Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File:                     VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier:          KN7mbK19tyUtMGVwH0IjIeZiyXJTuoKNoQ3Shfczlq8=
Subject key identifier:   67:1A:D1:23:05:74:CC:D5:EF:DF:29:B6:8A:D4:3B:0F:12:23:4F:E9
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer:       /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial:       0198D583F024D77E76CA7B3CD6802A879202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number:          094D
Signing time:             Sat 23 Aug 2025 06:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:50 +0000
Files and hashes:         1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: esCFOzVNjBAH4Z3913x1LwTGBygFa8tK1EH3WVRG/cA=)
                          2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f0:24:d7:7e:76:ca:7b:3c:d6:80:2a:87:92:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54913026f079cda241aef4514fd353c28330e461
        Validity
            Not Before: Aug 23 06:00:50 2025 GMT
            Not After : Aug 24 06:00:50 2025 GMT
        Subject: CN=671ad1230574ccd5efdf29b68ad43b0f12234fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:5f:76:2f:3b:06:83:3b:b2:e6:fd:72:a4:
                    f4:5a:04:0a:1b:35:ea:98:ae:8b:2f:ef:91:26:7f:
                    7e:ce:66:f4:ec:b0:4a:05:c5:7f:56:69:89:f8:cb:
                    75:56:1b:f1:ee:a3:1b:18:a8:94:01:bf:96:8c:16:
                    ee:4c:34:19:64:ff:b1:64:2d:2b:11:86:d8:d4:6e:
                    e7:cd:62:02:c5:e4:c0:28:46:6c:95:24:86:a6:5d:
                    0a:68:05:e0:f6:58:57:c1:40:ef:92:c5:2f:fd:75:
                    42:cd:7d:c4:d6:29:f6:8e:c0:8c:b6:41:96:60:ee:
                    c3:f0:de:d7:1a:ec:48:ef:fc:85:74:f2:6f:d3:71:
                    c2:e1:70:cf:5d:0a:51:dd:2c:4d:aa:77:35:b2:7a:
                    fc:89:2e:84:59:12:a9:b0:62:4a:50:c9:56:96:b5:
                    4e:47:dd:8e:60:fe:ff:70:f2:b8:3c:e7:0a:7f:b1:
                    f2:54:f0:3e:b7:fc:9e:5c:cd:b4:b2:52:c9:cf:1f:
                    9d:37:fb:5a:be:f6:83:c2:5e:a0:ae:d2:2a:ac:4b:
                    11:82:eb:ef:19:4f:9b:6c:71:61:27:9c:e7:4e:9d:
                    a3:e1:b4:8a:c7:91:04:98:9d:6d:d4:cb:d5:c1:9f:
                    77:c9:a6:94:ea:c1:89:15:07:d1:59:8d:5a:a2:91:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1A:D1:23:05:74:CC:D5:EF:DF:29:B6:8A:D4:3B:0F:12:23:4F:E9
            X509v3 Authority Key Identifier:
                keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ad:50:68:39:45:1b:24:bb:b6:9f:94:30:9a:ff:22:7e:53:
         c7:63:eb:db:f9:82:d1:ed:6b:f1:d3:d1:20:c0:5e:6b:f6:37:
         22:c4:7b:cd:70:dd:cc:d7:2a:73:a9:8c:6d:d2:70:63:e6:88:
         f7:ac:ca:97:11:df:dc:7f:3b:e3:79:7b:b5:91:10:5e:56:db:
         7f:27:4a:fb:3e:7c:b6:f6:6f:05:2a:a5:0f:cf:15:8a:58:b7:
         6a:70:14:4f:3e:50:ea:84:ca:8c:f0:d0:34:08:51:05:87:bc:
         f3:81:08:0d:03:c2:7e:60:b6:2a:09:52:20:6a:0b:58:6d:68:
         97:b1:f0:5b:90:6c:63:37:88:99:ec:45:8c:21:4a:63:b9:a6:
         81:32:fb:06:f4:bb:95:c1:d9:ec:c2:47:50:a0:36:6b:b8:2e:
         62:5a:8e:fa:0b:35:0c:fc:ff:42:ca:4d:de:19:ce:c0:85:cd:
         aa:95:91:78:99:54:fb:2c:28:fa:85:fe:7b:3f:ac:6f:c2:2d:
         ce:0b:48:e9:c3:e7:4a:47:06:54:eb:d3:d5:22:35:26:28:bb:
         ac:98:9c:0e:f2:51:10:e5:da:8b:d7:b2:e7:c4:88:ea:24:19:
         cd:82:b7:5b:a0:ab:2b:c9:7d:63:3e:74:62:94:25:bf:3b:76:
         f6:8d:23:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:30 2025 by rpki-client