Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          4MG+hvO7wexDlbXDP/nyz3jFa/GydXvAlO+IHVYmQYM=
Subject key identifier:   8E:54:44:A0:3B:87:9D:F1:B0:45:75:CC:54:38:56:7D:B4:23:4A:C3
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       0198D66079EFD620020631086F5C2140ABF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          12DF
Signing time:             Sat 23 Aug 2025 10:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:43 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: iW0Bwe3aVSKQKjgo7wi28wsR0nLF8smMShF4E1YM9Cc=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:79:ef:d6:20:02:06:31:08:6f:5c:21:40:ab:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Aug 23 10:01:43 2025 GMT
            Not After : Aug 24 10:01:43 2025 GMT
        Subject: CN=8e5444a03b879df1b04575cc5438567db4234ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:b8:a2:47:1d:d7:40:9e:42:ca:29:d5:6d:
                    17:98:ca:5f:e1:10:d8:60:71:a7:2d:24:d1:92:ca:
                    b0:58:35:f5:84:fd:cd:8a:c9:3c:45:fc:77:39:cb:
                    d4:a0:94:42:29:a2:78:6f:23:5c:55:70:f7:b8:be:
                    c7:f8:58:d3:8f:b9:c3:19:12:83:87:53:93:5e:9f:
                    fb:f5:13:ac:09:14:95:39:cb:9a:50:f0:5a:8a:21:
                    d0:c2:ce:cf:ee:bd:94:5d:fe:bc:e0:53:71:3d:1e:
                    61:24:bb:ae:a9:6a:ed:56:61:3b:a9:ec:fa:4d:df:
                    48:e5:d7:c2:ee:3d:a4:8c:3c:d9:e1:b3:15:d9:64:
                    f8:e2:30:e8:fe:c1:29:24:41:9f:df:27:02:cc:85:
                    a8:49:a0:d0:ff:be:d4:e0:10:12:2d:fa:39:86:12:
                    69:fa:47:1b:42:20:43:b9:94:90:56:e8:47:77:c3:
                    72:b4:8b:4f:81:08:1e:07:de:53:8c:28:b7:dd:90:
                    19:27:6a:38:77:5c:74:66:09:9d:02:e4:61:5d:e5:
                    45:28:1e:f9:71:50:00:85:be:32:84:68:3c:e1:82:
                    2a:ff:f4:de:af:99:59:75:ab:23:b7:94:25:2d:10:
                    cd:aa:b2:e4:e2:51:4a:ad:3d:5c:c3:46:76:65:6f:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:54:44:A0:3B:87:9D:F1:B0:45:75:CC:54:38:56:7D:B4:23:4A:C3
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:1a:bd:84:d7:e4:b5:c1:b2:36:20:05:f0:3b:57:42:26:4e:
         07:3f:f9:41:eb:88:d3:cb:f8:a4:f7:67:42:01:6a:4b:42:5c:
         65:c8:36:a2:c2:24:c0:77:5e:c2:dd:27:35:d5:5e:af:da:42:
         82:05:6b:9b:e5:92:d8:61:c1:b7:06:d0:84:c3:29:0c:91:72:
         2d:ba:71:74:8c:d9:a1:f4:2f:67:bf:d0:4b:57:db:ac:1f:e1:
         14:f0:a7:cf:5e:25:a7:fd:00:f2:51:e2:a2:f0:2f:d3:be:b0:
         d9:0c:5b:e0:43:be:28:92:03:25:77:c9:f2:74:37:4e:8a:aa:
         92:cd:28:f2:b3:ac:9e:67:56:67:56:ea:8b:b4:ff:d7:52:3f:
         d5:fd:56:49:4c:7a:93:47:2c:86:cc:94:69:e3:58:3c:cf:7d:
         c5:a2:3c:2f:b5:bd:c6:0f:b0:e0:f4:8b:f3:99:b6:4b:c1:df:
         ea:5d:1b:40:65:86:9b:40:08:82:ca:ca:08:7a:7a:60:10:a9:
         7c:43:3d:ee:80:b8:cb:d6:37:06:ab:85:16:b0:c2:ee:29:5f:
         3c:8a:25:0b:ef:54:bd:bf:d1:68:c0:1e:55:d5:a6:b9:39:32:
         a5:dd:73:41:de:60:0d:4e:af:5f:8e:5a:90:54:08:58:37:32:
         bb:f1:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:02 2025 by rpki-client