Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          ed+QMhAsjOJ0h5x7yE8N2KVgd2ZZkAJfDJ1sznDzxqs=
Subject key identifier:   A4:45:96:F0:2D:B2:C0:2E:6F:05:29:BD:89:67:7C:FE:82:03:23:E7
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       01992D481407EEFF21432C1CE4023D97C145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          0DA8
Signing time:             Tue 09 Sep 2025 07:02:02 +0000
Manifest this update:     Tue 09 Sep 2025 07:02:02 +0000
Manifest next update:     Wed 10 Sep 2025 07:02:02 +0000
Files and hashes:         1: Wov-rogss9nwzo0EqvEMesDtem8.roa (hash: ajFMqrFV3/ilI/Icdeg3WVYYBJHDgZFZXDWmXuDh9DU=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: SXaCF1iZ7YXYYuPdfgsWnG+pzAFL02I/sebhPc0+ixw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:48:14:07:ee:ff:21:43:2c:1c:e4:02:3d:97:c1:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: Sep  9 07:02:02 2025 GMT
            Not After : Sep 10 07:02:02 2025 GMT
        Subject: CN=a44596f02db2c02e6f0529bd89677cfe820323e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:43:ff:d0:a6:48:5e:d2:82:17:4f:03:bd:
                    38:ad:9e:98:5c:04:1b:7a:26:8e:35:c9:f4:10:1d:
                    22:f2:76:04:a3:42:4f:a8:99:7a:5a:ad:5a:be:57:
                    64:ab:ab:d8:ba:20:5c:c7:01:c5:86:5e:f7:15:03:
                    a9:26:e7:d7:19:e2:87:62:eb:ff:87:85:58:9b:41:
                    e8:a1:19:64:a7:b3:6a:bf:bf:a5:f3:8a:d4:2d:66:
                    d6:81:d5:1c:a3:44:3f:99:fa:d1:bb:2e:19:e4:3a:
                    7f:f6:27:e5:da:a1:97:e5:19:50:c6:76:e0:3d:02:
                    37:a0:fd:af:ce:01:38:b8:06:1a:69:83:cc:3b:3c:
                    9c:22:e1:af:39:7a:20:3a:30:1b:95:19:70:ea:99:
                    39:d2:18:f0:8b:98:6c:78:ad:ce:95:d3:e8:e4:bf:
                    9d:b3:b5:4b:7a:00:01:ce:f6:46:9e:0d:32:fd:ed:
                    ee:65:80:90:23:3f:a4:3a:a0:38:ca:41:b5:91:0d:
                    47:e0:16:ae:69:a7:bd:f0:c9:fb:8e:b7:4d:73:0a:
                    60:46:2e:a7:7e:56:16:9a:64:3d:07:9d:07:ec:ad:
                    f6:e5:e7:cd:8a:b2:14:9a:25:22:8e:52:50:0d:73:
                    83:73:58:1a:7b:03:5e:91:59:d1:70:2f:69:e3:07:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:45:96:F0:2D:B2:C0:2E:6F:05:29:BD:89:67:7C:FE:82:03:23:E7
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:9b:ea:5f:66:0a:8f:4e:9a:d0:29:32:9c:45:ea:78:58:
         41:89:b4:37:49:ba:b1:19:54:59:65:17:a3:09:f1:fb:32:79:
         70:49:e5:df:6e:bc:f7:d2:0c:a0:29:b1:32:fb:c7:2f:e6:f6:
         0b:d9:97:39:07:41:d3:53:db:a7:2e:eb:7b:8f:98:9d:01:ab:
         39:63:3a:f9:0d:93:50:1c:5e:bc:43:af:ba:2a:a7:c7:5b:5a:
         cd:99:29:cf:ee:a9:c1:0b:72:2b:44:2f:c5:4f:1b:17:5d:a0:
         91:7f:a5:d4:cf:a3:2d:da:2e:30:3c:44:b1:be:d4:ae:b4:99:
         c3:78:2d:94:b3:80:31:c5:87:f5:09:0d:7d:6f:46:f3:13:0a:
         8a:91:44:03:ee:b3:ec:5f:6a:dc:9c:c7:c5:95:d3:6c:f4:78:
         78:fb:12:c2:8b:61:e1:bd:a1:15:1d:b6:78:f1:ef:b5:a8:d8:
         bf:94:e7:7a:52:ab:fd:a9:0c:78:35:41:d1:dd:6c:21:21:f4:
         7f:9b:43:f5:65:fb:32:52:2c:ad:ac:33:30:93:53:21:a2:eb:
         8a:eb:ee:a0:c3:17:7b:92:bc:9e:2a:a1:6a:63:9d:21:cf:6e:
         a4:a9:38:22:4d:2d:a2:fe:b2:f3:bd:a8:fa:d5:cc:d9:2d:67:
         23:ab:d3:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZktSBQH7v8hQywc5AI9l8FFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNDVhZWNiMDYyZDliNDQ2ZTA1NDIxYmMxZmFhZjU4YmIw
NzY5ZWMwHhcNMjUwOTA5MDcwMjAyWhcNMjUwOTEwMDcwMjAyWjAzMTEwLwYDVQQD
EyhhNDQ1OTZmMDJkYjJjMDJlNmYwNTI5YmQ4OTY3N2NmZTgyMDMyM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGxD/9CmSF7SghdPA704rZ6YXAQb
eiaONcn0EB0i8nYEo0JPqJl6Wq1avldkq6vYuiBcxwHFhl73FQOpJufXGeKHYuv/
h4VYm0HooRlkp7Nqv7+l84rULWbWgdUco0Q/mfrRuy4Z5Dp/9ifl2qGX5RlQxnbg
PQI3oP2vzgE4uAYaaYPMOzycIuGvOXogOjAblRlw6pk50hjwi5hseK3OldPo5L+d
s7VLegABzvZGng0y/e3uZYCQIz+kOqA4ykG1kQ1H4Bauaae98Mn7jrdNcwpgRi6n
flYWmmQ9B50H7K325efNirIUmiUijlJQDXODc1gaewNekVnRcC9p4wfy8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRFlvAtssAubwUpvYlnfP6CAyPnMB8GA1UdIwQY
MBaAFL1FrssGLZtEbgVCG8H6r1i7B2nsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84YTZhZTEtNzE0OC00ZTU3LWFhYTkt
M2I4MWFhMjZmN2M2LzEvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS84YTZhZTEtNzE0OC00ZTU3LWFhYTktM2I4MWFhMjZmN2M2
LzEvdlVXdXl3WXRtMFJ1QlVJYndmcXZXTHNIYWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5mb6l9m
Co9OmtApMpxF6nhYQYm0N0m6sRlUWWUXownx+zJ5cEnl326899IMoCmxMvvHL+b2
C9mXOQdB01Pbpy7re4+YnQGrOWM6+Q2TUBxevEOvuiqnx1tazZkpz+6pwQtyK0Qv
xU8bF12gkX+l1M+jLdouMDxEsb7UrrSZw3gtlLOAMcWH9QkNfW9G8xMKipFEA+6z
7F9q3JzHxZXTbPR4ePsSwoth4b2hFR22ePHvtajYv5TnelKr/akMeDVB0d1sISH0
f5tD9WX7MlIsrawzMJNTIaLriuvuoMMXe5K8niqhamOdIc9upKk4Ik0tov6y872o
+tXM2S1nI6vTdQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:41:08 2025 by rpki-client