Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File:                     vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier:          prIW6oQRsHJ+lbVW6EXRnbXs9PzUdEVaDLRTtjtx/nE=
Subject key identifier:   63:43:A8:C5:F4:0B:2D:A6:08:0D:7F:4F:1C:51:74:BF:CD:96:1E:C4
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer:       /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial:       0199221EF9378DD84863554E365E48D65E10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number:          0262
Signing time:             Sun 07 Sep 2025 03:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:19 +0000
Files and hashes:         1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: tsY6VYIytp8Tnnhbet9MP9lnc4UICnkz7Q/7HlhUrMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:f9:37:8d:d8:48:63:55:4e:36:5e:48:d6:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
        Validity
            Not Before: Sep  7 03:01:19 2025 GMT
            Not After : Sep  8 03:01:19 2025 GMT
        Subject: CN=6343a8c5f40b2da6080d7f4f1c5174bfcd961ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:53:d0:fd:80:b4:b2:c2:fa:39:15:0a:f5:
                    42:b5:b5:f7:db:e1:e6:a7:96:7f:ce:21:7f:1b:f6:
                    70:c4:56:0b:97:bd:d9:b8:1a:99:d0:62:f8:b8:1e:
                    da:1b:01:a3:36:b2:6a:77:d8:e1:b3:56:35:fa:32:
                    88:6b:7a:c3:13:2a:c5:b0:c5:3b:90:47:50:a1:1c:
                    22:9b:b2:72:c6:46:95:1b:f0:b6:ea:d0:2c:5f:9b:
                    56:81:e1:2c:a5:b9:11:61:59:28:b0:b7:3b:39:77:
                    ed:89:32:05:de:13:ab:0a:96:df:f9:14:ee:2d:ff:
                    fd:5d:11:7b:07:a9:83:8e:0e:f5:42:93:96:e7:a7:
                    71:58:85:c6:87:fd:32:a3:db:1c:6b:63:94:cc:39:
                    61:ed:f3:f6:76:77:2d:f9:17:14:5a:53:7f:41:bb:
                    ec:a7:3c:75:85:bd:58:b3:88:75:bf:eb:4e:32:16:
                    0d:97:65:52:6b:45:5b:0b:fb:9c:f7:8c:f3:c9:59:
                    bc:cd:e5:15:db:a5:79:04:8e:1e:2a:c6:7d:63:35:
                    b2:9d:6b:19:eb:52:17:8f:ed:8a:6b:ed:69:ca:85:
                    d0:25:e4:c8:e1:30:d3:90:27:ca:9f:9a:a4:64:28:
                    ed:25:92:3d:11:f6:5d:e6:25:27:e2:26:df:97:5a:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:43:A8:C5:F4:0B:2D:A6:08:0D:7F:4F:1C:51:74:BF:CD:96:1E:C4
            X509v3 Authority Key Identifier:
                keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0a:70:1d:38:bc:aa:99:68:d3:54:ac:4b:99:0e:06:f7:ca:
         e5:16:92:32:80:c4:b0:48:a6:a2:88:e5:03:62:c8:fd:36:09:
         2d:a2:c0:70:cd:86:39:de:30:55:65:57:e9:07:af:74:b9:28:
         ba:ae:4c:45:fb:14:2d:a5:57:19:1f:53:6d:f9:0c:88:2e:b4:
         1d:b7:91:6f:a5:70:92:52:19:6e:53:b3:cf:91:27:93:fd:01:
         d5:46:1e:cb:0e:f6:f6:b7:bb:ba:0f:31:c6:94:40:13:cb:69:
         46:68:60:5e:69:b3:cc:6f:b3:57:32:d4:02:88:36:a6:09:67:
         d0:f7:47:16:6c:a5:da:4b:e9:1e:dc:69:37:a6:39:3c:23:5e:
         ea:26:f0:d0:54:ab:d0:b8:28:0d:98:89:c0:1e:19:60:ed:19:
         b1:9c:0d:e2:4c:1f:32:5a:85:95:f1:d9:f4:46:ca:55:2e:57:
         8d:cb:3c:b0:d3:71:59:5a:c8:17:ce:aa:1b:35:da:01:cc:53:
         e0:5c:76:4b:e7:1a:30:2c:31:da:8a:ac:c9:48:20:b7:50:17:
         d7:49:fb:af:3f:81:d6:c9:f9:b6:5a:9d:8b:ad:78:7d:89:b4:
         d7:ab:8e:69:71:d6:3a:e4:dd:a4:c9:74:e8:c3:46:a9:72:15:
         32:4b:97:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:48 2025 by rpki-client