Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File:                     Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier:          gSJcIdbXeUSR44rx18GKjTqiWtZ6g3CEK7N8zo9lDp0=
Subject key identifier:   E1:9B:30:7F:25:EB:A9:73:EA:F2:56:DB:64:FC:EC:9E:66:06:43:5E
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer:       /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial:       0197B745819241E8022D78A4F8F38350DF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number:          091E
Signing time:             Sat 28 Jun 2025 16:01:14 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:14 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:14 +0000
Files and hashes:         1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: CruPx8fLYLwWqRE4W+FYBJUfVkNS1awDqcgT6eBVqT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:81:92:41:e8:02:2d:78:a4:f8:f3:83:50:df:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
        Validity
            Not Before: Jun 28 16:01:14 2025 GMT
            Not After : Jun 29 16:01:14 2025 GMT
        Subject: CN=e19b307f25eba973eaf256db64fcec9e6606435e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:9d:23:f7:35:a5:15:a9:65:ff:47:9a:7c:
                    fc:2b:d7:f7:50:fa:13:d0:88:cf:47:a4:70:19:64:
                    a2:2f:cd:99:f1:88:cc:15:ac:50:51:44:7c:88:1b:
                    95:5f:6a:40:93:30:2c:4a:86:78:66:f4:78:56:1b:
                    58:b9:93:33:80:fd:ee:c9:53:3e:13:72:86:7f:d2:
                    e4:8d:1f:4d:2d:77:a0:d3:72:d6:01:07:ce:99:3f:
                    2e:c7:74:fc:f2:c8:94:39:3a:6d:f7:4d:c6:0e:eb:
                    ff:ad:3e:d4:e7:d9:c2:b4:5c:4d:3a:b7:84:a8:36:
                    85:06:ec:9d:5d:8f:25:ec:9b:24:45:64:01:48:0e:
                    11:0c:d7:54:57:a4:0f:a3:41:58:f6:ac:d1:10:34:
                    68:75:21:dc:3e:87:2f:7a:82:8a:d4:0d:16:08:05:
                    c2:50:ab:f7:7a:9b:bd:61:0c:a7:b2:d9:21:ae:22:
                    3a:b0:8c:17:b9:ef:59:24:dc:00:be:d6:a0:d5:47:
                    2d:32:c8:a2:da:84:9c:3d:d5:fe:17:6f:db:4b:3e:
                    5f:79:d3:bc:71:f4:2e:49:fe:2f:8d:b7:30:88:1f:
                    83:a9:7d:10:f6:69:d9:e7:3c:70:01:ae:f2:4f:61:
                    b8:2c:41:a3:ae:ca:bb:f1:0d:6f:fb:2f:59:70:0d:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9B:30:7F:25:EB:A9:73:EA:F2:56:DB:64:FC:EC:9E:66:06:43:5E
            X509v3 Authority Key Identifier:
                keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:da:1b:f1:13:fb:ab:9b:22:19:46:4e:37:5f:82:d3:d6:
         14:05:81:6e:62:bb:a4:42:fd:10:b0:8f:76:df:04:e6:42:7e:
         06:bd:36:bb:1b:8f:4e:bb:51:b3:e7:0e:72:76:1d:8f:98:a7:
         6b:41:d8:77:4b:cf:a9:8f:89:af:b0:5f:10:9e:5e:91:5a:ce:
         72:4e:68:2f:44:21:96:c6:23:f9:1e:18:19:ab:8f:8c:5c:70:
         f4:ea:d0:b1:27:cb:94:70:35:c6:65:22:0b:d4:00:f4:54:f2:
         7b:23:b6:36:90:26:fd:05:d5:04:73:99:a9:ca:b6:56:3d:5f:
         9f:04:90:29:d6:19:b6:66:a9:df:be:61:d1:54:be:19:3e:02:
         aa:64:fd:d3:3a:c8:14:c3:eb:ea:28:5a:02:ec:cd:79:bf:b4:
         3b:ba:79:0f:f7:b3:7c:68:6a:16:f3:e8:6f:bb:80:14:32:e3:
         a2:63:0e:e9:d0:c3:d5:87:58:ca:1b:ed:33:95:1d:e6:b3:6d:
         05:95:dd:9c:52:74:fb:d0:1c:64:2d:88:e3:33:e3:a2:2f:9e:
         b3:51:11:57:39:7f:6b:e8:14:c1:c7:c4:56:fa:88:82:a0:cb:
         72:3f:3f:87:42:25:0f:dc:33:a3:69:1e:ac:a6:11:6c:8a:8a:
         19:b4:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:40 2025 by rpki-client