Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
File:                     dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json)
Hash identifier:          l8p0DfIeuqXZIoEKbLC8WXMztT1o7/iLcyBRli00y5A=
Subject key identifier:   B9:B1:CA:E6:82:D1:2B:A5:45:82:8D:6A:B8:16:6B:04:A9:9E:A4:6E
Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA
Certificate issuer:       /CN=76fe3055e87290000e3287f7ab5883802a5aa6da
Certificate serial:       0198530D81D22D56A6697127A003B8A55F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
Manifest number:          092D
Signing time:             Mon 28 Jul 2025 22:00:50 +0000
Manifest this update:     Mon 28 Jul 2025 22:00:50 +0000
Manifest next update:     Tue 29 Jul 2025 22:00:50 +0000
Files and hashes:         1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=)
                          2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: FibVwVrDN37ygOgQh0YqSkBOVmbnZhOOUdz945qa11I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0d:81:d2:2d:56:a6:69:71:27:a0:03:b8:a5:5f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da
        Validity
            Not Before: Jul 28 22:00:50 2025 GMT
            Not After : Jul 29 22:00:50 2025 GMT
        Subject: CN=b9b1cae682d12ba545828d6ab8166b04a99ea46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:47:e4:5c:b2:1e:ad:13:b9:5f:1f:e0:4b:a8:
                    5f:ff:15:60:04:13:44:03:ad:2c:4e:3a:66:b9:8b:
                    16:91:26:72:7c:b4:86:72:2b:cc:9a:0a:94:29:a3:
                    4e:77:49:64:b9:03:06:39:42:93:38:9e:96:c5:3b:
                    1b:71:35:d1:46:59:70:11:44:1e:ab:77:15:da:81:
                    65:ad:8a:6e:59:b8:09:4b:1f:67:a6:1f:0c:13:5a:
                    ff:97:93:69:81:86:a7:c2:85:5c:b0:48:10:db:96:
                    0a:05:1f:2a:72:06:89:da:e5:f1:9d:69:a9:25:f7:
                    af:f9:be:db:8d:dd:15:3b:26:31:da:85:ff:4d:42:
                    00:98:c1:38:d3:a6:4d:7c:46:67:1b:01:5e:af:23:
                    69:c0:b1:84:55:10:e9:af:5f:37:65:c4:b6:24:eb:
                    b3:b2:4e:d4:0f:6e:86:11:ec:50:40:1e:00:c7:4e:
                    4a:7d:9f:eb:64:5d:31:e7:e4:46:f1:84:9b:ae:6e:
                    0c:88:03:97:5b:32:79:7d:25:36:4d:d5:90:40:ef:
                    90:f0:a7:ca:e6:61:63:db:77:d5:e3:3b:7b:e5:21:
                    d1:ac:19:67:bc:6d:fb:d9:c5:83:86:1f:09:58:64:
                    79:f4:93:e8:1a:98:57:fa:96:91:e1:7a:61:68:02:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B1:CA:E6:82:D1:2B:A5:45:82:8D:6A:B8:16:6B:04:A9:9E:A4:6E
            X509v3 Authority Key Identifier:
                keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:a7:07:87:57:ef:1f:cc:a2:2e:e1:2e:2c:a1:aa:f6:a0:
         01:2b:de:25:6f:14:e6:70:bc:d5:90:15:d1:56:91:e1:67:7e:
         e2:94:f1:98:0e:30:17:e5:12:37:e0:0c:17:c2:7e:46:59:f7:
         b3:47:e9:4f:b9:b0:43:af:be:ef:58:af:dd:8c:a5:42:d0:3d:
         5c:b1:78:c1:31:4a:fc:74:d9:81:85:42:78:59:2d:9f:6b:43:
         b3:bb:fa:17:ab:d0:57:59:2c:46:42:6b:3d:83:24:15:eb:85:
         eb:8b:bc:87:7d:d5:a5:08:88:a0:c6:3a:42:09:5b:c6:2a:90:
         db:1e:46:c8:64:16:ec:fa:a0:a6:b9:44:47:cc:1c:60:62:28:
         0a:0d:37:72:82:6b:58:30:af:d0:92:8c:6c:04:50:d2:fd:7a:
         f2:48:51:99:70:b7:d1:09:18:03:03:4c:7e:32:bf:a0:0b:df:
         97:16:62:a3:f6:8d:c0:5b:85:9b:3a:47:68:63:1d:d9:1e:b2:
         07:5b:25:0d:ce:f9:95:f9:d8:b5:ef:81:4e:a6:b6:76:38:c4:
         30:cc:51:66:ce:47:31:6e:01:52:8e:e6:8a:23:20:1a:d5:35:
         67:4e:43:a3:3b:68:42:37:d0:9c:4c:79:52:f0:c2:4b:52:54:
         11:e0:e8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:28:56 2025 by rpki-client