Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File:                     VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier:          qo0T8BAFUdGKDIWblubxwPt1iiP6imqjJuG2dBZxSRs=
Subject key identifier:   80:1B:94:DD:E0:CE:29:DB:64:AE:E7:41:D3:67:C6:05:6B:D6:17:52
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer:       /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial:       01976BF468618DB51102D9BA99A087825848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number:          140D
Signing time:             Sat 14 Jun 2025 01:01:08 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:08 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:08 +0000
Files and hashes:         1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: rZt7hEHDWGys6tioEIjhvC0SYctfKyh3DWgGQ/58g2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:68:61:8d:b5:11:02:d9:ba:99:a0:87:82:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
        Validity
            Not Before: Jun 14 01:01:08 2025 GMT
            Not After : Jun 15 01:01:08 2025 GMT
        Subject: CN=801b94dde0ce29db64aee741d367c6056bd61752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:7d:a0:4c:40:d8:48:82:4a:79:0e:37:02:
                    9f:d8:be:8f:b2:d6:c9:09:68:3d:cc:88:1d:a0:64:
                    e1:9e:f7:d5:03:04:fd:ee:49:9c:0b:a9:8f:56:a0:
                    e5:e0:e9:c9:ca:d1:4c:ad:b5:15:a3:4d:ee:be:12:
                    4f:a2:69:b2:78:95:b1:df:66:09:e4:4d:15:ae:ce:
                    c0:1f:cc:de:3b:ea:e5:f6:54:ea:1e:4e:2a:8d:ef:
                    8c:53:32:61:80:c4:2b:19:df:63:ae:e0:1f:3d:12:
                    44:38:45:a5:84:f1:87:09:35:25:4b:da:47:fc:aa:
                    53:b0:d0:9d:f1:cb:43:18:b0:66:5a:fb:3a:d5:7c:
                    c1:73:d9:9f:c5:d2:5b:4c:65:48:47:06:a1:c7:fc:
                    64:4f:bc:38:1c:ce:6d:62:ce:ef:85:59:83:5c:45:
                    c8:fd:cd:13:4f:d7:22:cd:15:32:a9:8a:0d:15:28:
                    62:a1:d2:b7:77:f3:c0:e9:e0:df:a4:3e:7e:94:91:
                    b0:fb:01:a7:6b:5c:bb:b7:aa:37:e5:bf:3f:df:64:
                    b1:7e:91:59:d4:25:13:08:5d:e7:ac:38:7d:5f:2f:
                    e4:08:8e:9b:a8:27:29:67:49:6f:7f:4a:db:ca:ba:
                    11:cc:4b:a5:94:b4:38:de:35:e3:d9:af:23:7c:cd:
                    89:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:94:DD:E0:CE:29:DB:64:AE:E7:41:D3:67:C6:05:6B:D6:17:52
            X509v3 Authority Key Identifier:
                keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:be:71:d6:a7:7c:7b:4a:4c:bc:70:63:68:c1:42:64:12:31:
         32:8b:d1:13:25:63:43:d9:17:d1:16:e4:79:56:ea:53:16:56:
         a7:a3:75:02:a6:77:de:eb:0a:90:3f:13:a9:17:61:19:08:2b:
         3d:78:30:ea:42:78:3d:af:84:e0:de:d9:0c:bf:79:c6:9e:72:
         7f:d8:61:5a:0f:f1:75:80:64:2f:09:f4:6d:13:af:4e:33:d8:
         d2:7c:06:6c:77:4f:32:67:1d:3d:04:0c:ff:c9:c8:01:85:a8:
         32:79:fc:b9:5c:93:1e:39:ab:36:53:27:e3:35:f0:80:90:79:
         d9:21:2c:39:3d:ff:a4:9f:b1:c3:6f:93:4c:23:3a:e4:27:68:
         87:2a:88:cc:34:2a:84:7b:f1:25:d3:1f:23:ca:d9:ab:c6:f7:
         12:94:d2:6b:f7:87:db:f8:cc:a9:8e:59:88:bb:8d:e7:9a:79:
         a2:0d:f0:9f:3a:ac:39:b3:4d:5a:84:47:8a:4b:0f:99:4e:8d:
         09:53:dc:e6:d3:0b:02:db:3e:ec:2b:5c:77:e9:49:99:6c:dc:
         cb:d5:03:8b:cd:96:7b:cc:1e:80:f6:be:0f:48:28:5d:40:78:
         7e:4a:3e:a0:48:8d:a7:83:88:1c:58:12:47:37:0d:56:cd:56:
         10:21:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:49 2025 by rpki-client