Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
File:                     vE8eawEfTWMxoSeVWlSPpQUlgKU.mft (raw, json)
Hash identifier:          FTr43tL3LZ7gIP1wWA7ksF1Ot+OK82WfUPNEBgAwRSM=
Subject key identifier:   4C:EA:15:90:0F:04:A3:DF:19:BD:9A:70:F1:69:46:EE:91:DD:F7:B2
Authority key identifier: BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5
Certificate issuer:       /CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
Certificate serial:       019836C1D04AF4C21B825FC656D563AB8002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
Manifest number:          15FB
Signing time:             Wed 23 Jul 2025 10:08:48 +0000
Manifest this update:     Wed 23 Jul 2025 10:08:48 +0000
Manifest next update:     Thu 24 Jul 2025 10:08:48 +0000
Files and hashes:         1: BNqfmpLmjYM_hMvzjjiD1hvhjAw.roa (hash: i4CNGeJ+mFFlH8LiDeZQtBRRw7N8oDxdjkoS0v+qObY=)
                          2: aSjaEPJVPJX67mv2fHsiGHa_Pjs.roa (hash: ZEy+TRl03r70LlIyNTMVcl1yqBTFe/vMwXgXOHeWwSU=)
                          3: boEHtK6TX4b8tA4ZE52KAM2BJmo.roa (hash: +7NNF3zI76oRfEmOt6I7AY03Pn8U8YF2KqGhoMWLwNw=)
                          4: uV1M3fky2AaC8kOeiqG8vtH6340.roa (hash: 1utJq4cOepQgwTmFBjPYmXLoibI08Xbs4pkw4aA8F7w=)
                          5: vE8eawEfTWMxoSeVWlSPpQUlgKU.crl (hash: vKTTu3PDVroveuqs7dlVplyyPk0ZwokAAE4h7vtgRWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 10:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:c1:d0:4a:f4:c2:1b:82:5f:c6:56:d5:63:ab:80:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4f1e6b011f4d6331a127955a548fa5052580a5
        Validity
            Not Before: Jul 23 10:08:48 2025 GMT
            Not After : Jul 24 10:08:48 2025 GMT
        Subject: CN=4cea15900f04a3df19bd9a70f16946ee91ddf7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:04:98:5c:72:a8:cc:a5:ae:ca:bc:0c:60:
                    b9:df:9d:59:41:f1:b5:81:97:1d:49:e6:d2:3d:a9:
                    33:58:12:05:d2:28:27:37:c3:b1:ff:82:0a:5e:39:
                    2e:26:91:c8:5b:e5:2c:76:a9:b7:d6:c2:d4:5b:a5:
                    0e:a5:11:d5:a3:ad:9c:12:88:c9:01:4e:39:0b:57:
                    76:83:56:80:fa:7f:bb:25:4e:41:6b:0b:34:e7:fa:
                    d3:b9:ba:d3:0d:b4:bd:9a:59:ed:37:dc:e2:1c:4c:
                    1d:2a:3a:fd:12:bd:03:4f:50:4b:f4:d3:66:57:07:
                    75:fa:c6:fe:11:8f:74:22:0d:63:3e:2f:fd:78:46:
                    aa:aa:63:b3:7a:6c:57:0a:c3:bb:0a:49:7f:99:25:
                    d8:dd:08:d1:73:3b:f7:c8:28:5f:a3:17:de:e6:35:
                    60:e7:fb:23:8a:b1:96:65:63:f7:9d:d6:98:bd:22:
                    cd:34:f4:82:08:f5:97:5e:3a:b8:77:35:77:65:63:
                    22:6a:6d:6b:7c:b4:e9:33:78:3d:12:e0:31:1a:da:
                    19:ee:d9:b3:5b:d1:8e:94:e8:a9:a4:71:54:0b:ca:
                    42:84:f5:e3:63:7e:c7:91:6a:55:bd:31:8d:ee:d0:
                    19:39:a0:5a:a9:7b:67:23:18:e4:72:19:3c:95:57:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:15:90:0F:04:A3:DF:19:BD:9A:70:F1:69:46:EE:91:DD:F7:B2
            X509v3 Authority Key Identifier:
                keyid:BC:4F:1E:6B:01:1F:4D:63:31:A1:27:95:5A:54:8F:A5:05:25:80:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE8eawEfTWMxoSeVWlSPpQUlgKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/66a237-9bc5-4abd-9b8b-c55476759d0c/1/vE8eawEfTWMxoSeVWlSPpQUlgKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:a9:d7:95:e5:f6:c2:e4:49:d9:4e:d5:da:50:e3:f3:9f:
         89:65:c1:96:c9:1a:7d:b3:49:f1:9c:8c:e3:54:82:35:75:df:
         aa:34:24:83:3f:ff:61:6f:cc:64:6d:15:92:19:77:49:f8:32:
         b0:62:32:e9:e3:f5:54:ef:3d:3e:a6:d6:ab:34:6f:50:06:e2:
         29:45:b1:5e:01:f2:fc:dd:d5:6d:ed:b9:6e:04:a9:df:a8:39:
         9b:e4:49:2c:ef:fd:61:ef:2e:be:81:21:18:cd:5d:d1:e3:17:
         d3:fb:f0:2d:79:89:99:b2:cf:35:d0:f3:f0:6b:46:b7:93:81:
         43:bc:b4:f7:a8:28:5f:47:11:8d:f6:fd:27:12:b9:91:d2:8a:
         1b:c1:68:c9:ee:70:5a:fa:bf:e1:a9:3f:96:c9:fe:c5:10:1b:
         1e:97:f5:98:fb:ba:62:2c:87:89:ea:23:2f:b4:ec:ef:c0:68:
         9f:1f:76:b9:9f:12:cc:16:2b:84:83:2d:21:db:81:3f:b2:c7:
         55:bf:f6:e8:20:97:c1:2a:f6:89:0c:64:09:54:a0:a7:40:09:
         a3:90:cd:ca:3d:3e:06:40:c4:75:01:16:b3:b6:10:ad:25:2b:
         ab:ef:b3:16:3a:ac:ab:ff:87:be:49:e4:37:67:d4:9a:be:00:
         a3:cf:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:35 2025 by rpki-client