Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          4u+6pZEheGjtnZ2+Ldh97QSXgZ4yPe2IVRB45tXsYXs=
Subject key identifier:   C7:E4:D4:F4:1A:DA:FD:F6:65:5F:39:50:6A:55:F2:24:3A:9F:F3:0C
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       0197B74568E94DD0F45351126BBF47C60CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          054F
Signing time:             Sat 28 Jun 2025 16:01:08 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:08 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:08 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: WkZM8PBQ1IpRJ4jQGfBmE/iQS8E//Hjip+DiCGyS+gs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:68:e9:4d:d0:f4:53:51:12:6b:bf:47:c6:0c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Jun 28 16:01:08 2025 GMT
            Not After : Jun 29 16:01:08 2025 GMT
        Subject: CN=c7e4d4f41adafdf6655f39506a55f2243a9ff30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:68:4c:e7:7a:0d:ad:02:68:f0:1e:7b:1e:dd:
                    49:bc:37:97:7a:5f:83:d7:70:90:da:78:f2:89:e4:
                    a5:15:69:26:f7:b1:f1:d3:52:b8:c3:32:e6:ab:d0:
                    18:b7:94:98:e8:91:f0:05:7b:cb:ae:32:21:a4:21:
                    b6:26:11:1a:b6:da:a1:2b:31:3c:d8:99:5d:70:b7:
                    21:cc:a0:e2:63:36:af:fe:cf:49:11:19:21:a6:1f:
                    a4:5b:3c:94:30:63:42:7c:c9:30:0e:a7:09:11:ce:
                    aa:a0:41:0b:0e:0b:cc:b9:41:28:96:01:07:75:15:
                    69:96:fa:10:6a:7d:5c:47:a1:66:b7:6b:50:14:05:
                    c0:45:76:43:45:b2:f0:09:27:57:d5:fd:66:74:05:
                    63:41:68:f2:74:1a:fa:16:e0:4f:35:0d:7f:99:cb:
                    8f:9c:e8:33:d2:2a:6c:85:ec:53:33:c9:9c:e6:46:
                    e6:e2:ea:b1:58:be:08:cd:b7:f0:e6:68:1a:cd:e7:
                    93:0f:a6:56:b3:e7:6a:6a:97:f2:ad:96:b5:85:ab:
                    2c:15:35:49:bc:20:eb:84:a7:ce:47:99:da:70:9c:
                    62:6d:6a:64:4e:51:d9:72:a3:f4:09:9f:fe:63:83:
                    10:32:ca:66:15:f2:32:13:21:4b:e5:c6:53:8b:48:
                    b6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E4:D4:F4:1A:DA:FD:F6:65:5F:39:50:6A:55:F2:24:3A:9F:F3:0C
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2f:b0:ee:85:fd:9a:a5:eb:f1:88:14:61:e3:d0:70:5e:2b:
         36:2c:15:c8:e5:2b:fa:8e:c8:ed:e1:fc:ad:35:a0:07:ed:d9:
         dc:27:21:2c:c2:2b:20:5a:32:6c:c1:01:88:55:9e:e5:b4:97:
         96:9a:94:a0:cc:ed:d3:10:b6:f3:0d:b8:5c:e6:15:14:fa:51:
         5e:c5:e0:cb:81:79:61:6f:69:d1:7d:3b:32:24:5c:b2:ef:bd:
         55:e6:4b:cd:cd:38:b6:28:ec:41:ac:ce:0b:37:6d:6d:30:f1:
         20:68:04:30:43:9e:e0:a1:03:cd:27:94:51:d2:73:73:88:93:
         9b:83:93:20:14:90:39:6f:92:ce:d1:bc:c2:03:f6:4b:eb:02:
         3c:09:0c:75:dd:12:b6:57:26:0e:aa:5c:a8:75:b7:27:0b:77:
         0a:fb:b3:52:85:9b:13:47:89:0a:f0:93:61:67:9f:88:5e:79:
         4b:7e:0d:8d:37:e6:98:ba:85:20:24:84:f6:8e:05:18:e0:8b:
         a4:0c:2c:29:65:2a:96:08:d5:ad:62:73:77:74:69:c9:76:f0:
         c7:9b:ff:d3:27:39:53:36:5f:79:90:f9:09:11:01:08:5b:26:
         c0:89:45:65:e3:c1:a2:b1:09:56:22:7c:d1:7d:2e:03:06:ea:
         b5:06:89:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:23 2025 by rpki-client