Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
File:                     VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft (raw, json)
Hash identifier:          Y3jybFIbVPe6HZZtjGoeAOr1EDLVffRZ9WFSg2HXbk8=
Subject key identifier:   A3:53:70:F1:7C:12:F2:96:BB:A7:81:8A:7A:73:70:A4:64:1A:78:27
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Certificate issuer:       /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial:       0198D4E067972E54B34896CD90B37DAAA5A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
Manifest number:          04CC
Signing time:             Sat 23 Aug 2025 03:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:12 +0000
Files and hashes:         1: VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl (hash: Ucx7ZF3lKcItHPBA+fM8E1xrGuWcLxHUlElD2YQG0pg=)
                          2: jotm08dEJ-BwkfjllAL8fv8HpCk.roa (hash: 5EqcQ7BbQSRPu0q5bdHVRwBWenLGoVNv3bKG+89/7Ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:67:97:2e:54:b3:48:96:cd:90:b3:7d:aa:a5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
        Validity
            Not Before: Aug 23 03:02:12 2025 GMT
            Not After : Aug 24 03:02:12 2025 GMT
        Subject: CN=a35370f17c12f296bba7818a7a7370a4641a7827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:fa:df:94:e5:78:50:d8:6b:21:82:de:c2:
                    21:29:1a:84:c7:ac:12:ec:7e:21:07:7e:93:e1:5d:
                    64:1e:da:61:ea:f0:8c:e4:f5:b0:76:31:b5:b3:37:
                    2c:37:4b:75:c1:4c:ed:5c:81:ab:f2:25:1b:d1:26:
                    23:64:df:b5:e8:92:46:ca:bd:60:44:5f:88:e5:1f:
                    28:ad:fa:31:bd:2f:03:99:48:ac:dc:4c:ef:ae:3c:
                    61:00:0b:2b:b5:ff:e3:f5:28:f0:0e:53:a6:96:69:
                    c8:83:69:05:64:0e:99:88:f1:50:05:58:96:d6:7e:
                    98:b1:e8:39:65:d8:11:e2:ea:8a:a8:9e:bd:32:3e:
                    42:63:c9:bc:01:f4:10:ef:54:a4:a3:84:91:51:26:
                    d2:1f:35:9f:64:3b:33:56:bc:91:0e:db:62:5a:8a:
                    b9:3e:a9:9d:ff:03:0a:8f:20:56:03:1c:36:35:ae:
                    0b:33:ff:48:e5:39:68:ef:99:17:08:0f:e9:dd:d5:
                    b1:91:0b:30:a8:35:5d:d2:64:75:0d:da:79:89:0b:
                    50:d8:19:ce:a1:45:23:db:83:e0:2b:b3:fc:e2:1d:
                    30:40:58:c0:62:df:84:3a:37:a3:fb:5b:fe:c1:2c:
                    66:b4:88:a2:ed:57:b3:f4:e5:85:f1:1e:ae:af:69:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:53:70:F1:7C:12:F2:96:BB:A7:81:8A:7A:73:70:A4:64:1A:78:27
            X509v3 Authority Key Identifier:
                keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:b7:12:a1:0f:d4:a0:f8:27:77:d4:17:b3:ad:0d:f7:aa:
         82:d5:e4:62:f7:8f:f0:d9:c4:ac:b2:c3:07:fa:a4:a8:05:7a:
         99:80:41:c4:ba:2d:e7:c4:bd:06:7a:06:8f:06:48:8f:83:25:
         3d:b3:48:bb:74:09:3d:b8:52:f1:9d:e7:7b:c8:f7:3f:66:45:
         9b:dc:e0:f9:6c:6c:e7:a9:f1:32:f1:17:f2:c0:a7:da:51:24:
         f0:38:27:94:c1:d0:bd:ee:4a:98:16:a1:69:69:62:ea:d6:96:
         48:40:15:f8:41:6f:02:0a:54:a9:0e:34:6e:3f:7d:4b:2c:a3:
         aa:96:a9:a3:26:59:1a:3d:dd:ca:df:18:36:a8:8a:bb:b2:5c:
         ef:60:a6:6f:32:4c:9c:dc:5c:96:ed:2a:78:46:e8:75:b0:bf:
         14:cf:2f:8b:d5:c3:60:d0:3e:8c:79:bc:e4:b6:e1:74:dd:e5:
         02:fc:53:e7:3c:f5:58:bc:e4:29:24:e0:23:ac:7f:69:59:86:
         2e:96:10:ca:36:83:73:e1:4e:4d:c6:78:6b:c4:11:58:c6:87:
         a6:9b:d2:e7:4f:24:82:b8:2d:ce:1b:a9:ae:3b:5f:da:e2:11:
         3d:7a:62:0a:0b:5c:ae:3f:53:f2:25:fe:f1:2e:62:61:62:1f:
         61:79:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:26:40 2025 by rpki-client