Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          pJe8Atheyz5fOSBhU81pB0zq5SXFjM+ZEs14jp2RfcU=
Subject key identifier:   77:0C:C8:3E:C3:54:EE:6F:20:58:A9:4B:1A:22:EA:38:B2:EB:2E:4C
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       019921B09CF0BB6C246B816FDA362E4669C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0E38
Signing time:             Sun 07 Sep 2025 01:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:46 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: yvELcW4mbBEz6AT+WbmFN76a1lqcix/YwxSkCbZTTR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:9c:f0:bb:6c:24:6b:81:6f:da:36:2e:46:69:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Sep  7 01:00:46 2025 GMT
            Not After : Sep  8 01:00:46 2025 GMT
        Subject: CN=770cc83ec354ee6f2058a94b1a22ea38b2eb2e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:8a:43:ef:1b:2c:94:7f:74:f6:ed:99:52:
                    f0:e9:fe:41:57:37:b8:35:73:35:59:b9:70:66:85:
                    5f:8a:73:1c:79:85:40:80:e6:de:b0:dc:76:fa:a9:
                    48:12:8c:b4:a2:d7:86:bb:1c:46:cc:1f:ef:b5:7f:
                    c7:c5:b2:88:6f:3f:de:2d:04:20:79:e3:28:1a:0e:
                    3a:72:06:cd:e2:e8:e8:46:cb:1c:f1:a8:d4:85:a1:
                    cd:40:28:ef:b4:74:e5:67:62:78:2f:ff:b2:a4:4e:
                    99:e3:fb:90:4f:3e:7d:5a:11:96:d2:a1:d0:51:6d:
                    78:ee:2a:7d:4c:0f:ec:d4:c9:fa:0d:27:e0:ed:f7:
                    7b:c0:82:89:3a:7c:d9:f8:3c:93:dc:9e:77:ff:d4:
                    48:1d:b9:f2:47:22:b4:46:3f:6b:14:90:74:76:9b:
                    0a:88:fb:5a:95:93:12:1d:54:15:a4:f4:04:d3:cd:
                    2a:d4:99:be:30:fe:09:9c:2b:6f:e4:e0:53:66:e1:
                    cc:ba:dd:37:5e:59:92:35:2c:b2:18:29:c6:75:78:
                    58:b3:4f:ad:64:a9:5a:0b:d8:72:bf:a3:ff:22:60:
                    21:c2:df:9f:07:15:af:14:d3:22:a2:5a:f2:4c:f8:
                    e8:46:06:54:14:6b:09:64:82:97:f8:56:cc:22:30:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0C:C8:3E:C3:54:EE:6F:20:58:A9:4B:1A:22:EA:38:B2:EB:2E:4C
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:95:c1:c2:5f:2b:88:30:a0:79:a5:3f:1c:3f:70:9f:be:da:
         58:57:0d:2a:8c:0e:84:d6:61:e2:45:83:05:37:39:77:6d:34:
         da:79:f1:b0:28:89:57:bd:28:06:c0:f7:c3:58:d8:ad:d4:82:
         70:ad:07:c4:41:d3:36:8c:76:23:59:6f:68:38:43:ee:b1:a5:
         80:05:63:03:03:a0:fb:44:8d:61:7d:8b:a9:bf:77:41:9d:dd:
         a6:d6:7d:44:ef:bb:7f:a9:44:1b:68:90:bd:ac:75:24:6d:ac:
         3a:f9:dc:f4:59:22:1f:0d:18:3c:7b:19:fa:4d:93:00:e4:6c:
         91:10:8d:ab:e1:12:1e:07:a2:ea:de:0e:5b:3a:e1:c4:45:ba:
         74:10:a3:65:3a:9a:c8:0d:fd:76:2d:b4:40:c0:65:cc:28:d1:
         f1:9c:ea:b5:b8:42:fb:8b:b9:3c:04:c4:a4:16:6f:06:dc:74:
         64:0d:66:34:7b:48:5a:cd:37:9e:a5:12:1d:d6:c1:8e:32:72:
         c9:fd:44:ed:dc:af:d3:a1:3d:a7:bb:fe:ec:e1:10:24:2f:eb:
         fd:08:34:6e:43:37:28:cf:89:6f:90:66:d9:b2:51:e1:8d:1f:
         d6:99:2f:01:4b:52:36:ff:a3:04:de:e5:a7:80:c8:f2:e4:46:
         0d:e6:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:24 2025 by rpki-client