Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File:                     VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier:          phFlwoo3d2kS/KP5BdLzjjJOnSXTIBOXqY5mvJOpdEM=
Subject key identifier:   C7:33:53:89:C7:AA:FE:94:94:FD:81:ED:C5:38:3A:C1:06:B4:01:1C
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer:       /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial:       0198D4728FD3385690DC90C1458A835FC5E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number:          097B
Signing time:             Sat 23 Aug 2025 01:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:14 +0000
Files and hashes:         1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: PB++qeIMZp0Wq4ZhZZlLP74NbkLfwF/M5ySwa57fgNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:8f:d3:38:56:90:dc:90:c1:45:8a:83:5f:c5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
        Validity
            Not Before: Aug 23 01:02:14 2025 GMT
            Not After : Aug 24 01:02:14 2025 GMT
        Subject: CN=c7335389c7aafe9494fd81edc5383ac106b4011c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:fd:d4:33:f3:64:e8:53:f3:8a:be:dd:74:
                    52:ce:13:73:62:bb:c8:01:6a:14:33:f6:ee:71:2b:
                    42:94:b6:67:ce:d5:d2:c8:a8:71:91:c0:45:43:b8:
                    24:2d:f1:d5:78:7d:8f:c0:6c:61:a9:fb:1d:66:22:
                    26:20:e5:3b:a5:d5:a4:8c:e1:78:45:d6:f2:1a:51:
                    32:b6:2b:8a:78:30:26:05:8a:ff:21:ad:a1:3a:21:
                    e7:07:a4:8c:30:48:97:cd:bc:5c:83:a7:ee:a0:6f:
                    b5:11:d5:0c:db:27:84:bb:95:7d:74:92:10:87:47:
                    64:07:6a:0f:0e:ab:de:92:12:af:64:c6:56:24:6e:
                    89:23:39:69:b7:32:75:b5:5a:44:d3:b6:65:5a:a7:
                    c6:39:66:70:39:01:64:1a:48:38:26:50:5d:9b:50:
                    77:69:5d:80:73:8e:27:ef:76:42:c2:60:29:8f:5a:
                    6d:72:e4:75:a1:15:68:25:de:d5:31:5b:4c:8b:83:
                    97:54:41:b5:bf:16:fb:f8:3a:b4:84:3e:ec:42:b1:
                    d7:b2:0a:e7:8b:c6:a2:a9:99:58:20:6d:ea:e2:91:
                    45:f8:05:f1:6c:f2:84:e7:18:2a:c9:4e:9a:72:0e:
                    6d:0b:47:b8:2a:6f:88:8b:5c:dd:9f:b3:f6:4b:e6:
                    95:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:53:89:C7:AA:FE:94:94:FD:81:ED:C5:38:3A:C1:06:B4:01:1C
            X509v3 Authority Key Identifier:
                keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d0:e1:74:71:11:ad:e6:1b:d3:87:ab:63:7f:06:6b:8d:9e:
         06:07:5e:26:3b:33:27:d7:ae:52:30:29:7d:63:49:0d:78:3d:
         31:d0:44:cc:76:9e:14:9c:e2:81:f1:b2:9b:61:23:4a:fa:76:
         25:33:40:79:19:ec:63:4f:43:9e:c2:8f:38:23:45:6e:86:64:
         e3:bc:bd:03:a2:2b:a9:0d:51:ec:8e:41:f9:94:12:79:46:cd:
         c0:eb:14:c7:a0:36:73:c7:bd:26:7d:8d:7c:00:b5:22:ca:cf:
         c3:20:ac:fe:9e:e5:40:db:52:9c:bc:4f:5f:f2:1d:52:9d:8d:
         8e:bb:45:b8:58:67:9b:a8:0b:20:05:ea:f0:74:58:ab:40:44:
         82:0e:41:17:c7:d8:9b:61:64:eb:fe:a9:61:4f:2d:b2:81:be:
         c5:4b:11:8f:cf:8a:5b:55:d7:0e:9d:b3:9d:9c:c7:0b:dc:bf:
         79:b1:f2:b4:71:ad:34:d1:b0:3c:c2:c6:a2:32:20:d1:1f:8b:
         d7:2f:73:b9:7a:62:a3:9d:47:46:fa:b5:05:d1:82:a7:e3:db:
         bc:3f:12:68:97:ab:1d:33:e4:56:98:71:2c:1b:b8:23:86:e4:
         b8:2c:b6:26:4b:8e:d7:cb:7e:16:37:10:3a:9a:83:9e:8a:ef:
         fa:7c:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:20 2025 by rpki-client