Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
File:                     vEwRj9Pu4hW2w_173dXCod42MwI.mft (raw, json)
Hash identifier:          RA+3dv+NaExm1oZ2Gqj3U2RUhC/bxmDt2M3baEWgS8k=
Subject key identifier:   FD:10:F3:88:8F:4B:3A:33:AE:74:4D:BB:52:05:13:50:9F:C8:2D:74
Authority key identifier: BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02
Certificate issuer:       /CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
Certificate serial:       0197B6A06A6B8770AFBC9931A8110E3D987E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
Manifest number:          103B
Signing time:             Sat 28 Jun 2025 13:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:00:55 +0000
Files and hashes:         1: vEwRj9Pu4hW2w_173dXCod42MwI.crl (hash: iJVvZmu7xlVcuU3DJiqzR+BSLFl9c9rGoj6BYDktdu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:6a:6b:87:70:af:bc:99:31:a8:11:0e:3d:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4c118fd3eee215b6c3fd7bddd5c2a1de363302
        Validity
            Not Before: Jun 28 13:00:55 2025 GMT
            Not After : Jun 29 13:00:55 2025 GMT
        Subject: CN=fd10f3888f4b3a33ae744dbb520513509fc82d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:3f:a3:57:31:1e:b3:6e:18:6f:07:8d:fa:
                    20:1a:b8:9c:9f:49:67:95:f3:25:e5:16:f5:d7:71:
                    ef:08:5e:85:9a:53:6d:59:40:dd:5b:f4:82:04:09:
                    fb:f2:e2:80:8b:76:58:62:4c:60:14:fe:51:7a:2b:
                    a1:31:6d:2d:3c:44:cf:c9:9f:15:51:d2:9e:d0:2f:
                    9b:e4:72:d4:63:e1:99:27:5f:ce:b1:ef:fd:8e:03:
                    7a:30:49:6a:0f:52:90:b4:b3:17:35:4a:dd:0f:83:
                    6b:1c:dc:34:4b:e1:8e:10:41:0a:1a:de:3e:c4:a1:
                    57:af:39:b9:9a:a5:00:1e:41:bd:1e:ed:89:96:37:
                    07:a4:14:fa:be:71:24:a5:95:30:4f:60:2a:62:9d:
                    90:38:ca:ca:95:a8:ad:45:02:46:2d:78:7b:3c:0b:
                    48:85:f3:40:3b:10:d1:30:e9:2c:4c:d9:34:6c:36:
                    c2:42:02:75:50:76:9d:40:3f:90:81:bb:65:b6:32:
                    a5:9d:18:59:34:ae:af:95:6d:f3:f0:4d:fd:4e:f6:
                    ba:bb:35:9a:57:20:c6:a2:96:85:c7:98:5d:93:05:
                    ca:f8:18:2c:be:bf:34:96:32:27:27:9f:5b:7c:95:
                    f1:f8:17:16:be:70:89:de:95:1e:11:b9:e1:46:a9:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:10:F3:88:8F:4B:3A:33:AE:74:4D:BB:52:05:13:50:9F:C8:2D:74
            X509v3 Authority Key Identifier:
                keyid:BC:4C:11:8F:D3:EE:E2:15:B6:C3:FD:7B:DD:D5:C2:A1:DE:36:33:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEwRj9Pu4hW2w_173dXCod42MwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/864f45-5d9d-4a37-8808-cce46ac4be04/1/vEwRj9Pu4hW2w_173dXCod42MwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:7c:a8:83:e2:da:9e:a6:77:45:7d:35:40:8a:be:6c:0e:
         a2:3e:78:8b:19:70:e6:9b:41:2d:62:fc:65:23:8f:4f:1c:f8:
         a6:4d:f0:fa:47:c2:3d:a9:55:a8:28:0b:64:cf:dc:53:ce:e2:
         0a:d1:39:63:29:b7:52:4e:4d:f8:44:0c:f0:2d:bc:b7:4f:b2:
         cf:e9:c1:b9:47:46:a4:bf:34:46:12:a8:77:57:ea:05:4f:4d:
         00:30:1a:78:b0:e5:c9:f1:6a:85:b8:34:08:38:32:46:b3:5d:
         32:57:03:fe:cc:f1:47:12:57:ae:2a:7d:eb:d7:eb:85:31:02:
         ac:12:50:7c:1e:23:91:a7:c8:e9:a8:72:fe:e1:92:80:5f:dd:
         b2:b1:6f:64:0d:6c:bb:63:bf:66:0d:7e:3d:c6:c3:14:09:87:
         85:e9:72:10:54:3d:3c:ed:b5:55:34:76:47:e4:d9:5b:6e:03:
         6a:9a:5a:bb:4a:a4:52:d9:71:4a:3c:a3:ed:3b:2a:53:4a:b8:
         de:2b:c9:08:40:01:bb:21:0e:de:3b:b3:4c:69:c4:48:b9:a9:
         63:7a:34:23:82:e2:77:cf:b6:da:35:e8:a8:aa:1d:10:f9:1f:
         05:58:c2:65:bc:7c:86:29:8b:04:d3:b3:72:28:c9:0f:f7:2c:
         21:47:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:12 2025 by rpki-client