Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File:                     VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier:          t7WgHr4R+Ee7YjVqmY4MhhyOMQxrBNC6LFzLmREWQAo=
Subject key identifier:   0F:4B:4B:72:B6:05:91:55:52:38:65:DD:2C:68:E7:E8:50:12:EC:29
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer:       /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial:       0198D73AF896D6028662C76B6CD264F5B669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number:          57
Signing time:             Sat 23 Aug 2025 14:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:22 +0000
Files and hashes:         1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: 4ROngcRJMnIo1VSwSZiXOaICDdiS+3/9uTAFlIUz+4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:f8:96:d6:02:86:62:c7:6b:6c:d2:64:f5:b6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
        Validity
            Not Before: Aug 23 14:00:22 2025 GMT
            Not After : Aug 24 14:00:22 2025 GMT
        Subject: CN=0f4b4b72b6059155523865dd2c68e7e85012ec29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:04:3c:e3:3a:ea:4a:b1:97:4e:30:21:47:
                    67:68:f3:b0:7d:78:da:4b:3e:94:dc:c7:21:2e:fa:
                    70:4b:9e:c7:2e:bb:f7:58:b2:03:77:95:94:e8:15:
                    77:c4:f1:7c:16:3b:e2:be:e8:5c:c1:53:fa:c3:af:
                    81:52:30:bc:89:9d:01:76:64:78:3a:85:09:48:0e:
                    ef:6e:11:58:a5:ff:14:38:4b:14:13:d4:06:92:8f:
                    3c:19:fd:58:50:e7:f2:4e:61:fd:48:47:f0:0e:2a:
                    27:7e:4f:56:62:7f:76:04:3d:80:7a:43:4b:26:a6:
                    fc:87:26:13:9c:c1:fe:34:1d:93:69:7a:d3:8b:2b:
                    1e:b2:c1:58:c7:7b:42:c1:08:4a:79:e2:a6:8d:a8:
                    ec:78:74:c2:b8:1b:12:12:1a:71:b2:ed:0b:6a:56:
                    95:fc:76:eb:ba:b2:8d:f5:8e:62:04:a0:f0:3f:92:
                    ca:73:ee:ad:b1:f2:dc:18:6c:37:1f:12:4f:ef:c2:
                    43:d2:5d:52:bd:60:9f:22:d2:d0:cc:a4:d0:ca:27:
                    ad:4c:cf:6f:aa:5c:fa:62:58:d1:b1:7d:81:fa:3f:
                    26:86:48:f0:a4:96:9e:59:a5:0c:5c:f9:47:6b:ab:
                    2a:31:81:9a:9d:7e:98:70:57:b4:6c:ff:57:02:f5:
                    e3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:4B:72:B6:05:91:55:52:38:65:DD:2C:68:E7:E8:50:12:EC:29
            X509v3 Authority Key Identifier:
                keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:1e:bc:cd:09:49:43:3a:2e:03:ed:e6:e9:d5:d0:ea:6a:
         04:bb:c3:47:d2:28:d1:f8:ee:3c:fa:e1:40:31:91:5c:e4:38:
         21:5e:31:b6:63:dc:aa:38:e6:fe:9a:62:8d:f0:65:3f:5c:bf:
         7d:a8:6f:6b:99:74:42:7f:db:d9:49:dc:bd:20:91:75:f3:aa:
         7b:12:6c:cf:fb:85:47:28:5f:ac:5f:12:a9:20:e8:90:5b:a0:
         ab:09:21:38:66:fc:bb:30:35:cb:a7:d9:02:ae:5d:ac:36:c4:
         61:6e:59:b7:b3:be:57:f6:6b:3d:d2:42:38:df:7d:fc:e2:8a:
         28:07:87:53:e9:51:f4:75:67:3c:83:df:9e:28:01:c9:c8:86:
         bd:20:33:55:90:9d:52:72:a5:82:33:76:aa:15:86:34:49:da:
         02:56:37:fb:a7:fc:e5:7b:fc:d4:58:cb:91:15:7f:fd:5a:34:
         8f:66:d8:40:29:e4:c3:4d:a2:c1:fc:1f:b3:b6:a1:5e:a3:56:
         8f:e6:dd:4c:43:3b:7a:22:d7:50:58:35:95:1b:89:e6:d1:22:
         a8:89:38:72:0a:cc:d4:4e:1c:62:71:4b:9b:9b:9c:92:f5:bd:
         34:e2:de:7a:74:22:3a:d2:5e:ab:24:72:34:5c:a7:97:0a:ce:
         47:7d:2f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:41 2025 by rpki-client