Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File:                     VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier:          TSdktRNhKlMwafDcYmibUgorMWDOj/+ko8Ite5nxZ5c=
Subject key identifier:   CE:6E:CF:CF:3B:CA:A9:F2:0D:27:55:8A:A6:EF:2B:8E:F4:22:5C:3B
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer:       /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial:       01987486A522D4C895F7FB86B3CBD7D28521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number:          0A
Signing time:             Mon 04 Aug 2025 10:00:37 +0000
Manifest this update:     Mon 04 Aug 2025 10:00:37 +0000
Manifest next update:     Tue 05 Aug 2025 10:00:37 +0000
Files and hashes:         1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=)
                          2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: ZROxkm1PsatMqj2IeXvaEry2KdW+3gi2/YkY899SnNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:86:a5:22:d4:c8:95:f7:fb:86:b3:cb:d7:d2:85:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
        Validity
            Not Before: Aug  4 10:00:37 2025 GMT
            Not After : Aug  5 10:00:37 2025 GMT
        Subject: CN=ce6ecfcf3bcaa9f20d27558aa6ef2b8ef4225c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:f8:bb:35:e7:fd:24:fa:cf:13:fa:6d:2f:
                    c8:b8:83:58:28:d9:70:94:ae:64:e3:7b:3c:ab:15:
                    78:5f:fc:3d:0c:2c:18:7c:db:ae:84:2c:be:f0:da:
                    c7:d5:6c:d7:5d:9a:04:ae:de:34:f5:ae:2a:43:b8:
                    c2:6a:d1:20:9e:63:cc:cb:76:d5:a1:5a:d7:26:26:
                    06:ce:24:8d:5e:9c:5d:b8:6d:dd:80:96:08:99:fa:
                    67:38:70:39:4a:a1:36:e9:a9:1e:92:3c:f2:81:3f:
                    60:23:1f:9b:08:8e:5f:6f:d0:00:03:40:f9:75:e9:
                    b7:9e:b8:d9:23:f0:f6:b0:01:38:7c:65:79:ff:da:
                    3f:38:b9:f2:c3:cc:a4:7f:ba:6d:5d:40:77:3c:8f:
                    7e:93:fd:1b:86:22:87:52:c6:68:80:4d:94:b8:25:
                    eb:19:bb:37:85:55:3c:7b:13:2c:4b:f7:b4:03:c9:
                    ff:8e:f6:de:09:0d:7d:18:4f:ee:b2:84:3a:47:f7:
                    9d:9f:78:6d:a0:39:f1:5d:f0:21:aa:92:a1:51:21:
                    6d:cf:48:64:cd:bc:84:e3:6f:b5:be:e0:6e:1e:5b:
                    fb:3f:69:23:48:10:7b:3c:c9:2b:08:9d:a1:7a:a2:
                    e1:f8:61:40:0f:b6:ec:5a:02:54:7c:b6:3c:31:e4:
                    97:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6E:CF:CF:3B:CA:A9:F2:0D:27:55:8A:A6:EF:2B:8E:F4:22:5C:3B
            X509v3 Authority Key Identifier:
                keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:0d:d6:67:75:6f:8d:14:7e:db:e1:f6:1b:08:6a:2b:50:
         c5:59:5b:54:8d:dd:64:63:ff:e4:3d:9a:ab:d8:6c:9f:72:d9:
         8d:82:95:45:fc:11:7f:8b:a9:9f:18:10:61:af:4b:bb:62:07:
         b8:4e:60:46:e0:1e:ac:32:9c:2a:e1:54:a1:f5:6c:ac:dd:bc:
         68:b9:0c:c2:2d:5f:1a:4b:18:12:7c:dd:7a:7e:e4:c7:48:cb:
         49:2c:e2:a1:30:49:52:d4:ac:d0:99:f1:75:d9:d7:a6:87:b6:
         99:57:66:65:ea:cf:84:46:80:f2:75:7e:b5:0a:b8:86:da:83:
         df:9c:39:f3:d1:bf:5e:f9:f7:95:98:60:f0:05:22:bc:de:30:
         7f:ad:38:6c:29:db:fa:f8:f4:58:4f:5f:10:64:51:9f:fe:f7:
         a4:cc:0e:91:3f:ae:ff:e6:61:1c:cf:7e:29:fc:1d:3d:b5:c3:
         f9:3a:02:51:de:c0:92:bc:cf:5c:47:b1:b9:77:86:99:ec:67:
         3b:3b:41:e9:fd:65:52:99:e0:0e:6f:84:2e:03:f3:63:c0:df:
         38:67:45:7b:17:5a:0b:ac:01:16:f6:a2:ad:21:6c:13:26:a5:
         ef:ee:7f:17:02:5c:0c:1b:82:17:fe:71:50:4b:b2:ba:54:e1:
         2e:5d:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:26 2025 by rpki-client