Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
File:                     vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json)
Hash identifier:          cVw/OxsDTzas7sMQAV4lAnXKAkafrpGPJ6ZZJ/+RG/I=
Subject key identifier:   6E:9E:F5:D2:B6:4E:03:32:2D:62:BD:BA:8E:E7:ED:E9:21:6D:27:2D
Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91
Certificate issuer:       /CN=bde75079618691bae1f47bcbed52314496963891
Certificate serial:       0198443EFA5E05BD55B52D839025CF67D3F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
Manifest number:          11E0
Signing time:             Sat 26 Jul 2025 01:00:34 +0000
Manifest this update:     Sat 26 Jul 2025 01:00:34 +0000
Manifest next update:     Sun 27 Jul 2025 01:00:34 +0000
Files and hashes:         1: dN-uhf4yHU1KWIuxr4O44km4Ib0.roa (hash: erjr+nwKgTpJdhI7Z4IWA4jUyQt8GWT0g5Kuu0xltYE=)
                          2: djt1wnEeMWCGixI9JNMPiTXrt7U.roa (hash: fvje1Lm8IIK5mAd7uOyfo0YMgHNd5fDXDiGQLx1jFzE=)
                          3: n806vQCKJO6E1y-xgzc_uqP7AsI.roa (hash: N130woa+XpJIXwfcoDYXVXM648PPasYWXY1QC+kU7WQ=)
                          4: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: kW373iydQiYaK8k2EJtWHfBIMlTkmq0VKa3+ISBz3M0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:3e:fa:5e:05:bd:55:b5:2d:83:90:25:cf:67:d3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde75079618691bae1f47bcbed52314496963891
        Validity
            Not Before: Jul 26 01:00:34 2025 GMT
            Not After : Jul 27 01:00:34 2025 GMT
        Subject: CN=6e9ef5d2b64e03322d62bdba8ee7ede9216d272d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:d6:63:1e:d6:0b:8c:b6:7b:f5:1d:b0:31:
                    96:e9:7f:23:b6:c0:e5:6d:1f:fb:0c:98:04:e8:37:
                    7d:c9:14:77:c7:2a:17:ec:5a:05:71:e9:d9:58:89:
                    1e:ef:f6:de:51:ae:6e:21:32:4a:0a:f7:80:f5:98:
                    8c:0e:2b:2d:db:0d:1a:1b:be:4d:5a:78:2a:52:0a:
                    a7:09:c6:24:9d:5d:79:36:54:c5:f3:29:b9:2b:71:
                    e1:fe:04:16:c8:bd:a5:86:94:a9:34:2b:d8:f9:f8:
                    aa:11:ae:98:d2:8d:18:f9:29:e7:12:30:87:15:91:
                    83:68:0d:e5:ec:b9:9d:e0:9b:d2:8f:09:a7:15:d7:
                    e6:23:5a:ca:09:8c:eb:9f:42:ca:b4:46:de:85:69:
                    87:00:2f:04:fe:6a:f9:d9:f0:2c:9e:0a:c1:16:91:
                    77:9b:eb:4e:09:32:d6:56:5b:59:24:a7:ff:0f:b1:
                    70:34:bf:01:f8:f5:ff:9d:9a:a1:77:82:80:5e:36:
                    03:b2:6a:00:01:3d:94:13:11:db:a1:3b:50:35:bf:
                    86:11:90:2f:37:0b:ae:ed:ad:ee:e0:c3:b0:10:0b:
                    8d:ed:f0:bc:40:ed:32:f8:4d:69:8a:52:08:25:df:
                    96:68:a1:23:91:0e:07:8e:8d:5a:82:1a:ef:dd:92:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9E:F5:D2:B6:4E:03:32:2D:62:BD:BA:8E:E7:ED:E9:21:6D:27:2D
            X509v3 Authority Key Identifier:
                keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:18:d3:f0:7c:cb:06:0e:ad:e6:88:43:cc:ff:f0:41:fb:
         c5:2c:0b:b7:75:05:54:56:66:6b:bc:87:d0:46:ee:fa:10:3a:
         51:23:54:d4:22:12:30:85:2b:fa:23:b3:f0:2f:4a:57:1c:21:
         de:d9:45:2f:11:41:62:b4:2c:71:e6:44:be:55:a1:ef:84:bc:
         ac:25:1c:13:81:bc:82:d3:52:a3:1c:38:6c:ce:48:37:eb:d8:
         e3:aa:f8:99:b1:24:7d:a0:54:65:2e:ee:8a:64:07:61:cf:37:
         bd:de:a4:70:81:73:e6:b0:e9:e3:b8:1e:62:0b:12:dc:47:94:
         87:e4:3f:82:04:9d:dc:e7:a0:29:6a:aa:9f:66:15:d2:a4:14:
         9e:d7:36:c7:30:9e:ab:17:3c:79:a7:29:28:ca:b6:46:f8:e3:
         ea:8e:68:61:ca:6f:ad:0b:f1:3b:0f:03:4e:d8:89:80:67:df:
         3a:fa:b5:f1:39:4d:6b:eb:03:c2:48:e4:40:27:3f:57:5b:b1:
         81:42:ef:48:92:82:5c:c5:77:3b:21:ce:d6:74:15:a8:f8:5e:
         6f:9d:06:b6:98:d8:1e:f1:4a:65:8f:9f:b1:fd:7e:17:8d:5d:
         45:55:60:5b:fa:28:3e:91:8d:9c:91:76:30:6f:a9:34:f5:6f:
         5a:91:fd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:48:58 2025 by rpki-client