Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
File:                     Vw0bOThaPe0e8GPRob6TWTtx_C4.mft (raw, json)
Hash identifier:          KEUiO1gFOlUArz6vHjVm4rurFoMA1P7ywCD6vuhniXM=
Subject key identifier:   EF:B1:7F:53:D7:99:BD:B9:5A:6A:8D:83:A0:84:BB:79:C9:BE:F6:49
Authority key identifier: 57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
Certificate issuer:       /CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Certificate serial:       01984967081AD923E030D9263500AF6DE0EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 01:02:25 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:25 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:25 +0000
Files and hashes:         1: Vw0bOThaPe0e8GPRob6TWTtx_C4.crl (hash: 9FozK7z3slGJzI4hwcAAMPt+XVthd8gQrg+fYu6Rhos=)
                          2: z0sOswKWl1BfFqaGXhPtCyAmPYc.roa (hash: Co3I3DKAzKoyofP77im0ZyVkq8yZfseQvsLlvfdI85s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:67:08:1a:d9:23:e0:30:d9:26:35:00:af:6d:e0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
        Validity
            Not Before: Jul 27 01:02:25 2025 GMT
            Not After : Jul 28 01:02:25 2025 GMT
        Subject: CN=efb17f53d799bdb95a6a8d83a084bb79c9bef649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a1:29:39:a3:0d:91:ae:01:fb:96:78:37:b4:
                    a4:fe:09:c8:14:ef:39:ca:c6:f4:ed:6e:79:b2:ad:
                    ed:86:20:13:57:c6:ac:0e:fc:8d:3b:43:21:80:c9:
                    a1:3b:65:0b:e7:b9:5c:56:43:28:05:b9:0c:ed:86:
                    43:cf:8e:a0:9b:9d:bd:46:73:ea:51:1d:a1:c3:85:
                    f6:96:6a:97:9d:58:ca:de:5d:bd:bf:c9:7b:6f:25:
                    09:49:8d:90:4b:34:70:2b:3d:a9:be:54:87:89:9c:
                    d9:18:38:4f:e3:c7:37:df:67:f9:4d:58:e8:e9:13:
                    24:23:1d:15:b8:66:ff:76:39:82:cf:d4:6e:a0:0d:
                    ff:2a:da:3f:70:50:5f:9a:c2:7f:f4:a0:27:ff:ea:
                    5c:c3:5f:f2:b9:60:4f:c2:9b:31:fd:72:20:6c:0d:
                    15:c3:bc:18:32:05:9a:2f:11:54:1b:28:b2:45:40:
                    e8:12:1f:bb:33:a4:75:d1:9c:7c:f1:6c:f0:0a:85:
                    7d:1f:35:7d:c2:88:91:bb:4f:23:62:d3:11:9f:9a:
                    64:fc:07:58:09:a0:47:fc:25:aa:45:53:2d:7e:04:
                    b0:cc:c1:0b:80:6b:6d:fe:b9:37:b6:d1:cd:b6:8c:
                    e5:62:ad:60:7b:3f:ac:f0:46:3c:37:72:66:83:fe:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B1:7F:53:D7:99:BD:B9:5A:6A:8D:83:A0:84:BB:79:C9:BE:F6:49
            X509v3 Authority Key Identifier:
                keyid:57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:45:76:10:72:6d:50:52:fa:be:3c:00:6d:2c:bc:ec:da:dd:
         77:0e:c0:f2:3f:cc:3f:24:96:35:19:ed:87:c2:44:7a:44:28:
         0c:82:d3:06:9c:5c:cf:c9:13:d1:a9:40:99:7c:e8:fe:b5:83:
         60:8b:df:30:83:0e:5a:de:c0:17:c9:21:50:76:e1:32:91:8a:
         6d:9b:b7:19:3f:44:65:7a:a4:63:bb:26:57:72:e2:ec:24:15:
         76:18:4d:ed:cb:7f:a3:df:13:9c:16:e6:52:58:98:51:ef:d4:
         19:f5:82:83:3a:80:44:74:55:77:c2:24:b3:53:0e:85:db:a2:
         92:e6:19:e3:9d:28:26:b7:26:55:6a:a8:94:b1:dd:02:ec:fb:
         61:6a:ad:fe:2f:52:5f:f0:6f:ca:ce:3d:f1:27:9b:26:5d:fc:
         92:dc:03:8a:16:5b:30:40:04:8c:ba:66:9c:6a:71:91:7b:11:
         c3:6c:54:b2:69:c2:95:97:cf:3c:81:1c:d9:24:07:09:ff:76:
         66:f1:9a:2d:00:d2:4c:20:80:58:93:da:d6:54:1a:1c:7b:e6:
         f1:aa:3f:53:4e:10:2a:77:8b:f0:31:8e:1d:bc:26:af:9b:c4:
         a2:f4:82:31:a7:88:77:42:83:d1:a4:c0:bf:7e:a1:91:2a:3b:
         30:fa:a6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:09 2025 by rpki-client