Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File:                     VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier:          1zCKRHytS9/ucFGtpafUwjD+mBFatznVOntpBOYqb+k=
Subject key identifier:   EC:DB:84:A4:6F:6E:A0:7A:7F:7C:1F:AC:E3:5F:40:81:9E:8E:FD:F7
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer:       /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial:       0198D65F63114E0DB45B7A20488FDDC8F9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number:          0939
Signing time:             Sat 23 Aug 2025 10:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:31 +0000
Files and hashes:         1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: 1CSBXHomceXtCOU+hJ9NcoYPl7+lVlqMRE1IwNP10zE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:63:11:4e:0d:b4:5b:7a:20:48:8f:dd:c8:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
        Validity
            Not Before: Aug 23 10:00:31 2025 GMT
            Not After : Aug 24 10:00:31 2025 GMT
        Subject: CN=ecdb84a46f6ea07a7f7c1face35f40819e8efdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fa:bf:3c:42:e7:c7:ac:c7:d1:f4:f7:28:c4:
                    ef:05:d4:e7:ae:79:83:6f:3f:39:90:6f:2c:d0:d9:
                    aa:71:66:3c:9d:98:1d:62:ab:e3:26:40:4f:eb:14:
                    b7:c2:8e:60:3f:b3:2b:f4:0c:d2:17:4f:ec:5f:e4:
                    f1:ae:ba:59:33:0c:95:3d:de:ab:c4:05:18:ff:ab:
                    31:7b:0f:f3:b6:7b:f7:6a:53:99:81:a9:43:4c:f7:
                    dc:22:77:b3:d0:6d:b2:25:c5:09:4f:59:a9:0c:f2:
                    13:00:d3:46:1c:ba:2e:f3:7a:31:b8:72:ae:39:73:
                    f8:9a:c2:27:1b:cd:a2:21:f9:1b:f5:3b:61:c6:c6:
                    26:47:ff:72:f7:e9:6f:d2:39:37:7e:2e:f3:d8:10:
                    13:ac:2f:71:75:05:f8:de:2e:36:3a:b4:74:dc:4c:
                    94:a2:f6:89:f2:02:6d:b5:bc:27:35:51:66:8b:4b:
                    40:4b:73:8e:17:2d:35:f9:e3:a6:fd:e5:23:74:24:
                    9f:60:5b:98:fc:e7:61:b1:63:16:00:c8:91:ba:43:
                    66:87:17:ac:1b:cb:78:7b:69:b5:d2:0b:40:89:e6:
                    a9:a0:f2:7f:5d:57:e5:b1:17:09:cb:5f:7b:3c:c9:
                    2b:d6:76:f5:03:2f:0b:f9:a5:b3:fc:1a:6f:5c:58:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DB:84:A4:6F:6E:A0:7A:7F:7C:1F:AC:E3:5F:40:81:9E:8E:FD:F7
            X509v3 Authority Key Identifier:
                keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:ae:f7:a0:95:f2:df:7c:c0:4a:f4:b7:75:e1:e4:9e:c8:
         23:59:ea:06:26:3e:bb:5f:59:3d:d4:4e:c4:fb:28:18:62:ba:
         93:c1:1d:42:65:77:69:ec:bd:7e:ee:e1:93:b9:29:cc:cf:17:
         ea:23:64:a0:5e:63:e5:59:e5:8d:44:5c:1e:9a:1e:3e:9c:d5:
         08:27:ac:67:97:09:47:5f:e9:54:8b:17:74:dd:cc:03:0b:40:
         d1:f8:bd:0a:00:7f:47:73:2d:39:d3:43:de:24:8e:5c:8d:35:
         17:59:21:8e:42:4f:b8:ff:b9:c6:27:f5:b7:7c:e5:ab:50:18:
         a1:7d:54:97:e1:14:df:72:b0:d0:b0:29:ed:08:1c:70:7c:de:
         e7:b0:20:37:61:59:f3:bc:4e:09:58:62:b9:ec:ad:49:c7:01:
         c5:f6:68:de:68:ba:ee:8f:2b:32:46:0b:45:e4:48:e9:55:2b:
         23:81:ec:c1:a6:64:b0:39:81:7b:e8:d1:c7:26:fb:03:95:c4:
         79:61:d7:7a:88:4e:05:ba:96:5c:23:c3:f2:78:9f:74:2f:9a:
         a6:7e:5e:d4:10:72:30:cd:bb:1d:50:8c:e0:0a:9b:0f:1e:fd:
         3e:06:23:d0:16:6a:e0:fb:3a:b3:80:ea:a8:12:be:b6:e6:6d:
         73:0f:5e:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2MRTg20W3ogSI/dyPnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwODIzMTAwMDMxWhcNMjUwODI0MTAwMDMxWjAzMTEwLwYDVQQD
EyhlY2RiODRhNDZmNmVhMDdhN2Y3YzFmYWNlMzVmNDA4MTllOGVmZGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfq/PELnx6zH0fT3KMTvBdTnrnmD
bz85kG8s0NmqcWY8nZgdYqvjJkBP6xS3wo5gP7Mr9AzSF0/sX+TxrrpZMwyVPd6r
xAUY/6sxew/ztnv3alOZgalDTPfcInez0G2yJcUJT1mpDPITANNGHLou83oxuHKu
OXP4msInG82iIfkb9TthxsYmR/9y9+lv0jk3fi7z2BATrC9xdQX43i42OrR03EyU
ovaJ8gJttbwnNVFmi0tAS3OOFy01+eOm/eUjdCSfYFuY/OdhsWMWAMiRukNmhxes
G8t4e2m10gtAieapoPJ/XVflsRcJy197PMkr1nb1Ay8L+aWz/BpvXFiFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzbhKRvbqB6f3wfrONfQIGejv33MB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtWu96CV
8t98wEr0t3Xh5J7II1nqBiY+u19ZPdROxPsoGGK6k8EdQmV3aey9fu7hk7kpzM8X
6iNkoF5j5VnljURcHpoePpzVCCesZ5cJR1/pVIsXdN3MAwtA0fi9CgB/R3MtOdND
3iSOXI01F1khjkJPuP+5xif1t3zlq1AYoX1Ul+EU33Kw0LAp7QgccHze57AgN2FZ
87xOCVhiueytSccBxfZo3mi67o8rMkYLReRI6VUrI4HswaZksDmBe+jRxyb7A5XE
eWHXeohOBbqWXCPD8nifdC+apn5e1BByMM27HVCM4AqbDx79PgYj0BZq4Ps6s4Dq
qBK+tuZtcw9eCw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:56:36 2025 by rpki-client