Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          2DCQjT6mFLbGNaGD1F1eKgkbKpFZ3vxzuFqelsFqtvQ=
Subject key identifier:   8A:70:F4:E7:60:9A:E2:0E:0A:83:2E:71:26:60:45:9F:7B:2D:95:F2
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       0198481B684DA78FACDAAAD3E7199A004725
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          059A
Signing time:             Sat 26 Jul 2025 19:00:12 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:12 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:12 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: GXgzordLLe/9bVmgvKxW5m+M1OGGVBW3yQA3NVADCDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:68:4d:a7:8f:ac:da:aa:d3:e7:19:9a:00:47:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Jul 26 19:00:12 2025 GMT
            Not After : Jul 27 19:00:12 2025 GMT
        Subject: CN=8a70f4e7609ae20e0a832e712660459f7b2d95f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c4:55:9e:e0:db:71:02:ea:6c:0c:25:14:a9:
                    34:0b:da:2f:ae:ec:1d:bb:50:02:7b:99:f5:e4:b4:
                    8c:96:0a:6b:cd:4c:dd:8f:14:9c:f8:96:fb:88:20:
                    64:31:a8:c6:45:47:f2:75:e1:78:52:f0:76:58:14:
                    03:ab:d2:dc:fc:be:79:54:0a:b5:9b:dd:23:47:e2:
                    44:66:84:09:9d:c5:8b:fe:68:53:9c:7f:12:a8:97:
                    ac:2b:90:b4:f8:42:3f:84:3d:26:09:f1:f7:c8:fc:
                    e3:d7:4b:e5:cf:23:77:85:20:39:2c:54:fc:6f:42:
                    c5:cf:f7:a2:7c:1d:ee:d1:28:05:fc:80:03:91:d0:
                    6a:72:0c:8e:40:ca:cb:b0:69:29:85:41:3a:d0:b5:
                    d6:65:10:c3:66:b7:5a:fb:34:2e:21:dc:dc:de:57:
                    60:49:8d:62:cc:b5:c2:4f:0f:3c:16:d3:69:22:0f:
                    6b:8b:33:70:0d:76:b5:f7:6c:78:09:55:5f:2c:73:
                    bc:ce:c3:2e:00:25:e8:05:f0:0a:3c:9f:6e:ad:b5:
                    9f:74:2d:9b:55:70:cb:d6:48:7b:dc:e0:0e:85:bf:
                    69:07:6e:db:08:37:1c:2d:7a:00:d3:a2:83:30:4d:
                    eb:88:58:26:43:5a:5c:79:dc:bd:3c:5e:39:12:a1:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:F4:E7:60:9A:E2:0E:0A:83:2E:71:26:60:45:9F:7B:2D:95:F2
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:16:6b:32:5f:7e:f6:3c:c5:07:95:da:b0:6c:ce:e8:20:4a:
         3b:d7:dc:51:1d:3e:2d:b0:a0:1c:20:5d:c3:bf:5a:de:ee:bc:
         38:ff:18:f9:e8:af:f7:91:27:f0:0e:b9:92:8c:f8:5d:3c:1e:
         b4:7d:db:3e:29:b7:ed:9a:9b:6d:ab:cf:e8:00:d5:dd:b5:11:
         90:8e:18:71:d8:d3:45:dc:b3:3b:8a:fb:d6:2b:6b:08:d1:c3:
         f8:54:33:c1:7f:20:f5:fe:57:c8:4d:d9:5b:a3:da:19:6a:c8:
         d0:ef:25:a7:a8:39:ba:10:55:bb:db:39:78:bc:0d:fc:83:d4:
         3a:5d:62:cc:16:da:42:8f:39:55:73:85:ca:05:95:1d:df:1c:
         ea:c1:3c:bb:31:f1:1e:b6:03:ef:ec:7b:94:4e:6f:f2:5e:c0:
         66:59:69:32:f4:67:2d:b3:61:fd:cd:17:89:b2:98:2b:ee:0e:
         c4:4f:78:83:1e:c7:cc:f5:5a:f5:44:76:bd:19:3a:3d:31:52:
         70:46:8a:98:41:e4:ad:b8:9c:77:cd:af:b5:df:52:af:fb:f6:
         1e:c4:97:16:f6:b9:65:87:f1:66:71:df:87:77:b4:b7:f8:4d:
         d3:7c:dd:41:83:7a:7d:51:cd:c6:39:c2:68:50:d1:39:00:0e:
         73:4d:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:36:30 2025 by rpki-client