Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          OidlTC56tA9m7oiShfQsNJMxWiW0mTm7GBmNzYtlANQ=
Subject key identifier:   EB:40:37:01:20:5C:2A:71:37:C0:BB:A3:89:47:0D:AD:47:F5:66:C6
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       01974EFC8588F089523BA4E6E12F9CEE17CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          0519
Signing time:             Sun 08 Jun 2025 10:01:01 +0000
Manifest this update:     Sun 08 Jun 2025 10:01:01 +0000
Manifest next update:     Mon 09 Jun 2025 10:01:01 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: ChgzQmuIaQ/vRHLZr2sNsp+dV/1ZS1krXO3uxlyYeY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:85:88:f0:89:52:3b:a4:e6:e1:2f:9c:ee:17:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Jun  8 10:01:01 2025 GMT
            Not After : Jun  9 10:01:01 2025 GMT
        Subject: CN=eb403701205c2a7137c0bba389470dad47f566c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:6f:4c:a7:58:81:aa:02:9d:6a:4a:4c:fa:
                    7d:cb:35:70:8f:4c:ac:fb:00:47:7d:da:f9:78:1d:
                    2a:e0:9d:4b:b6:4f:c7:10:66:dc:fd:f7:1e:66:ee:
                    96:ea:17:df:0a:ac:b7:c1:58:81:1c:db:be:a3:b6:
                    86:d4:5e:93:56:40:d9:c9:8c:fc:35:8b:86:2a:e2:
                    6f:85:98:f1:b1:df:8e:a6:09:86:88:db:36:de:e0:
                    cd:bf:bf:82:47:de:85:e3:27:25:cc:b9:bc:3b:ac:
                    95:1f:eb:ac:48:11:cb:e6:68:c5:eb:62:40:3c:dd:
                    d1:40:74:23:29:51:43:c8:1d:4c:26:50:b4:71:23:
                    0c:93:8b:17:d5:55:38:6f:ea:7f:ce:5a:fc:90:bc:
                    c3:de:56:0f:e0:26:6e:18:0f:1e:47:4b:9e:24:44:
                    42:88:d5:56:e5:eb:5d:08:58:9e:d3:2c:3f:3f:4e:
                    c3:be:96:db:56:48:44:65:32:68:09:5d:b0:68:92:
                    a2:e3:96:1e:c4:f9:15:6a:9f:d4:d4:bf:f8:38:f6:
                    fd:4e:a1:f9:52:54:4f:50:1e:ef:db:9d:5d:79:57:
                    db:b8:52:fe:4c:21:c0:93:39:35:e0:d3:24:73:94:
                    d4:c0:6a:9c:b8:10:69:54:87:6b:d9:81:e5:d5:b8:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:40:37:01:20:5C:2A:71:37:C0:BB:A3:89:47:0D:AD:47:F5:66:C6
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:54:dc:72:1d:07:2c:17:97:0a:aa:da:54:3e:af:2b:21:d6:
         3c:26:91:2a:9e:76:ed:86:d2:5c:fe:89:bb:52:d0:9e:f9:9f:
         f8:3c:8e:97:04:d8:f5:42:af:a5:61:fb:0d:95:f6:27:c3:5a:
         7f:4b:22:07:0e:fe:6f:1e:18:d9:5f:c6:b7:83:7e:d0:77:fe:
         4f:a2:15:82:88:0d:c6:ef:a5:47:97:3e:a1:3c:17:b4:12:80:
         06:61:30:32:78:e5:56:c6:27:32:44:fe:6c:78:01:fc:76:b4:
         55:e3:0f:b8:db:d5:ee:a2:a9:a4:3c:27:27:27:e4:4e:7f:67:
         a4:11:ea:c7:d9:ba:2a:3e:1c:1c:2e:53:26:94:e7:43:db:5f:
         af:58:81:6c:ee:f6:76:15:a1:72:80:e9:99:ad:57:53:c2:08:
         03:19:ef:af:a2:88:bc:82:23:91:ac:cc:e3:a4:a2:24:d9:1d:
         57:85:34:9b:52:c8:f7:42:17:6a:ee:99:c4:fe:72:8d:33:1c:
         27:ee:51:ba:ca:a3:b7:8c:5b:ab:ac:5d:4f:ee:bb:0e:c5:c6:
         0c:50:42:0e:e2:44:f3:4a:1b:82:e2:04:de:3f:4f:1a:11:85:
         ca:cc:ff:8c:e0:d7:ee:f2:6a:66:ad:85:c2:2d:8c:b9:7d:62:
         bf:9d:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:40:39 2025 by rpki-client