Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
File:                     VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json)
Hash identifier:          2R+MjCabxTWLIh12ItU9ocTnOExhege64Lw8uYWgyWU=
Subject key identifier:   FA:BF:30:7C:D2:01:4E:70:6B:EA:D8:BF:3C:E6:F3:F9:41:28:A1:65
Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00
Certificate issuer:       /CN=5448a5c5c577b53cc298af0443edd4352e1b1300
Certificate serial:       019848528DB1A83088EA15D45FB1A5DB5393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
Manifest number:          0113
Signing time:             Sat 26 Jul 2025 20:00:26 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:26 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:26 +0000
Files and hashes:         1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: GBBZg5ZmYhE2KfUu9F8mJRX/Cr8udKCAOMvr6zO32yQ=)
                          2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:8d:b1:a8:30:88:ea:15:d4:5f:b1:a5:db:53:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300
        Validity
            Not Before: Jul 26 20:00:26 2025 GMT
            Not After : Jul 27 20:00:26 2025 GMT
        Subject: CN=fabf307cd2014e706bead8bf3ce6f3f94128a165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:84:fe:b0:92:a8:17:b7:be:94:b0:13:f5:
                    c6:9d:20:d9:91:05:62:ac:fc:4d:51:a2:17:1b:b4:
                    3f:df:73:64:fb:ca:ed:3a:3c:99:e3:00:a0:5e:c6:
                    aa:27:d3:d2:03:e8:8c:cb:d9:fa:74:2b:47:88:7d:
                    3e:9b:9d:8b:e5:81:66:ce:89:b4:90:9f:bc:d0:f6:
                    8e:92:e8:0e:87:ae:78:3b:13:47:7a:b4:a6:88:e8:
                    5a:ad:7b:56:ff:c5:df:7f:52:a0:dd:c1:bf:8a:1b:
                    72:e7:66:64:50:53:e9:18:5d:eb:05:0c:a1:75:35:
                    74:fd:88:c7:57:9c:dc:c5:f8:bb:8a:1d:c8:2b:1a:
                    cc:e2:05:df:cb:37:1d:41:3c:a7:cd:b7:42:47:4d:
                    af:d7:48:57:63:8b:a4:9b:bb:4c:14:ab:80:78:ad:
                    79:b0:65:1c:5e:c9:93:85:5b:80:52:e8:f6:f0:60:
                    2b:00:14:db:ee:95:8c:7a:51:da:0f:39:80:8f:cb:
                    b6:3a:14:c2:2d:24:fd:93:20:2a:d3:3f:73:de:99:
                    0b:8d:18:47:a6:3d:9f:2f:66:68:85:9a:3f:89:8b:
                    53:0e:f0:1c:e0:27:4e:d5:67:fe:6e:b3:31:b3:59:
                    b3:f5:1f:1d:ce:bf:d2:c2:78:80:ce:51:30:21:9a:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:30:7C:D2:01:4E:70:6B:EA:D8:BF:3C:E6:F3:F9:41:28:A1:65
            X509v3 Authority Key Identifier:
                keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3a:0f:77:72:c2:b5:1e:2e:d5:2a:18:69:f0:8c:79:24:70:
         b7:e3:23:5d:63:0d:bb:67:d5:5b:8e:e0:62:a7:c2:54:ad:ca:
         33:5c:8d:e6:c0:36:f0:a5:8a:6a:5f:e7:20:62:3d:f3:ca:25:
         17:22:fd:df:65:64:8b:9f:73:77:55:6d:0a:f3:eb:93:49:34:
         ab:85:55:fe:47:82:cf:69:0f:f3:9f:b9:1e:b4:94:3f:33:32:
         7c:7c:e2:39:62:e1:14:51:5d:b1:e9:11:78:a4:d1:df:5b:f5:
         93:44:5c:74:2a:f5:6e:86:3d:60:a9:9a:cc:89:25:15:f6:e0:
         1e:a0:9f:42:d6:0b:f8:d8:11:14:cb:b6:04:a2:39:43:7b:08:
         e8:3d:3a:d1:83:e1:11:b4:ad:cf:a7:26:e7:8c:3d:eb:6e:87:
         a2:bd:76:ca:f1:d7:4d:93:e0:a1:00:98:53:86:5a:29:ee:90:
         3b:65:e5:17:ab:47:e5:b3:4c:ff:b3:d6:6d:ec:e8:ef:bd:30:
         91:13:b3:cd:b6:61:32:dc:62:e9:cc:42:7a:c9:3f:cd:cf:99:
         9e:6c:db:9f:ca:06:97:76:08:0a:2c:03:aa:82:ab:af:75:36:
         cd:6b:6a:db:4d:29:dd:c8:ce:7b:e6:86:53:7d:68:5e:25:34:
         62:dc:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:57:33 2025 by rpki-client