Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
File:                     V5Sv215qGIV4CSClT_qCQI6oW6E.mft (raw, json)
Hash identifier:          APeexA5T7KhVZbSmV8/EdUy/DWGcFz/6f+Qqtf/8cnE=
Subject key identifier:   D2:6F:45:FA:60:C5:5D:63:AA:9E:26:11:2D:F0:3D:34:35:68:09:D8
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       0198364C956E780FB2A96A600C236DA1D863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
Manifest number:          161D
Signing time:             Wed 23 Jul 2025 08:00:45 +0000
Manifest this update:     Wed 23 Jul 2025 08:00:45 +0000
Manifest next update:     Thu 24 Jul 2025 08:00:45 +0000
Files and hashes:         1: 0Q4TTPSEDP2vwJw57Q98mNyLvHY.roa (hash: g+tt3wTt25Gy9GiGDu9XZL7vdB+saK0K7FaXmAomO5Y=)
                          2: DHjfwuWAYJJh7p_MCkbsmnyD1j0.roa (hash: LUkdazz94OiT/KAXqeQfCgc3awAt3nr20omKP9jyUv4=)
                          3: KDqp0KJBu-4WRFmlODTZGvtEzMo.roa (hash: sgx3u4OlPaMIX30o9Pw/sWgXitROdXpHDBcbHgo10iA=)
                          4: Tbcx9w57JlajlSr_D5AgzfLOVcY.roa (hash: 9ZMFnkZJalflC1y21xwgngk/wJpk4yIEOnHaqOzi8Nk=)
                          5: URhndB2z4bBAh3ApjFvckcVFg-o.roa (hash: 8fCApbL0btkJ/iY0cLD4A30Cl8V8tS6A1W9MGWYX73Q=)
                          6: V5Sv215qGIV4CSClT_qCQI6oW6E.crl (hash: VQjuKD6L6kvQhPokyfXteSUmdmfgrionn3ywESJnALQ=)
                          7: uAM4WpW0Sk1wUAV5w6VXPbJv9MY.roa (hash: GZ+0j2rVpXrpodZjQH1uYXWWYgFVWGNe8kdd6v4smBQ=)
                          8: wN12RJcK-_CRebSzXn9J25Yr5VM.roa (hash: U3IOSsKfeLNTBtDNIBErlYBjoE5txf9cmKxG7Wkj8ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:4c:95:6e:78:0f:b2:a9:6a:60:0c:23:6d:a1:d8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: Jul 23 08:00:45 2025 GMT
            Not After : Jul 24 08:00:45 2025 GMT
        Subject: CN=d26f45fa60c55d63aa9e26112df03d34356809d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:a7:5b:2e:f4:7b:13:4d:fe:57:9f:c9:2e:
                    27:be:cd:e0:95:6d:75:b5:6a:79:fb:3d:c9:b2:77:
                    74:63:01:05:b4:4a:b4:5b:fb:e9:79:c2:06:18:8b:
                    4a:94:36:e0:37:79:af:66:cd:9f:a0:60:90:d3:9c:
                    6b:5f:46:e4:32:c1:d7:d3:0d:c0:ff:0c:16:54:70:
                    39:85:de:5a:8d:77:f8:0c:93:52:0f:0a:f5:da:fb:
                    58:49:ea:c9:a1:42:15:25:8c:ec:3a:ed:18:99:10:
                    ec:e3:77:fd:18:ee:8b:74:b8:d0:df:c0:6f:a7:f7:
                    94:a1:7a:07:f6:27:50:a1:b3:27:79:37:f9:7b:51:
                    58:05:07:12:36:78:17:c2:ff:95:89:5c:65:86:1e:
                    2e:ff:58:08:08:d5:24:8d:d6:ec:50:59:8a:3c:41:
                    37:38:37:97:3f:fe:1a:36:b5:d9:c5:07:86:12:5a:
                    3f:22:cc:4d:e4:b9:d7:ca:52:cb:0f:44:3e:57:62:
                    6b:5d:81:fa:36:0c:48:1e:4a:f1:cb:d8:f6:37:31:
                    0e:4d:2e:06:79:7e:44:79:65:1d:79:0e:1a:64:d9:
                    38:45:42:d3:60:35:0d:57:84:21:c7:6e:a3:64:b3:
                    30:86:47:1d:c4:a0:21:55:fe:52:e3:2f:a4:ee:da:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6F:45:FA:60:C5:5D:63:AA:9E:26:11:2D:F0:3D:34:35:68:09:D8
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d4:e3:c2:c8:55:98:8b:41:b7:f9:73:42:f1:2c:18:d1:6f:
         83:09:e4:66:4f:5f:9c:8b:8c:9f:57:2c:7f:ee:e4:2d:e5:a4:
         ec:3c:3f:ba:9c:09:0a:25:b5:a5:b1:7d:b1:0d:72:8c:13:ec:
         25:1c:df:5d:6b:e4:0c:ad:89:f9:37:ce:04:f1:8a:4e:bc:c5:
         0a:58:db:31:ac:8b:0f:fa:86:44:a2:63:38:7d:15:ac:3f:13:
         bd:06:0d:c5:77:af:3c:80:26:59:d4:e7:b0:80:af:f4:49:80:
         52:a9:d7:df:c2:b9:eb:7a:81:0f:21:9a:ef:7a:de:d6:28:b4:
         d3:ba:99:10:61:69:b2:ad:a6:98:29:67:ba:93:8d:80:51:d0:
         5a:9e:32:30:82:db:25:55:d7:8e:1f:ad:80:d3:3d:60:0b:bf:
         47:e0:95:d7:c5:89:a3:70:d9:fa:04:fd:5e:31:ea:8e:03:73:
         f6:17:1f:ee:77:aa:ba:39:88:78:fe:95:21:2c:95:d5:ac:e6:
         bd:5c:7a:65:09:c0:ad:67:8f:05:20:8c:c9:ed:df:1e:9f:3c:
         9e:94:32:2d:2f:67:ec:c6:e8:ef:d8:48:2c:f1:30:53:46:9a:
         bb:14:95:f2:5c:0f:76:90:b2:0f:82:e3:6d:71:52:81:6f:4d:
         0d:59:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:24:46 2025 by rpki-client