Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          2bo0L3mjB68DOyWYSwywN+rjtattKIQfUOTRuYVjREQ=
Subject key identifier:   C5:E7:5E:85:AA:1E:17:39:F0:1E:D8:F5:E0:77:47:6D:45:09:8D:A7
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       019935A542FA6E6FED108732FA043F6E4733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          167D
Signing time:             Wed 10 Sep 2025 22:00:46 +0000
Manifest this update:     Wed 10 Sep 2025 22:00:46 +0000
Manifest next update:     Thu 11 Sep 2025 22:00:46 +0000
Files and hashes:         1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: 180mvw4oyeqdEg8+3HzvjiLrXYKhs2GS+jPe8k4bEP8=)
                          2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:a5:42:fa:6e:6f:ed:10:87:32:fa:04:3f:6e:47:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Sep 10 22:00:46 2025 GMT
            Not After : Sep 11 22:00:46 2025 GMT
        Subject: CN=c5e75e85aa1e1739f01ed8f5e077476d45098da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:17:13:00:14:14:26:6d:a9:d3:2d:dd:cd:d2:
                    96:c3:ee:8c:c9:3f:70:93:95:46:aa:57:5a:32:d5:
                    29:cd:ef:8c:31:57:55:04:b5:83:64:d6:5a:2d:11:
                    7c:71:36:bf:86:13:05:c2:d5:d6:58:af:ad:7c:aa:
                    3e:21:42:42:00:0f:f6:16:6d:4f:1f:57:6b:14:46:
                    a8:33:aa:fa:64:e0:ff:5e:e1:9a:0e:df:5a:96:77:
                    f6:93:76:9c:32:3d:3d:51:07:ea:6b:23:b6:11:9b:
                    6e:d4:e8:38:eb:d0:72:d7:46:be:f5:09:2d:94:7d:
                    94:74:80:8f:b7:58:79:52:a6:47:bf:56:9e:f7:2f:
                    21:43:76:31:31:66:3b:58:6a:f6:b9:06:41:bb:6b:
                    ac:a7:3d:f0:63:1e:32:54:d8:36:c8:fe:a7:61:54:
                    b2:3d:d4:24:8d:04:8f:0f:7c:b8:25:5e:f1:24:43:
                    a6:bc:32:77:76:12:72:49:0a:5c:a6:62:9e:23:b8:
                    b3:ce:83:07:ce:d6:f6:fc:ad:27:58:fd:60:83:51:
                    b8:5c:e3:e4:46:83:81:de:8d:04:6f:81:bb:0e:70:
                    f3:ab:8e:2f:20:4d:86:1c:7a:89:c0:26:c6:8e:67:
                    3b:22:08:2d:70:15:07:33:99:d6:ea:61:30:1c:0b:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E7:5E:85:AA:1E:17:39:F0:1E:D8:F5:E0:77:47:6D:45:09:8D:A7
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c6:95:92:b6:c6:74:40:e8:db:79:8f:22:ef:8c:28:1b:ec:
         69:8b:3a:db:a7:b1:62:85:f1:10:fd:cd:d8:03:1e:17:13:fa:
         67:ec:d6:08:68:fa:2d:c9:d6:1e:10:ef:ce:1c:1a:63:4f:cb:
         6b:14:18:9e:b8:00:a0:55:bf:6b:4e:f5:ab:a1:3e:f7:f3:93:
         5d:9f:8d:f9:ec:49:19:28:29:09:9b:0e:f7:59:c4:c7:1e:e9:
         21:0a:21:df:f6:1f:14:44:84:1d:76:ca:73:5f:88:3b:40:b5:
         f2:7d:e1:9e:70:3a:95:cb:ce:b5:7e:ed:5d:11:36:fe:1e:39:
         67:76:75:b9:ce:ce:53:d2:fa:92:f7:ce:5f:3b:a0:8e:e4:a4:
         16:24:98:8d:64:7b:2e:85:de:77:d6:12:f8:11:ab:1e:5c:84:
         9c:aa:58:93:cc:17:53:ee:a0:9d:03:43:20:6d:56:90:07:c5:
         00:50:bb:18:98:98:cd:fd:2e:61:b9:05:c6:d9:17:c2:c0:46:
         7b:03:24:b3:cc:36:d7:df:9c:07:58:00:dd:62:dc:01:58:a7:
         00:c4:52:4c:03:1a:21:79:5c:69:25:86:b4:75:77:8c:53:3d:
         83:68:34:c6:fd:82:0e:19:62:b8:20:b3:fa:86:4e:64:06:70:
         16:08:de:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:23:58 2025 by rpki-client