Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
File:                     VdCGNM-l6BZpPCt54ui4ruuvWXY.mft (raw, json)
Hash identifier:          2peraJ8QGI2YS5lTVCL8SNdnkX0yU6+4UqPn+wQfJ5k=
Subject key identifier:   F7:11:EB:26:D7:10:64:1E:32:AB:7D:AB:60:27:D7:AE:8E:D9:DD:78
Authority key identifier: 55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76
Certificate issuer:       /CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
Certificate serial:       019A71B8ED6FF965235C140EAC1B925F90A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
Manifest number:          067F
Signing time:             Tue 11 Nov 2025 07:02:16 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:16 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:16 +0000
Files and hashes:         1: VdCGNM-l6BZpPCt54ui4ruuvWXY.crl (hash: jcx+JM6TIRPVLX1HY2F4Xw8Q4eAQswWdH+Uhb0+PM+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:ed:6f:f9:65:23:5c:14:0e:ac:1b:92:5f:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d08634cfa5e816693c2b79e2e8b8aeebaf5976
        Validity
            Not Before: Nov 11 07:02:16 2025 GMT
            Not After : Nov 12 07:02:16 2025 GMT
        Subject: CN=f711eb26d710641e32ab7dab6027d7ae8ed9dd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:11:36:0d:b8:f1:24:2f:52:aa:63:19:a2:
                    3b:87:e2:50:d5:72:bc:94:e1:3d:33:36:79:3e:78:
                    42:ed:49:e9:79:b2:35:45:02:c3:4c:2f:ad:0d:a5:
                    c4:ff:84:20:11:90:30:de:15:09:47:0f:36:aa:25:
                    0a:8c:53:d7:30:65:7b:78:d0:37:7a:aa:9d:44:1b:
                    d2:8d:22:6a:01:91:37:39:b7:0e:06:9f:f9:a3:09:
                    63:93:30:b9:99:6c:43:0c:35:86:1e:be:6d:c7:b2:
                    f3:65:d3:44:db:d8:76:d9:9b:f7:fd:b6:66:87:9a:
                    c5:bf:c3:16:5d:2e:d1:d6:d8:ee:26:34:d1:fa:c5:
                    c4:8f:77:ff:24:9f:5e:f5:ca:fd:91:9a:c9:19:3c:
                    01:94:92:2c:65:b0:22:db:4b:7f:6a:d2:3d:94:4e:
                    b6:43:51:1b:ac:bb:4a:44:d8:d4:02:b1:6c:2e:7d:
                    8b:8a:60:1b:f6:cb:5f:ad:65:8e:3a:3e:a1:69:73:
                    da:24:be:ef:64:7e:2e:4c:5b:82:bd:b0:6f:f2:54:
                    ce:f0:37:3f:d9:d8:56:88:fa:72:e6:fa:30:76:3f:
                    03:b8:3c:9b:f8:c2:f1:68:34:05:7f:2c:a5:98:fa:
                    ba:eb:ad:95:49:6f:91:19:eb:1b:8d:0a:b5:c5:9a:
                    65:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:11:EB:26:D7:10:64:1E:32:AB:7D:AB:60:27:D7:AE:8E:D9:DD:78
            X509v3 Authority Key Identifier:
                keyid:55:D0:86:34:CF:A5:E8:16:69:3C:2B:79:E2:E8:B8:AE:EB:AF:59:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdCGNM-l6BZpPCt54ui4ruuvWXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1da73f-082e-4f17-b6a1-0575d0a46baa/1/VdCGNM-l6BZpPCt54ui4ruuvWXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:10:6a:91:e0:b9:e1:48:40:f0:96:63:0f:9e:d9:78:02:
         05:8d:48:23:4e:84:dd:1d:86:da:27:ab:52:d7:98:fa:6b:e4:
         c0:88:ca:81:70:8c:17:b7:a0:d8:56:31:58:81:0f:9e:00:af:
         ac:24:2a:f8:55:ba:01:1c:db:3f:2c:a8:0e:ec:ae:c6:52:42:
         8c:ca:e2:29:e7:71:95:a8:fb:0b:62:24:9c:97:77:e4:87:5b:
         e8:49:10:5f:07:a2:d6:6e:12:58:44:3b:95:bd:bc:6a:63:dd:
         a9:3f:c6:0b:f3:7c:d8:52:fd:1a:84:0f:8a:3a:dc:75:b0:80:
         4c:4e:f3:e6:91:ca:6c:a4:14:d8:99:c2:1b:d1:00:0e:4c:9b:
         eb:56:a1:a8:b2:6b:c9:f8:cf:16:f8:5f:22:5b:1a:40:46:16:
         4b:64:9f:be:4d:d4:42:a5:d4:b6:6c:e7:17:35:7c:38:95:b1:
         eb:42:ca:d8:7d:c7:47:9d:1e:5c:cb:7a:dc:39:da:9a:42:31:
         1a:06:75:f1:e2:9b:c2:49:38:11:4c:35:b5:5e:64:2f:86:fc:
         b7:21:fc:02:d5:51:82:e1:45:a1:f4:7a:90:d7:29:07:14:d1:
         ef:6e:3c:3f:96:ed:5d:76:1e:da:83:b7:60:3b:9b:ba:cd:8a:
         ae:a6:b9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:25 2025 by rpki-client