Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          Vnuqx78uVrMQOWS9hyMvHTCXOd+x5ibZU4MJTGLrmc0=
Subject key identifier:   6C:0B:7F:19:A9:B6:07:AC:E1:46:86:F0:74:78:B4:96:1E:AF:E9:1D
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01984B53CBC8E996846252ED07963A34C22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          1297
Signing time:             Sun 27 Jul 2025 10:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:39 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: UJs5AHesvQ0gWvkSuEqwhTauBbL7eVP9FFVtr3/vzCY=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:cb:c8:e9:96:84:62:52:ed:07:96:3a:34:c2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Jul 27 10:00:39 2025 GMT
            Not After : Jul 28 10:00:39 2025 GMT
        Subject: CN=6c0b7f19a9b607ace14686f07478b4961eafe91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:7e:c9:90:11:34:6f:81:e2:02:d3:e2:6c:
                    40:05:6c:6c:e8:fd:98:e5:d1:22:d5:cf:cc:d5:1d:
                    24:1b:e5:2c:8c:a8:6b:28:fe:42:00:7e:40:5e:0d:
                    ff:35:ec:c3:1c:a8:a7:ec:61:fe:b7:86:a0:36:7e:
                    82:f8:ee:e1:bc:5e:e1:71:af:04:83:a2:eb:03:97:
                    78:57:69:2f:e5:63:ae:85:fb:25:5b:4a:fc:04:01:
                    ef:ad:52:fd:3b:e3:3f:72:84:52:21:60:ad:5d:fc:
                    17:21:41:bc:9b:3b:a0:7d:6a:dc:65:5d:c2:90:ba:
                    49:b1:9c:ee:5f:75:7f:06:f5:e6:98:f0:69:43:9d:
                    3e:75:f3:a1:0e:99:96:d2:2a:74:08:33:d2:8f:4c:
                    1b:b0:b8:d3:d8:68:47:90:65:c4:df:30:be:9c:06:
                    36:5f:b5:66:e9:7e:a5:0d:54:e1:04:80:bb:21:4f:
                    31:73:d7:2a:c6:f8:6e:ce:6f:d0:5e:8e:d9:6a:b6:
                    b7:22:53:59:c6:86:d2:49:d1:6f:15:b9:bc:2c:a3:
                    51:8e:ab:ce:54:6d:12:18:e1:1b:4d:6c:32:c7:bf:
                    22:91:e6:6c:b9:5c:f6:36:7f:3d:5d:4e:a8:60:e1:
                    d8:94:fc:76:65:fb:08:4c:2a:04:0a:6f:40:80:15:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0B:7F:19:A9:B6:07:AC:E1:46:86:F0:74:78:B4:96:1E:AF:E9:1D
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:6d:7a:9a:ba:f9:5b:74:ec:dc:9f:ae:3d:e2:1c:4e:88:
         8a:89:5e:28:7e:84:ee:d9:c6:85:d6:c9:7a:42:7f:e9:0e:20:
         74:15:e3:5d:22:58:9b:68:97:f8:93:70:03:8f:d9:3a:bc:54:
         35:93:af:43:6c:1e:6a:58:38:45:52:7b:f3:28:03:2b:45:ee:
         75:90:6e:3b:6e:98:1d:dc:d8:a4:8f:c5:cc:36:b2:f3:d9:47:
         a9:99:b2:03:60:9d:76:61:34:09:67:14:13:f3:cb:7c:72:88:
         98:ce:a6:d0:79:0d:d2:01:1d:90:9d:f9:17:14:a2:77:53:2a:
         5d:7c:6e:ae:9d:21:d9:d9:81:b9:ed:b3:aa:d7:28:e3:9d:d8:
         4b:68:d4:ac:22:43:24:bb:fc:75:fb:ce:a4:0c:4c:71:0c:57:
         51:a2:e1:89:37:71:83:24:1c:96:c3:9e:1d:91:d1:aa:a3:ad:
         4b:1c:c1:be:a1:f8:e3:4a:cf:72:4e:6e:9b:21:63:1d:d6:0c:
         f9:06:8b:a5:92:3c:24:38:7b:0f:05:24:5b:1e:09:d1:45:48:
         d2:7d:69:d2:f4:1f:97:fe:29:52:16:fd:a4:97:0b:67:58:a3:
         ce:cd:9e:4c:08:0e:f4:b6:d6:49:d2:5c:d4:ee:b5:f7:30:57:
         8b:c4:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:04:18 2025 by rpki-client