Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
File:                     VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft (raw, json)
Hash identifier:          0pi1pmuKtbTNB0FAkCYYlHu317Aqw6wH3Urj195xaVg=
Subject key identifier:   EC:11:E9:67:31:C7:74:7E:AD:CA:0E:60:D9:50:35:82:69:64:FB:98
Authority key identifier: 54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D
Certificate issuer:       /CN=541678c37a1f9334314feea58325ea7940af0f5d
Certificate serial:       0198537AE35EDBFB22EC6686823A267CADBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
Manifest number:          1281
Signing time:             Tue 29 Jul 2025 00:00:19 +0000
Manifest this update:     Tue 29 Jul 2025 00:00:19 +0000
Manifest next update:     Wed 30 Jul 2025 00:00:19 +0000
Files and hashes:         1: VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl (hash: O0laKaruga+XWU9n++MH5GnrnWT5nxApVOsNgiXJypI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:7a:e3:5e:db:fb:22:ec:66:86:82:3a:26:7c:ad:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541678c37a1f9334314feea58325ea7940af0f5d
        Validity
            Not Before: Jul 29 00:00:19 2025 GMT
            Not After : Jul 30 00:00:19 2025 GMT
        Subject: CN=ec11e96731c7747eadca0e60d95035826964fb98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1e:67:63:80:50:d7:af:f6:d7:29:84:68:8a:
                    f1:22:fe:f9:d3:48:80:d5:55:f1:27:0d:3e:0f:77:
                    85:37:9c:87:ec:3e:51:06:5f:1e:c9:22:a6:ed:33:
                    83:42:62:a8:49:8b:54:c0:54:e8:6d:19:c3:17:3b:
                    34:c8:2f:87:45:44:f7:a6:d7:a4:8e:fb:82:e3:90:
                    cb:41:55:0c:47:60:94:26:80:46:2c:1c:ca:8f:6c:
                    a1:b5:b6:8f:f8:44:55:ce:73:3f:4e:bb:0a:95:b3:
                    16:31:24:ba:8a:ea:1c:b8:f6:43:2b:55:d0:43:3b:
                    2b:18:68:4f:93:18:56:32:db:f3:86:6a:64:17:c2:
                    17:c2:da:ae:66:55:b6:45:8d:f9:5b:c4:cc:2b:cb:
                    bf:fa:2d:4a:44:02:40:50:2a:8f:7f:98:23:21:95:
                    f0:fa:94:9c:87:0a:d9:7a:b1:83:a8:c6:8b:36:64:
                    7c:fc:42:b5:b4:de:f3:0f:ae:d3:ca:bc:ac:33:be:
                    f3:7a:2b:9c:71:0b:fc:be:40:0f:22:38:65:82:44:
                    04:6b:57:18:22:41:a2:67:0e:69:b7:f1:69:f5:81:
                    88:44:a3:f5:b9:49:08:f9:6e:06:1b:23:63:1d:52:
                    08:ae:0f:ce:95:03:f1:5d:b0:45:73:7c:14:74:1b:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:11:E9:67:31:C7:74:7E:AD:CA:0E:60:D9:50:35:82:69:64:FB:98
            X509v3 Authority Key Identifier:
                keyid:54:16:78:C3:7A:1F:93:34:31:4F:EE:A5:83:25:EA:79:40:AF:0F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBZ4w3ofkzQxT-6lgyXqeUCvD10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/616f03-424e-4910-abe1-0388a266160b/1/VBZ4w3ofkzQxT-6lgyXqeUCvD10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:4a:27:9f:11:6b:24:16:1c:e7:f1:24:7f:60:df:5e:00:
         ea:f7:64:89:55:b6:54:49:28:c5:5e:7a:3d:8a:0e:b2:f6:ff:
         8e:50:54:0f:03:6c:35:37:08:61:41:18:e5:33:eb:9b:19:83:
         e1:0e:b8:1c:24:68:28:37:ee:1d:18:67:f6:82:39:f3:22:b5:
         67:d4:0b:5e:17:d3:f0:a3:7b:c2:fa:64:63:3b:37:3c:6e:59:
         fa:ad:bd:10:f8:e0:24:66:ec:09:10:c5:3e:94:0c:cc:ef:bf:
         21:11:40:0b:26:fa:bc:e7:d9:05:76:dd:cd:5b:73:c7:f7:00:
         7c:04:38:13:fd:66:02:f0:49:7d:77:65:ae:d9:d4:fa:ca:85:
         bf:2a:76:b9:b4:73:a0:14:6e:b3:a7:77:1b:d5:13:8c:f8:7c:
         8f:cf:1a:29:7b:59:64:9c:93:a4:c1:48:14:a3:69:54:18:80:
         35:57:ed:de:ee:1e:28:b6:75:fb:3c:aa:2a:e9:bf:c3:ee:f6:
         a8:db:8e:46:db:5b:8b:39:63:69:6f:00:d2:8d:5a:2e:3c:3d:
         15:e7:35:9b:7b:b0:c3:2a:94:6a:de:4f:89:11:cd:1d:83:f3:
         ed:f7:65:40:08:95:69:6a:2f:aa:fd:8e:b9:0a:95:a9:8e:4a:
         93:f0:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:10:16 2025 by rpki-client