Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          rsgjaw8U6e5vi25DQtDV66kio27cjyySfpXslDokPGA=
Subject key identifier:   01:4F:F3:D1:B7:5E:21:A8:52:84:4B:71:EC:BC:5A:C3:AE:15:95:9B
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       0198D65EFC7D7087E8F8B4FC4B2704BDB164
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          036A
Signing time:             Sat 23 Aug 2025 10:00:05 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:05 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:05 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: x4BFro6BjVaHNmOcJOjCtFiO67W7/NW6o65ZstrgBew=)
                          2: b9YEmpfPninMk0asKBNPcoiyaVU.roa (hash: pUFz2xldxjhrYZJSx6acSw+dw/vauygsJMfm2bULKuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5e:fc:7d:70:87:e8:f8:b4:fc:4b:27:04:bd:b1:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Aug 23 10:00:05 2025 GMT
            Not After : Aug 24 10:00:05 2025 GMT
        Subject: CN=014ff3d1b75e21a852844b71ecbc5ac3ae15959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:c5:e5:e9:fe:0e:31:c6:e6:15:68:e2:7c:
                    69:cf:96:0a:12:3d:cb:aa:bb:60:68:00:3b:0f:01:
                    35:a4:f8:b2:e3:7b:b1:dd:e6:ad:90:a8:49:0b:6a:
                    c0:3a:93:7b:47:8a:31:58:37:41:99:ad:a4:eb:74:
                    7e:90:af:d9:60:3e:d7:63:4c:79:3b:28:84:66:bc:
                    6a:7e:56:5e:f4:27:ce:93:dd:d5:a0:23:f5:62:00:
                    39:fb:43:8e:61:4e:5c:4e:f5:62:07:d6:fd:4e:01:
                    4e:f5:da:c1:96:22:71:fa:05:16:a6:e6:a7:df:f6:
                    46:01:8a:05:53:a4:2d:6f:b5:ba:b9:41:c8:fd:dd:
                    03:d3:1f:de:8e:1a:ec:ad:a7:56:2d:a8:5a:41:7d:
                    17:14:10:ac:f0:7d:dc:b8:ec:09:13:50:ee:6b:68:
                    8f:40:48:55:f6:01:1a:7d:39:e7:bd:43:75:49:04:
                    ff:f1:f2:70:5a:85:f6:50:58:05:94:9a:b9:72:bd:
                    5e:25:dc:f0:9d:81:3b:1c:80:28:5a:94:81:c5:9c:
                    06:87:69:b0:70:12:78:71:2c:a9:67:25:ab:45:51:
                    fb:6c:3a:4a:8a:41:ab:22:22:48:cb:5d:e6:7b:5a:
                    68:99:12:b2:36:76:d6:ba:46:b8:85:d1:fc:75:17:
                    29:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:F3:D1:B7:5E:21:A8:52:84:4B:71:EC:BC:5A:C3:AE:15:95:9B
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:5e:6a:9b:c0:44:c5:ba:b9:71:d6:60:af:26:93:21:98:
         10:8b:31:be:4b:47:e8:a9:e5:89:64:5e:79:72:8f:db:62:d0:
         58:da:22:40:12:af:8e:30:dc:ce:c6:01:0d:1c:02:a3:61:e8:
         6a:bd:5d:7a:04:1f:c1:d8:ed:4a:54:31:4c:5f:e3:70:86:4a:
         ac:c2:5f:99:6e:f9:38:86:90:22:91:aa:c4:51:21:ff:f2:df:
         62:e1:a1:07:c0:8f:e4:3b:32:b2:d7:37:d6:bc:2b:82:71:c5:
         a4:2c:8f:4d:2d:49:0e:34:9d:24:9e:4b:16:9b:d9:43:e1:9e:
         60:96:e3:ad:39:ee:cd:56:1e:de:fb:a3:c0:70:2f:bc:bc:50:
         19:d8:22:ff:aa:a7:86:64:c5:6d:fb:d6:9b:2d:c2:43:7b:1b:
         31:7f:f6:9f:55:7e:9c:2e:da:0e:5c:a6:ee:85:1c:26:71:30:
         08:0c:13:2c:e6:60:4b:28:da:9a:a2:5e:34:30:5a:71:11:9f:
         af:a9:46:13:27:79:a8:ab:21:76:d0:87:ee:b5:95:44:09:9a:
         8e:61:76:f1:3b:54:3b:0a:ea:43:b9:24:93:65:a0:77:87:74:
         ae:bc:36:ab:fd:98:b5:08:a5:31:eb:1b:0f:7b:21:86:aa:59:
         49:61:b9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXvx9cIfo+LT8SycEvbFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZTYyYjE3MTYxZjMzZTNiMWE2OTEwYzYyNzJmZWNiMzM4
ZTBmNmYwHhcNMjUwODIzMTAwMDA1WhcNMjUwODI0MTAwMDA1WjAzMTEwLwYDVQQD
EygwMTRmZjNkMWI3NWUyMWE4NTI4NDRiNzFlY2JjNWFjM2FlMTU5NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4HF5en+DjHG5hVo4nxpz5YKEj3L
qrtgaAA7DwE1pPiy43ux3eatkKhJC2rAOpN7R4oxWDdBma2k63R+kK/ZYD7XY0x5
OyiEZrxqflZe9CfOk93VoCP1YgA5+0OOYU5cTvViB9b9TgFO9drBliJx+gUWpuan
3/ZGAYoFU6Qtb7W6uUHI/d0D0x/ejhrsradWLahaQX0XFBCs8H3cuOwJE1Dua2iP
QEhV9gEafTnnvUN1SQT/8fJwWoX2UFgFlJq5cr1eJdzwnYE7HIAoWpSBxZwGh2mw
cBJ4cSypZyWrRVH7bDpKikGrIiJIy13me1pomRKyNnbWuka4hdH8dRcpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFP89G3XiGoUoRLcey8WsOuFZWbMB8GA1UdIwQY
MBaAFFbmKxcWHzPjsaaRDGJy/sszjg9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAt
ZTBjMmJkZmQ2NTg1LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9lY2M1ODMtZTBjOC00ZjE1LWE4MDAtZTBjMmJkZmQ2NTg1
LzEvVnVZckZ4WWZNLU94cHBFTVluTC15ek9PRDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaheapvA
RMW6uXHWYK8mkyGYEIsxvktH6KnliWReeXKP22LQWNoiQBKvjjDczsYBDRwCo2Ho
ar1degQfwdjtSlQxTF/jcIZKrMJfmW75OIaQIpGqxFEh//LfYuGhB8CP5Dsystc3
1rwrgnHFpCyPTS1JDjSdJJ5LFpvZQ+GeYJbjrTnuzVYe3vujwHAvvLxQGdgi/6qn
hmTFbfvWmy3CQ3sbMX/2n1V+nC7aDlym7oUcJnEwCAwTLOZgSyjamqJeNDBacRGf
r6lGEyd5qKshdtCH7rWVRAmajmF28TtUOwrqQ7kkk2Wgd4d0rrw2q/2YtQilMesb
D3shhqpZSWG5zg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:32 2025 by rpki-client