Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          gz66f6nYnXYslUAUVryy22zvkvuvrph72jVhh/4VFc8=
Subject key identifier:   EC:E2:0B:A6:87:B1:B3:F9:9E:74:C2:66:25:2D:78:AA:9C:E2:B2:61
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       01984777C63FA89277DE2D3E47EBB32EA965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          0320
Signing time:             Sat 26 Jul 2025 16:01:28 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:28 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:28 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: HXuBToaelM9GV2FjDAchbNUJGc5uiNQtdjmbQtZBi0Y=)
                          2: b9YEmpfPninMk0asKBNPcoiyaVU.roa (hash: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:c6:3f:a8:92:77:de:2d:3e:47:eb:b3:2e:a9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Jul 26 16:01:28 2025 GMT
            Not After : Jul 27 16:01:28 2025 GMT
        Subject: CN=ece20ba687b1b3f99e74c266252d78aa9ce2b261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:19:c8:22:bd:08:22:15:7b:85:8c:ff:63:
                    31:bd:dc:a9:a9:79:f1:ac:65:c6:c6:82:fd:d2:f3:
                    8f:b6:df:b9:59:28:bb:c3:b9:f5:bd:b8:85:89:62:
                    b2:21:45:ce:df:56:9b:e4:a0:22:ca:27:d0:7a:30:
                    98:94:5b:5d:f3:71:68:c0:f6:0b:59:1c:eb:54:ce:
                    32:39:68:6f:ca:82:32:9d:21:ee:d7:9f:24:24:75:
                    5a:78:b4:92:b8:f0:ea:b0:02:a0:a3:99:29:e6:ef:
                    ec:26:fe:ed:40:d3:40:38:4e:15:17:74:8a:96:04:
                    92:f6:05:df:9c:d3:a3:cc:3c:7f:dc:b2:ea:e1:6d:
                    d9:54:ca:57:58:11:47:33:5a:25:73:26:31:2b:62:
                    54:57:1f:6e:ca:ee:03:14:d8:6c:da:32:07:4c:04:
                    05:e1:d4:6f:9f:07:8e:d7:49:35:4e:55:74:cc:0e:
                    bf:5b:4e:f6:d0:7a:90:59:ff:22:4a:6d:14:2b:53:
                    c3:06:01:f3:13:49:95:7e:8f:a4:b5:5f:c0:5b:46:
                    d1:37:c7:f4:bc:ef:2a:80:48:d0:01:8d:33:34:e2:
                    d1:81:07:ae:bc:ba:70:1d:52:07:f0:1e:d4:42:ed:
                    2c:2a:fb:72:37:41:4b:bc:91:74:e9:b3:ca:4b:c7:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E2:0B:A6:87:B1:B3:F9:9E:74:C2:66:25:2D:78:AA:9C:E2:B2:61
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bd:5b:1c:90:aa:be:1f:67:f0:22:7a:10:f9:99:5c:e9:c1:
         17:42:e2:5c:1e:9a:ea:e4:0d:e6:81:24:86:ad:23:ab:b3:66:
         37:ff:dc:ac:8e:b7:e3:5a:a0:09:cd:9e:4a:ec:15:9a:30:64:
         66:5d:0f:12:f2:b2:45:4d:9c:f4:f6:c0:f0:f7:15:57:f1:d2:
         83:e5:9e:fd:ca:ec:40:0f:c4:e4:6f:2d:d2:16:86:ce:ef:10:
         46:d9:95:05:33:56:e5:ce:13:ef:d9:21:4d:79:c3:ff:b0:f1:
         69:72:3b:66:a7:4a:95:f0:6c:c2:18:b7:53:52:04:fd:f9:73:
         f5:2b:f7:75:8a:a0:49:f3:73:de:fb:e2:a8:b0:64:0c:4a:f3:
         30:84:28:81:ee:ff:47:12:ce:85:1e:56:a9:ba:8c:5e:dc:0a:
         ff:52:35:54:29:b8:21:3c:cb:4e:62:21:69:7c:6d:de:f1:9b:
         66:f7:81:ff:4a:46:74:f0:eb:e0:ee:c8:c3:65:56:6c:8a:aa:
         c4:80:d8:02:5a:81:92:78:93:19:e8:e3:24:d0:00:b1:81:c3:
         c2:ba:16:25:31:55:44:e3:05:fe:34:76:f7:d4:f1:5d:7f:7f:
         48:ca:16:e8:a8:28:ed:88:4e:20:61:fd:32:e2:f3:c7:65:af:
         28:d0:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:51:20 2025 by rpki-client