Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
File:                     vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json)
Hash identifier:          qouS61WV1b9UP+0sTpTPbK2JObogRjPD2JwaWh3hpqo=
Subject key identifier:   16:30:10:23:41:71:E7:0B:E8:FC:90:7C:E3:35:85:E8:6F:CC:9E:03
Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61
Certificate issuer:       /CN=bcc7519d62882ef4672fa21276625727a2fbe061
Certificate serial:       019892C84E2122DEC33901FBE8AEADD7B8D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
Manifest number:          0E8C
Signing time:             Sun 10 Aug 2025 07:00:57 +0000
Manifest this update:     Sun 10 Aug 2025 07:00:57 +0000
Manifest next update:     Mon 11 Aug 2025 07:00:57 +0000
Files and hashes:         1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: C1AP/7rmyXs6wG1PFhNwCr1ebfwlpdXbs3cMdWMaimw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:4e:21:22:de:c3:39:01:fb:e8:ae:ad:d7:b8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061
        Validity
            Not Before: Aug 10 07:00:57 2025 GMT
            Not After : Aug 11 07:00:57 2025 GMT
        Subject: CN=163010234171e70be8fc907ce33585e86fcc9e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:42:17:59:d7:e0:18:32:62:e1:f0:32:a9:
                    7a:2a:cf:21:9b:6d:72:4f:33:6c:67:fc:6a:c0:1d:
                    44:d8:0e:93:16:72:51:df:8e:d9:31:f8:1b:23:d0:
                    97:f4:19:49:78:b3:1d:7d:a7:f5:5f:f2:47:89:e0:
                    bb:54:8b:e6:c1:5e:66:e2:1d:45:50:61:04:2f:48:
                    78:d5:6c:ec:05:84:11:b5:0c:39:46:af:05:27:63:
                    d7:36:29:75:c0:4c:6e:71:22:8b:90:63:b9:d6:3c:
                    03:c4:7a:5f:f7:82:59:35:a9:9a:12:c0:22:0a:85:
                    cf:80:2d:cb:d0:88:39:3c:e7:8d:f0:c7:4a:49:af:
                    17:e7:4c:63:9c:66:5f:d0:aa:cd:e2:b8:90:84:14:
                    ca:9e:79:95:c5:9b:3a:86:0c:bf:b1:a7:d8:49:6c:
                    1c:72:92:c5:2c:a1:8a:40:36:02:52:4b:6c:4a:df:
                    d1:b0:15:6d:68:eb:dc:35:7a:43:7f:69:8d:ce:9e:
                    ab:d2:b2:bf:8f:93:09:0e:8b:05:49:58:de:62:6c:
                    52:53:15:81:c4:d7:40:4d:89:dd:35:cc:aa:da:a2:
                    08:0b:f6:4e:af:a4:46:08:70:08:be:b0:e7:44:4e:
                    f0:42:b5:83:86:8f:fe:8f:fa:b1:32:52:95:d3:8f:
                    f7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:10:23:41:71:E7:0B:E8:FC:90:7C:E3:35:85:E8:6F:CC:9E:03
            X509v3 Authority Key Identifier:
                keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:97:37:fe:02:f1:5b:a2:b6:4f:76:13:ea:bc:04:0d:ba:
         e9:75:3a:30:9d:79:34:1a:c1:78:32:1e:d2:f1:f1:9b:05:b4:
         65:6a:df:bb:e6:b6:d0:62:95:88:3f:44:29:71:58:39:aa:0f:
         c4:75:a8:f2:86:a3:80:43:bf:65:14:61:a8:80:63:cf:1f:88:
         f9:2c:e5:ac:69:ea:04:28:d8:f7:f3:de:bb:ba:df:b0:7a:5c:
         ad:42:62:43:6b:38:a4:fc:fe:7c:3d:d3:60:9a:63:10:b4:60:
         d0:aa:e9:62:ad:d3:52:fc:0d:50:12:8e:30:7d:fc:76:d0:39:
         3a:54:85:e4:34:5e:5f:bb:2e:bd:fc:5d:03:8b:43:a1:c1:cc:
         e0:de:f3:86:eb:3a:0c:01:c2:64:d1:74:89:0c:e2:c8:06:73:
         45:45:7f:1b:2b:f7:0c:7f:bb:03:77:be:fc:00:e4:19:01:fb:
         e9:0a:f0:9e:06:dd:fc:48:98:68:3c:6e:92:fe:39:b1:cc:be:
         b6:db:17:b7:4d:dc:1a:2e:1d:98:77:42:e3:12:7d:78:93:02:
         40:32:9b:7d:64:9f:20:19:0c:5a:68:5a:a9:c5:8a:a1:3a:97:
         47:7f:97:3f:a9:84:9d:3a:95:ee:5e:15:bf:fe:61:e4:ab:9a:
         a2:44:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:01 2025 by rpki-client