Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File:                     VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier:          Dc7gJtYdWkWnvZ/OC8tCJxuDQK9AUp4new5USCGvtpI=
Subject key identifier:   3E:50:36:6B:E0:04:8A:3A:CF:35:86:B8:69:94:6C:F3:25:C0:99:E5
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer:       /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial:       01984E1DF5EC5B9413FF2109D8A6A524D858
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number:          07DD
Signing time:             Sun 27 Jul 2025 23:00:43 +0000
Manifest this update:     Sun 27 Jul 2025 23:00:43 +0000
Manifest next update:     Mon 28 Jul 2025 23:00:43 +0000
Files and hashes:         1: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: AhAtqPlr9SEJwf82+viTCXpFOg/bV3yS03kTxlvnvac=)
                          2: b9l5sinWdqskbev4cuOxwSEYd68.roa (hash: qnq/UFSTcLvSI/5FTEwaMtiCFn9CDv5K60YTyMFcpss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:1d:f5:ec:5b:94:13:ff:21:09:d8:a6:a5:24:d8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
        Validity
            Not Before: Jul 27 23:00:43 2025 GMT
            Not After : Jul 28 23:00:43 2025 GMT
        Subject: CN=3e50366be0048a3acf3586b869946cf325c099e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:bd:af:50:5f:55:be:89:c0:30:4e:5d:d9:
                    72:e3:ed:67:f9:df:1f:a2:be:97:18:8a:f0:40:59:
                    09:6f:d6:13:96:1e:9b:2f:3d:f7:29:40:e9:df:da:
                    7a:96:80:d9:cc:d9:00:b6:df:ce:4f:1a:8a:33:7c:
                    fa:76:2c:96:2d:80:71:af:e5:2a:6d:3f:76:ae:96:
                    e3:26:87:c7:2f:f5:a6:c8:bc:a9:79:6c:af:bd:05:
                    9b:42:e6:df:40:f5:44:b8:16:4e:20:2d:92:04:dd:
                    20:b2:5c:09:06:36:f4:0f:b9:20:44:fd:c1:7e:0e:
                    af:bd:fe:a4:e9:19:0b:53:79:fa:8d:3f:17:96:8a:
                    ba:f5:3f:e5:e4:d9:71:eb:f6:90:07:8d:34:48:a8:
                    5a:7c:de:d8:cc:a3:2d:44:18:fa:44:72:3d:eb:d4:
                    89:3d:c6:5a:05:0c:1d:f4:14:d2:f6:03:88:e7:aa:
                    85:1a:c7:f5:dd:2f:25:17:dd:b4:14:bf:8f:a4:cc:
                    ca:c1:bb:45:47:70:cf:4f:77:0e:42:c6:4e:57:70:
                    a8:85:f8:6b:3f:ec:fe:fc:da:94:89:ef:30:ec:6e:
                    a3:25:4c:cb:41:5c:e0:bf:25:21:47:d5:64:60:09:
                    fa:f8:2c:b7:31:33:0b:43:f5:8e:f1:eb:0f:6f:71:
                    07:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:50:36:6B:E0:04:8A:3A:CF:35:86:B8:69:94:6C:F3:25:C0:99:E5
            X509v3 Authority Key Identifier:
                keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:c3:64:05:03:07:b4:4e:9c:be:3c:02:ac:28:3a:f7:83:
         87:2e:ef:19:cf:ab:29:5b:8d:b7:14:9e:49:46:ed:66:b8:32:
         17:9f:b6:e6:cf:df:ec:37:7a:79:0e:1f:52:95:06:9e:0f:87:
         b9:7c:72:2e:09:c9:a1:26:31:a4:c8:b4:c8:30:4c:ab:f5:ea:
         60:43:7e:d0:6e:6c:75:fc:7f:69:54:7f:54:0c:5c:e7:b1:0f:
         8c:71:b0:b3:82:6a:78:2d:74:23:6d:96:09:2c:ae:a3:c1:81:
         93:62:94:38:63:87:e8:79:7d:fd:87:ef:08:7a:08:a8:04:d8:
         3b:d2:ed:53:05:3c:3f:4f:41:39:73:80:43:fa:ba:be:70:db:
         5a:32:22:19:45:ee:b8:67:72:3c:78:fb:de:ae:9d:ce:41:5a:
         93:7f:bb:39:46:71:b1:b9:2a:42:58:af:bd:9b:b1:a5:bc:78:
         8e:1d:60:ea:f2:26:8f:6d:89:8f:16:7f:4d:c1:59:a9:2e:40:
         fd:03:1c:f4:37:0f:10:5b:f3:2e:84:6b:b7:77:54:2e:a4:86:
         0c:a0:db:c3:ec:b6:69:57:f4:79:a6:7d:31:79:3f:19:40:60:
         64:ab:06:c8:d6:5e:d9:6d:1d:cf:af:91:b6:b7:d5:ae:a2:7f:
         ab:39:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 06:40:28 2025 by rpki-client