Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          Ac3JFL6FZvoAf5oGwC5eH6YRiG9uX8IOiPXGahdHEso=
Subject key identifier:   F7:38:52:24:18:AB:65:F4:79:15:C5:51:A8:53:4B:A3:62:3A:3B:3D
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       019854FCCEE32A6D262BC171C550BFD23EB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          1607
Signing time:             Tue 29 Jul 2025 07:01:50 +0000
Manifest this update:     Tue 29 Jul 2025 07:01:50 +0000
Manifest next update:     Wed 30 Jul 2025 07:01:50 +0000
Files and hashes:         1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: /gODPnaHtgzfmuQnoaObE1ApgaOGZhfq07pKQdp3Zgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fc:ce:e3:2a:6d:26:2b:c1:71:c5:50:bf:d2:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Jul 29 07:01:50 2025 GMT
            Not After : Jul 30 07:01:50 2025 GMT
        Subject: CN=f738522418ab65f47915c551a8534ba3623a3b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:b1:01:70:83:3f:48:24:b5:a4:b9:ca:8c:
                    24:42:3a:a9:3f:52:88:ec:c9:d5:f1:be:c3:09:b3:
                    57:f3:ac:e0:87:3b:85:a9:b8:3f:a2:c2:24:5f:33:
                    dc:2d:c5:89:74:b5:53:83:c8:29:04:2e:66:83:78:
                    1a:87:23:46:59:4d:0f:35:bd:49:82:ab:fc:dd:0b:
                    58:c2:5e:b0:39:46:46:e3:13:ef:ea:c6:dc:c3:b2:
                    a3:1c:17:21:3e:41:e3:22:3e:02:69:85:76:78:5d:
                    f4:91:48:65:f7:2a:87:ac:e9:49:e6:70:31:32:83:
                    a5:ad:17:55:18:56:da:ff:aa:e7:61:4e:3e:0b:ea:
                    cd:31:d1:db:81:b9:ed:d8:a3:88:14:91:46:92:38:
                    e4:e2:46:14:43:dc:10:7b:3d:02:38:9d:b9:49:3c:
                    6b:ac:68:d5:d6:18:94:e3:02:22:06:89:f4:f9:95:
                    4a:74:2c:75:be:49:83:65:92:22:bb:19:48:1b:3c:
                    1b:e7:1a:59:d1:e6:bd:47:d6:0c:8b:01:c1:f5:4c:
                    2f:3e:87:6d:8e:47:00:22:08:78:c5:77:a6:b6:19:
                    20:86:4d:55:5f:f4:3b:f3:32:3d:7e:76:75:d7:bf:
                    89:49:25:16:68:ae:2e:ce:2a:11:ec:f5:4a:30:d8:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:38:52:24:18:AB:65:F4:79:15:C5:51:A8:53:4B:A3:62:3A:3B:3D
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2a:f7:78:08:6d:5d:ff:52:ba:51:7f:87:58:01:16:98:b9:
         ef:6c:17:46:80:d4:4f:87:4c:4d:a6:9d:8d:07:78:42:df:d6:
         f9:5c:77:fb:5d:99:09:b4:5c:b1:c6:bb:aa:27:c0:5d:21:8c:
         1f:7d:02:e4:b9:ca:47:55:ce:74:be:52:57:19:e0:c7:3f:e1:
         4a:0a:fa:d8:26:71:c3:88:54:5d:b3:d4:de:b8:48:15:61:f1:
         6e:96:e5:e8:fd:0f:94:b4:4d:ee:e5:0a:db:18:f0:90:08:83:
         bc:25:3a:54:50:47:10:b6:41:5b:c1:0a:a3:53:97:66:9e:6c:
         6a:ff:f1:45:dd:87:0c:b4:86:32:85:85:7b:a6:b8:97:37:ee:
         cf:b4:4b:4d:f0:31:9a:e3:6f:85:70:b8:5c:9e:e9:22:a0:82:
         b0:4f:0d:98:94:ed:dc:92:af:c3:e4:89:37:eb:48:24:16:77:
         8f:56:dc:85:ba:ac:8f:2a:24:3f:9f:72:69:d1:ef:a5:4b:3a:
         50:77:71:04:16:ce:ec:c0:4b:f9:87:d7:aa:e2:b4:dc:10:e8:
         14:02:17:60:1a:4b:90:4b:60:37:57:f3:55:8d:f0:a6:05:ff:
         ef:50:65:b4:c7:a2:4f:a2:e7:d0:e2:a4:f7:b1:cc:6c:da:7c:
         6a:f2:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:16:41 2025 by rpki-client