Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
File:                     VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft (raw, json)
Hash identifier:          rWCkfZlYFDkEw+wM7qRvZS0Vn85NW5k6C+3tlEaTJlM=
Subject key identifier:   F0:D0:A6:B1:04:C3:AA:CB:7D:93:36:7E:78:A0:56:A9:AC:B5:BC:D5
Authority key identifier: 55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB
Certificate issuer:       /CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
Certificate serial:       0198820BF7EE7574F16CF35BEBF5ADDD061F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
Manifest number:          03DD
Signing time:             Thu 07 Aug 2025 01:01:18 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:18 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:18 +0000
Files and hashes:         1: LAyDLVrlWC7GYrIpkUltJFolhC0.roa (hash: 5fqulNX0pe/944CBeE9O8m/kZ++wdZNRG9xqatGIqks=)
                          2: VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl (hash: ZldjfEhbcQdbW/XEdvObPpG40fz9R6St2Adt0ADpA4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:f7:ee:75:74:f1:6c:f3:5b:eb:f5:ad:dd:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557d2144dd1b714e9e3ca0901fe67504bf457eeb
        Validity
            Not Before: Aug  7 01:01:18 2025 GMT
            Not After : Aug  8 01:01:18 2025 GMT
        Subject: CN=f0d0a6b104c3aacb7d93367e78a056a9acb5bcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:8e:7e:1e:15:5a:7f:d8:83:d2:19:24:5f:
                    4a:35:db:5d:01:97:4b:5b:4a:2e:89:21:60:b0:d7:
                    18:55:96:85:89:70:b6:9b:f5:cf:03:da:fe:c3:f1:
                    a6:2a:03:c5:b7:c5:7b:76:c7:3d:fe:7c:db:e7:c4:
                    f0:b2:ee:74:51:dd:69:62:6c:24:3e:17:c1:3f:ae:
                    72:3d:8b:f1:85:8c:1e:cd:f4:74:7b:68:14:f8:d7:
                    47:ef:0c:19:3e:79:db:31:56:40:ac:a3:92:f0:44:
                    bf:17:5f:4d:f9:b1:5f:36:0e:73:08:61:b0:57:eb:
                    0a:94:e8:6c:89:99:f6:16:bf:87:3a:e8:d3:db:64:
                    89:a0:8b:4d:27:4d:30:6a:74:02:9c:c8:f3:50:46:
                    54:e1:36:97:0c:c8:0a:1c:d4:ec:e9:90:1e:8d:04:
                    b3:df:40:a9:81:48:fc:2c:7c:a9:6b:be:a6:ff:43:
                    ee:31:a6:8c:3a:dc:c3:0c:5f:38:66:8a:c2:8f:72:
                    bb:92:bb:28:77:96:e5:e0:1b:21:99:bb:9f:07:a6:
                    6d:f6:67:46:b6:6b:78:2d:48:07:ed:1a:4a:45:27:
                    55:94:6d:e2:17:e0:0c:03:1a:16:3a:f8:41:03:a0:
                    83:17:4d:4a:bb:5a:a4:2d:14:92:55:d0:63:b4:1e:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D0:A6:B1:04:C3:AA:CB:7D:93:36:7E:78:A0:56:A9:AC:B5:BC:D5
            X509v3 Authority Key Identifier:
                keyid:55:7D:21:44:DD:1B:71:4E:9E:3C:A0:90:1F:E6:75:04:BF:45:7E:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1f0831-fc6b-4865-a8a8-edf42d5c481f/1/VX0hRN0bcU6ePKCQH-Z1BL9Ffus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:29:82:a5:e7:bb:02:5b:c7:5d:51:d9:97:0f:bd:d6:5a:bd:
         ec:0d:be:35:95:c6:d4:29:19:81:b8:f9:23:cb:c8:b1:85:21:
         22:cb:7f:9b:5e:98:bf:52:9b:01:97:03:0f:f0:0d:8f:81:37:
         3e:d2:bc:0c:1b:c6:11:58:3c:84:bb:7c:1b:e7:4b:b1:28:6c:
         95:61:52:d4:79:f3:9e:1e:d0:c4:9e:8c:8d:73:ed:79:88:4d:
         3e:cb:09:fa:3a:8e:e9:84:d2:b0:58:55:e3:93:56:e0:35:40:
         55:33:a0:18:c1:f4:21:60:4a:3b:f7:02:da:fb:fe:06:03:97:
         05:f5:94:74:ea:50:36:af:7d:bf:be:a6:15:95:f1:d9:53:d6:
         38:02:6a:e3:aa:15:a6:67:d3:a8:02:53:1d:6b:7b:39:38:a8:
         5a:08:b5:4c:7d:a4:ba:07:ca:07:6b:b4:52:69:dd:be:77:be:
         fe:0e:fd:e7:2d:34:fd:15:a9:33:fe:47:0f:6a:7b:b3:41:db:
         78:1f:75:89:04:79:a6:57:98:39:85:23:1b:a5:6f:85:93:bf:
         3f:91:81:5b:2d:a7:a9:e3:56:55:64:1d:0c:31:63:69:3d:2e:
         ca:3b:33:35:2c:94:4b:79:d4:66:02:c3:35:d9:54:5b:9b:83:
         14:58:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:04 2025 by rpki-client