Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
File:                     vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft (raw, json)
Hash identifier:          yo0q7XH49dGSvfbQPAhFbF/mokFddVcotwiBBz88kDg=
Subject key identifier:   F4:95:0C:63:70:DA:6A:E1:70:AA:E9:B7:1C:E3:9E:F2:CF:B7:F8:E2
Authority key identifier: BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF
Certificate issuer:       /CN=bce75c43a41501d35417ae813be29f4227fb2dcf
Certificate serial:       019846D22DA09376DA9B29B3014B61601E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
Manifest number:          0B58
Signing time:             Sat 26 Jul 2025 13:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:36 +0000
Files and hashes:         1: 3YOlf0iPPEKZOejM5ERFeNy2UUI.roa (hash: 7dF2XTmUFq3q1B6JF9m1PhiG/XLJRsnEpYYup465d6M=)
                          2: vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl (hash: BPMnPGiNVAPmwo08YusvMLycVJdmbM4xVBeqdAOmkvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d2:2d:a0:93:76:da:9b:29:b3:01:4b:61:60:1e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bce75c43a41501d35417ae813be29f4227fb2dcf
        Validity
            Not Before: Jul 26 13:00:36 2025 GMT
            Not After : Jul 27 13:00:36 2025 GMT
        Subject: CN=f4950c6370da6ae170aae9b71ce39ef2cfb7f8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e7:80:3f:e2:7b:7e:4f:43:a6:5c:65:8b:14:
                    f4:c5:a4:9a:34:7e:d6:32:6b:d7:79:17:7e:ee:a1:
                    ed:b4:77:4d:e1:88:45:af:71:62:ee:fa:19:d7:75:
                    5c:fc:22:57:4d:50:3c:77:d8:a6:fb:4a:b1:7f:3d:
                    c7:e0:bf:1a:8e:cd:7e:c3:07:ed:d3:b6:e0:50:aa:
                    a0:e2:4e:d7:60:b7:1f:12:37:5e:c0:06:97:34:62:
                    36:f1:f3:c2:57:2a:8e:fc:61:c5:65:27:49:4e:28:
                    f0:22:df:f6:57:29:de:36:d8:64:c7:8c:f8:f6:33:
                    16:f0:18:a3:2d:9c:b0:69:eb:8f:d9:3a:21:91:7d:
                    48:e1:30:6f:c6:44:1d:d2:26:77:28:81:41:a0:39:
                    5f:4f:2a:8b:65:25:46:db:b9:06:d4:b6:af:96:e4:
                    9d:b9:5f:ba:6d:93:f0:cb:46:d8:60:ae:0b:40:9c:
                    06:2c:1b:fd:b6:81:bf:56:45:ee:a8:f9:ea:9e:1c:
                    dd:4f:9d:d6:67:50:41:1f:8c:6c:c9:75:bf:48:95:
                    93:6e:28:e1:f7:a7:64:81:7e:2b:54:22:b7:d8:c9:
                    0c:f5:d7:2f:91:1a:44:66:38:65:d0:06:e8:04:f8:
                    08:9f:d4:1b:85:9f:c7:39:9f:fa:cc:dc:87:ea:7c:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:0C:63:70:DA:6A:E1:70:AA:E9:B7:1C:E3:9E:F2:CF:B7:F8:E2
            X509v3 Authority Key Identifier:
                keyid:BC:E7:5C:43:A4:15:01:D3:54:17:AE:81:3B:E2:9F:42:27:FB:2D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOdcQ6QVAdNUF66BO-KfQif7Lc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ca7c4a-f946-49e6-9f41-02f92aa4e2a0/1/vOdcQ6QVAdNUF66BO-KfQif7Lc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1f:03:86:bc:63:04:79:f0:f9:13:c3:54:3d:e4:97:3a:8d:
         b5:d0:6e:cc:78:6d:d7:83:9b:e3:02:fc:12:f7:17:4e:47:92:
         15:a9:26:23:06:41:d4:15:7a:11:ab:04:bd:76:66:c3:e8:42:
         1e:6d:f7:e9:70:9b:cd:0e:6e:61:72:26:98:d3:55:ab:6a:85:
         95:96:4c:85:3f:cb:0e:27:66:3f:11:1b:0c:a8:97:8a:a4:f6:
         16:40:3b:c8:fa:ba:fd:dd:8f:a0:45:16:71:61:da:3a:63:3f:
         af:4e:cb:ae:3f:3d:00:02:2d:30:fe:c4:48:23:66:08:14:59:
         6d:93:11:9a:ca:94:44:c8:e2:32:b7:f5:25:ac:5f:72:8b:d9:
         03:41:0e:37:ee:f5:47:57:9a:74:b8:8b:7d:79:0e:7f:c4:5b:
         0f:2a:4a:d2:16:b8:57:89:7e:52:d6:6c:93:0e:e6:b9:3a:d4:
         69:e3:dd:42:ba:8d:7e:9b:bb:a5:23:68:53:71:d9:18:8c:6a:
         8b:fa:ff:d3:ae:22:67:74:f5:a7:c6:61:43:d6:21:04:da:2d:
         b0:46:b1:0c:98:0f:ec:e0:12:04:a9:f8:2e:78:0b:33:a4:a5:
         a3:8d:9d:a9:87:63:09:bd:4b:60:ae:cd:e5:26:57:c6:df:f7:
         f4:31:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 21:07:58 2025 by rpki-client