MmI2LTgwODItNmZkNjdhOTJmMThm
LzEvXy12VlNfQmFwUTdPbkZKdEROVmQ1aXZiRWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuprOEnXS
1mJbBPbShj72doA54hACmKDiuR3sOD3qaH0Jx6CMv7Wu7fUJc6CsM2wJXeRj5kg2
JZfEoyoMItfmxRBLsJwiKW4O4olABKZrJkOS2QjCOlIFeseOR48TEOPusMGd08n2
YhnC74NhjJ4niV7f9yh3kP/PtZzvKy48aTep/eSIYe3lP/EcArIiYZUA/+sqq5oo
WlQG7zivPq+Wd2xnpYuDNQ0goNHh3szoj8efXJ4rlsiSDAaXx9o4+jsjK4oepfzd
OERwWTmN/hi4fCysclTdRiRTs0XXPjhB91OLfMBzxyE8MObAwmHYaQ7t9FenDYab
NMeX9lk/C0bpnw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:58 2025 by rpki-client