Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          sca5zlz721JIYxPrEFBiPO1+Q8VSFDh0rv1PPcQapyo=
Subject key identifier:   A1:1D:63:3F:2A:FC:D7:2B:54:2E:A9:15:B5:6E:BC:CB:EA:7F:03:AC
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       01975FB962D8E3A395128EB2F764DC665D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          04FC
Signing time:             Wed 11 Jun 2025 16:01:14 +0000
Manifest this update:     Wed 11 Jun 2025 16:01:14 +0000
Manifest next update:     Thu 12 Jun 2025 16:01:14 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: WM2OoRio37HC/+mLORqIiqa3hQgLQf4IvdgmJOXRvuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b9:62:d8:e3:a3:95:12:8e:b2:f7:64:dc:66:5d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: Jun 11 16:01:14 2025 GMT
            Not After : Jun 12 16:01:14 2025 GMT
        Subject: CN=a11d633f2afcd72b542ea915b56ebccbea7f03ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:81:0d:d7:94:88:ed:00:c9:5d:4c:fe:e2:
                    77:df:1e:6d:5e:e3:f0:bc:da:3c:af:a3:8c:e1:b5:
                    f7:e7:86:41:78:03:ba:3f:4a:ca:f8:af:72:72:b8:
                    93:00:4c:e0:f5:b8:a6:e3:f8:c1:ad:d4:6f:b7:ba:
                    2c:3b:cc:39:4b:0e:cf:98:ce:da:a6:d3:8f:1f:f5:
                    48:84:01:0a:8c:34:c8:14:d2:fb:68:16:92:18:27:
                    62:4a:29:ff:5c:41:09:45:53:f9:fb:67:50:1f:b8:
                    9f:85:13:b3:54:97:43:14:e4:a7:26:a4:84:7d:9f:
                    0b:ca:dd:9e:76:10:b2:40:78:ed:49:6a:42:95:4d:
                    30:b4:fa:6f:e4:f3:c2:ac:05:31:54:36:38:e6:d2:
                    6e:4d:d2:35:47:42:50:3b:07:c5:04:c6:87:8d:40:
                    e7:aa:5c:b9:27:92:70:b7:1f:0a:f5:26:02:1a:4c:
                    7c:77:09:48:89:41:34:d4:4a:fe:f8:50:16:31:fd:
                    d1:81:ac:ca:2e:45:38:dc:af:c0:b9:23:ea:4c:6f:
                    d2:5f:f8:a9:9c:78:df:b9:b4:95:ce:33:06:14:13:
                    3c:97:9a:10:ff:3b:7d:bc:43:71:66:d9:f9:bd:96:
                    be:6f:6d:ef:7a:91:5e:d1:67:3f:3a:2a:eb:bc:9e:
                    70:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:63:3F:2A:FC:D7:2B:54:2E:A9:15:B5:6E:BC:CB:EA:7F:03:AC
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:c2:b0:5a:fe:ba:76:c0:74:08:f6:c5:86:16:85:c4:ee:
         d7:6d:21:31:a2:87:45:7b:80:50:8c:4e:36:2b:ce:a8:85:98:
         d2:05:18:9c:05:0a:a6:6e:06:0f:de:ef:ab:dd:cd:5a:3d:8d:
         30:fd:39:db:1e:c4:fd:ca:9b:09:12:1b:9e:d4:64:88:f5:49:
         37:f6:96:6b:47:3a:54:b9:bb:1f:ad:8f:57:02:d5:27:fa:f1:
         5d:5f:09:e1:91:3c:85:89:c4:e0:dc:b9:bc:16:50:3b:58:ae:
         a4:d7:eb:dd:6c:e4:cd:63:53:d2:a0:c7:23:63:b6:ee:4e:83:
         f8:e5:e9:bf:ce:05:e1:00:17:ea:98:40:f5:5c:9e:90:c6:da:
         36:8d:82:a0:cf:f5:38:a7:f9:c2:1b:44:a7:41:97:e3:35:65:
         b7:b4:05:20:4e:9f:f4:6a:ca:d2:64:16:d6:e5:64:93:16:9b:
         a4:d0:5b:13:ae:3d:80:96:06:f9:32:24:b8:a1:87:ba:f5:c7:
         f0:65:b7:5f:3b:8b:2c:ff:12:0e:5d:46:2a:5d:fa:73:a2:ad:
         f8:d1:fd:79:43:12:d7:1a:98:3e:04:78:32:a8:5a:53:5c:8c:
         9d:f9:88:1e:2a:3a:0d:8e:6f:b9:a2:3c:86:d1:6a:9a:8a:88:
         f4:99:db:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:35:11 2025 by rpki-client