Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          H+bT5qpBDmD83Pf8gSYZJBMmM1BPsJprRYCBCSuyksw=
Subject key identifier:   2C:BE:18:2B:84:8C:AF:47:4B:91:87:CB:65:0C:26:1A:62:46:EC:78
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       0197B70F5FAEBC52ECB12D167F7D71212AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          0958
Signing time:             Sat 28 Jun 2025 15:02:07 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:07 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:07 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: 36khPTyVkyRiltkxmAhcP34gOmKUl8xb/LubHRRc3Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:5f:ae:bc:52:ec:b1:2d:16:7f:7d:71:21:2a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Jun 28 15:02:07 2025 GMT
            Not After : Jun 29 15:02:07 2025 GMT
        Subject: CN=2cbe182b848caf474b9187cb650c261a6246ec78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:21:35:39:29:5f:12:89:20:6a:55:a3:ef:
                    03:cd:63:a2:a6:54:c0:ee:61:dd:b6:8e:ca:f9:2e:
                    a2:06:9e:73:7b:eb:98:6d:2c:93:a1:79:d1:72:bc:
                    8b:9b:a0:d9:b1:54:56:f9:b1:e8:85:cb:f6:18:8d:
                    fa:3b:41:8c:ac:a1:ba:dd:ad:75:0f:29:19:16:13:
                    45:5b:c5:4a:f7:f5:7e:d2:b0:79:7c:cb:dc:51:ba:
                    0c:72:50:7d:2b:f6:f0:ab:02:b8:c1:7f:1a:50:ac:
                    fa:1f:cc:f4:90:9b:22:b7:38:53:57:5c:c7:06:42:
                    fd:af:20:4f:14:e1:02:e0:b8:22:ba:c7:05:85:28:
                    13:95:ce:9f:e0:73:ef:75:c6:24:b7:ef:f0:d1:48:
                    9e:2f:d6:81:60:ba:ba:34:47:f5:fd:3b:8e:70:b6:
                    30:7e:a2:f2:8e:d6:b9:6c:4a:d8:a3:14:45:4d:f6:
                    a6:09:58:ce:1f:4a:65:90:48:f3:b3:0f:f9:87:c1:
                    7e:fe:9c:da:c3:be:98:3e:84:82:11:59:ee:ea:69:
                    80:8b:80:77:e8:f1:d7:53:12:af:bb:94:9d:41:75:
                    90:87:99:e4:62:20:de:34:15:94:37:87:71:22:78:
                    8c:24:1e:45:b8:0e:d6:8a:ef:bb:eb:ba:b5:ea:f2:
                    84:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BE:18:2B:84:8C:AF:47:4B:91:87:CB:65:0C:26:1A:62:46:EC:78
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:95:ba:96:f9:4a:59:96:f4:e1:a3:14:db:85:75:d5:f2:
         37:6d:f7:90:07:81:0b:29:ed:7f:a6:ba:f0:41:dc:92:72:1b:
         5f:e0:94:d7:c6:58:88:0a:a5:3d:c0:ec:58:37:cf:0c:da:3b:
         1f:7b:c9:18:00:a9:40:9e:a4:fa:33:e0:73:8b:b5:41:5a:d1:
         a0:f6:55:cb:09:a9:93:50:0c:d4:04:9a:3c:f4:ff:e9:e7:63:
         47:ee:86:89:c7:a2:fb:b0:91:62:aa:91:b6:2e:6b:0b:21:85:
         b6:72:61:2a:86:34:e1:fa:29:76:a8:17:bc:71:36:d1:1d:ae:
         20:33:a7:e4:ee:af:52:2f:b0:42:8c:07:f1:04:01:75:82:38:
         cb:3b:d4:a8:bf:5e:65:ba:40:84:51:4d:d9:14:83:01:8f:d2:
         93:7c:47:82:e8:5d:d4:84:2d:e4:14:b3:22:da:ea:eb:15:0f:
         4e:1c:e2:f0:d8:48:9e:9c:db:ce:73:69:25:2c:36:c3:b6:64:
         89:3c:83:5d:ac:d3:94:d6:39:48:6e:b3:ba:47:ab:30:f7:80:
         3b:47:c5:28:a8:84:2c:e5:13:0b:cb:7e:86:1e:96:65:6d:42:
         32:71:14:02:a3:1c:d7:d0:e1:13:f3:8e:dc:d9:91:85:02:7a:
         39:1c:b1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:18 2025 by rpki-client