Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File:                     VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier:          X5pd/AS+LJa/0nH+x7Yjwm9OAkNgDrfbG63YGC9YwX0=
Subject key identifier:   5C:63:58:E3:83:BE:47:D9:B0:97:84:B8:86:56:14:24:E3:6A:6A:93
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer:       /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial:       019873E33F21EA5B61851FEF912EF9F7B01B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 07:02:09 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:09 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:09 +0000
Files and hashes:         1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: 2pzK33axzHGjrnFFhTbkOYj2taoEASyhxvZP62ACKEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:3f:21:ea:5b:61:85:1f:ef:91:2e:f9:f7:b0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
        Validity
            Not Before: Aug  4 07:02:09 2025 GMT
            Not After : Aug  5 07:02:09 2025 GMT
        Subject: CN=5c6358e383be47d9b09784b886561424e36a6a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ce:53:0c:1b:4f:3e:cc:6f:80:1c:3b:be:a9:
                    42:79:c0:0f:88:eb:29:cc:df:b9:81:9a:a1:64:e1:
                    fe:91:2c:1c:6d:3d:63:af:07:53:46:e5:22:ee:17:
                    9b:da:2e:59:43:0b:03:c1:22:14:49:f1:fb:ae:d1:
                    91:9f:d3:a8:74:82:f3:fe:14:ad:e0:62:a7:d6:e2:
                    68:63:cb:45:8e:c9:98:87:41:44:81:4e:f3:a0:92:
                    35:49:7a:25:1c:da:87:29:1c:8d:bc:f2:1b:2a:d4:
                    c8:64:2b:b7:88:ac:c5:8f:74:7a:e6:ad:13:68:0a:
                    5c:e1:65:42:67:76:0c:47:38:aa:c6:a8:c3:cf:8c:
                    c5:c3:1e:b1:ca:39:cc:3a:29:3e:ed:7d:e1:70:2b:
                    68:8e:54:a8:63:52:c8:41:52:9d:81:db:aa:91:fc:
                    15:38:36:78:51:c2:13:47:12:c1:ae:6c:fe:9f:7c:
                    07:4b:ac:c3:a9:64:37:27:ca:b1:aa:f4:59:19:cf:
                    81:65:5b:b9:a1:62:86:6f:de:5e:d3:39:84:de:b7:
                    d9:b0:a1:f8:44:cf:d2:65:71:67:40:7b:d9:ef:5e:
                    3c:69:79:96:18:be:4c:6d:25:60:0f:c7:89:76:e1:
                    5f:aa:af:4b:62:c2:01:87:a2:cc:22:46:67:d5:a5:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:63:58:E3:83:BE:47:D9:B0:97:84:B8:86:56:14:24:E3:6A:6A:93
            X509v3 Authority Key Identifier:
                keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:7a:dc:38:af:c8:d4:fd:59:81:8c:57:f5:2b:2e:3b:46:
         7d:c8:f0:05:b0:f1:92:02:58:7a:ce:e8:52:17:fa:2a:1b:27:
         6d:e1:08:47:2e:16:2b:de:52:1f:70:8a:55:90:db:02:42:72:
         aa:8b:94:b2:65:08:3f:fe:d7:26:c8:cc:33:19:02:93:9e:b4:
         11:7e:05:18:97:65:30:d7:27:33:9f:dc:a3:99:7d:6c:1a:f5:
         a6:b0:79:b0:26:d2:b4:48:0c:bd:6e:fb:70:44:85:f4:b3:77:
         cf:6d:e9:cc:9f:18:5b:ba:b3:e0:73:5f:d9:91:78:91:01:36:
         6d:6f:70:18:36:87:bb:c6:e1:db:61:3d:6c:ab:62:a7:76:d4:
         60:e0:f6:20:44:76:ca:82:67:e8:75:e1:6a:9d:f9:84:6e:26:
         cd:b8:56:8f:eb:d5:3b:c0:75:4c:83:d3:bb:a2:b3:ca:be:e8:
         34:2a:1c:1a:16:71:b5:b7:97:a4:90:1f:e1:47:b6:7d:7f:63:
         10:f1:56:48:8f:f1:4f:53:6d:27:6e:49:53:eb:e2:47:27:9f:
         3e:9f:04:b0:97:6b:e7:13:b3:60:9d:4e:65:a0:84:88:52:6d:
         27:35:12:8a:ae:4f:fd:a4:9c:93:83:12:a7:9d:f6:ff:51:65:
         a1:c0:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:45 2025 by rpki-client