Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File:                     vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier:          KNp8fgNoRBfYinXydG+g9iP87IB5DdXRTGD912037Fk=
Subject key identifier:   F2:E8:09:33:DB:62:66:4D:36:FB:55:21:D2:0B:0F:99:68:1F:54:0F
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer:       /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial:       019849661B282C1EB5BA9DAB971C57D75B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number:          0745
Signing time:             Sun 27 Jul 2025 01:01:25 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:25 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:25 +0000
Files and hashes:         1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: zj0/cUQli9WEP6HHVpMVMLvBCFTEvfC2+dfrfXSpYK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:1b:28:2c:1e:b5:ba:9d:ab:97:1c:57:d7:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
        Validity
            Not Before: Jul 27 01:01:25 2025 GMT
            Not After : Jul 28 01:01:25 2025 GMT
        Subject: CN=f2e80933db62664d36fb5521d20b0f99681f540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:96:2f:1f:21:98:8b:4f:cc:af:e1:5e:a0:6b:
                    f7:33:26:15:d5:e2:e2:48:24:31:5d:af:41:6d:4f:
                    25:a4:50:1f:ae:67:7f:af:05:b5:ee:5d:2c:12:f9:
                    c3:ab:18:de:6d:ea:fe:15:1e:42:29:d1:46:07:26:
                    72:33:39:14:5d:29:40:b9:f7:8e:2b:1f:61:d2:bf:
                    d5:5e:82:e7:ee:73:b0:00:a1:90:bd:34:19:82:8f:
                    b0:4f:f7:e6:66:f1:e1:7b:78:d9:ba:30:b1:9d:01:
                    7b:5c:d7:56:fe:95:2e:44:62:c0:5b:43:06:9c:df:
                    01:ac:ed:68:7a:c6:fc:76:fa:61:ef:5c:9b:6c:f3:
                    43:9f:31:32:ab:3c:13:d0:4c:d6:18:fc:72:20:36:
                    28:cd:2c:d0:47:e5:8c:51:88:8a:db:7f:c9:31:af:
                    c3:a9:77:02:5c:12:3f:13:15:72:06:18:45:36:ec:
                    fc:56:d0:4b:ef:d0:33:a4:72:b8:7f:14:78:e4:1d:
                    e3:09:a0:16:4c:60:23:f9:48:ce:ed:97:5a:22:f3:
                    ce:38:f8:73:73:d7:9f:a7:45:4d:7d:82:86:32:34:
                    c7:1e:3c:f8:e2:04:e3:30:b1:55:e9:4f:4d:2d:c4:
                    1a:e5:74:ca:05:09:ab:8b:67:9d:3e:b3:cd:47:31:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E8:09:33:DB:62:66:4D:36:FB:55:21:D2:0B:0F:99:68:1F:54:0F
            X509v3 Authority Key Identifier:
                keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:86:15:6b:61:3e:b3:e0:e4:fa:97:3a:fd:2d:34:e3:c3:78:
         01:f4:ad:e5:76:a0:57:8b:60:f5:b1:74:71:da:2e:bb:4f:03:
         18:1c:e3:a6:6e:80:41:62:e4:2a:dd:15:2f:dd:ff:17:23:ae:
         36:29:bc:6f:74:09:ba:d4:df:ef:fc:05:53:27:ff:a8:73:8d:
         50:85:a1:37:0f:ea:c1:12:f3:6a:74:bb:ad:3a:c9:14:ac:7c:
         8a:f9:b0:c7:17:28:90:67:e7:57:ed:7d:9f:5b:dc:2a:d8:62:
         a6:a1:ca:d1:9b:65:a7:0a:40:df:e8:94:8f:95:e9:cb:1c:6e:
         d1:83:73:e4:08:37:8e:21:b6:fa:2d:0a:df:c3:b8:7e:9b:f9:
         35:7d:98:e0:93:4f:9b:29:90:fa:b0:7f:8b:c4:df:45:b2:f2:
         a4:93:17:ff:78:02:2e:74:f5:36:3c:95:61:28:e4:ef:b0:00:
         4e:f8:ef:ae:79:3b:6f:07:60:8f:54:8c:e6:e7:f9:09:7d:e6:
         45:01:ec:7c:c8:ad:e5:a3:05:b2:b3:5c:5d:ff:c6:be:50:9f:
         84:62:89:8e:87:c0:73:90:d2:5f:53:27:01:05:04:96:84:c4:
         0a:39:0c:ca:36:1d:24:90:9b:f2:b5:3a:d8:57:63:48:89:c5:
         be:d1:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:55:37 2025 by rpki-client