Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
File:                     VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft (raw, json)
Hash identifier:          GKYCRvIi8idIn600mNBj09V6voj2s88z+d1eqmtlwXY=
Subject key identifier:   00:A7:A7:E6:C3:2B:C1:C5:23:39:3D:7B:68:71:32:8E:B0:52:E7:5F
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Certificate issuer:       /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial:       0197B5C4CCC8A9725C729FC1A6A35D1D73BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
Manifest number:          08B8
Signing time:             Sat 28 Jun 2025 09:01:02 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:02 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:02 +0000
Files and hashes:         1: VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl (hash: qt9LT8yGbJ+Dgop5MJSJLRxkn/a/HUUM89y9+BLnHno=)
                          2: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (hash: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:cc:c8:a9:72:5c:72:9f:c1:a6:a3:5d:1d:73:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54913026f079cda241aef4514fd353c28330e461
        Validity
            Not Before: Jun 28 09:01:02 2025 GMT
            Not After : Jun 29 09:01:02 2025 GMT
        Subject: CN=00a7a7e6c32bc1c523393d7b6871328eb052e75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bd:45:89:b6:9f:ce:8e:a0:64:b2:92:f5:eb:
                    86:86:c8:25:e3:c3:db:2a:3c:01:9f:f2:e5:1f:f1:
                    91:ef:54:49:d7:e4:8b:24:05:73:3d:4b:75:12:a9:
                    0e:3b:8b:06:6f:b9:1d:55:ae:e3:78:cb:0a:15:93:
                    98:72:c4:d6:2f:44:8c:00:03:8d:a7:c3:9e:8c:4c:
                    2f:9d:08:f6:68:49:79:47:c7:30:1b:92:88:01:b6:
                    b0:e1:2e:39:23:5d:73:c8:64:ad:fe:c6:1b:76:64:
                    a3:d2:e3:be:9c:99:cd:fa:c7:93:1d:fa:46:69:00:
                    9d:1e:6b:9a:5e:17:6f:a3:ba:86:99:86:16:6c:42:
                    2c:00:70:e5:50:7a:c1:cd:65:98:aa:f0:4d:65:69:
                    b8:9e:34:98:1a:33:c7:c2:8e:ab:eb:41:ae:8a:6f:
                    25:89:8f:c1:11:2a:37:77:43:da:17:a9:4f:80:a4:
                    8f:54:33:54:e6:e8:43:18:36:49:06:d6:35:8a:fd:
                    f8:f3:28:43:50:a9:4e:c0:c0:d7:32:d3:da:d5:87:
                    e4:85:d4:c4:91:ab:0f:12:88:6f:e5:88:1f:a3:b9:
                    62:7a:3c:28:a8:58:fa:15:b3:6d:13:d4:c2:19:a3:
                    26:f3:29:d6:73:89:1d:b0:2e:1e:18:5d:79:b2:9b:
                    31:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A7:A7:E6:C3:2B:C1:C5:23:39:3D:7B:68:71:32:8E:B0:52:E7:5F
            X509v3 Authority Key Identifier:
                keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d6:3e:f8:19:87:c0:30:2e:f6:35:85:c4:ff:c5:a2:00:f7:
         73:06:b8:47:33:fb:24:91:09:95:19:e7:c0:9b:84:77:b7:ac:
         c0:05:c0:c6:4d:7c:1e:2e:f2:64:c4:d6:d2:1a:13:2b:0b:8a:
         22:10:78:f3:0f:a0:e9:6c:73:44:29:4b:53:12:13:02:1b:a1:
         3f:1f:bb:6f:c1:63:1f:5d:d1:5f:d8:26:01:fa:15:53:cb:a1:
         7e:9b:a5:5b:e9:31:09:50:6d:6d:e1:69:7a:62:3f:88:7b:d4:
         c7:02:e9:c9:56:93:82:d9:37:34:cb:b4:71:15:53:69:cf:73:
         f8:b1:42:c5:c1:56:6f:04:c4:02:d5:ae:87:c1:8d:da:5e:6b:
         3e:c2:1f:6a:9f:2f:b1:a6:44:9e:e1:06:36:30:2b:32:4f:57:
         85:ae:2e:5a:01:18:40:b4:8c:7a:1c:ec:2f:1e:ba:d2:ff:2e:
         36:67:9b:ba:de:61:3b:40:2b:f5:9f:cd:6f:28:91:9c:c3:9f:
         3e:bf:3e:c4:4d:b8:c2:46:bf:a5:8c:fa:75:3e:f5:e6:08:e9:
         6a:71:14:4b:49:84:90:fb:62:c7:e6:a9:4e:2e:21:48:27:d0:
         36:96:ff:cd:3a:3a:89:fe:c6:48:2c:bd:25:a7:97:03:b5:70:
         b9:5b:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:23 2025 by rpki-client