Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          wf6rHWneQJVQ/1jA8DJfRDH+w6icBGcXbqg8hxnZ3JQ=
Subject key identifier:   50:3F:F3:7E:97:D9:BB:89:41:AB:15:9F:D3:9B:41:6C:D0:A2:C5:54
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       01984B8AA1291C91B34DE02EA2F2CAC5798D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          0E85
Signing time:             Sun 27 Jul 2025 11:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:33 +0000
Files and hashes:         1: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: s1U718O62SO2o9tmVtSpi3EsP29+LClk7LOgWY5paj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:a1:29:1c:91:b3:4d:e0:2e:a2:f2:ca:c5:79:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Jul 27 11:00:33 2025 GMT
            Not After : Jul 28 11:00:33 2025 GMT
        Subject: CN=503ff37e97d9bb8941ab159fd39b416cd0a2c554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:65:3c:54:e5:9c:c1:26:cb:13:47:35:46:
                    9e:a6:4e:dc:f4:ce:2c:75:d1:af:bb:b6:a1:46:5a:
                    98:ca:08:f1:99:1f:ad:6f:45:cb:72:4d:2b:56:08:
                    26:7e:f5:8c:61:8b:34:8c:31:23:c3:dd:0f:03:14:
                    6e:29:e6:c8:47:d7:ec:f2:18:ff:40:b3:d5:de:a9:
                    8c:83:31:f7:b4:54:0c:ea:c1:b6:6e:3a:82:64:aa:
                    65:6c:f6:d4:31:7d:05:79:43:0c:8d:c5:e4:88:16:
                    ac:10:44:ea:61:cf:1c:93:fe:0d:22:2a:55:b5:71:
                    b4:3d:ad:e2:5b:46:eb:1f:7f:15:6b:ac:cf:52:55:
                    23:22:f9:79:f8:ce:28:47:f6:5a:aa:82:37:b0:b9:
                    3c:8b:9c:5f:e2:26:e8:27:22:a6:46:25:a4:e4:6d:
                    35:3c:e6:45:72:e4:c5:79:c6:70:d6:e8:5b:a7:51:
                    14:84:72:8d:0c:f8:3d:32:27:a3:fa:ef:85:54:5d:
                    43:80:e5:c7:59:af:ed:12:40:f1:d7:58:62:86:60:
                    79:0f:e4:6e:ed:79:d3:06:19:c5:48:9d:35:35:12:
                    bc:50:87:1a:a6:2e:de:ed:ea:ba:4a:51:d1:8f:d3:
                    2c:83:be:fd:cc:75:06:5a:9b:cd:f4:60:1a:7d:70:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3F:F3:7E:97:D9:BB:89:41:AB:15:9F:D3:9B:41:6C:D0:A2:C5:54
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:90:2c:2a:a5:6e:06:98:d8:44:4e:40:7d:03:ef:d6:da:f4:
         8b:fd:1d:26:66:73:b1:40:37:72:bb:af:c8:0a:5c:f3:a6:37:
         4f:08:7c:17:a2:75:2a:00:38:ac:1c:36:63:8c:c4:a3:9a:4e:
         95:01:74:0b:a4:f9:bb:f5:3f:e1:d0:50:52:e4:09:ed:c9:b5:
         8c:dc:2a:c0:10:5f:ab:94:cb:19:a6:d2:32:58:73:fc:95:32:
         f2:4e:e1:63:e1:e0:86:7c:23:72:cf:3e:a4:0e:b4:d7:ce:4f:
         00:ab:46:93:05:fe:f6:75:8a:94:bd:e9:33:30:ec:ec:ca:92:
         72:62:3b:70:a0:07:8f:ee:77:12:81:c6:36:54:22:3a:10:6e:
         ab:8c:69:d8:6b:1d:95:e8:a1:ad:28:d4:b3:b8:ef:5a:d3:1a:
         e8:62:ad:44:ea:a6:01:3c:70:42:94:cf:85:54:6f:d0:55:a2:
         0a:71:c5:a7:15:30:04:68:f5:63:a9:6f:0f:bc:89:4b:4a:41:
         f5:55:8d:f8:a1:12:9d:3d:99:10:d8:e3:e2:e0:ac:99:e9:42:
         72:ad:c9:22:25:51:e2:24:3c:11:2a:23:73:e0:d2:8d:c5:a2:
         5f:5d:a4:8e:88:48:6c:31:21:52:01:60:1a:c5:ee:39:87:15:
         7c:93:d0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:09 2025 by rpki-client