Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
File:                     _VnTVh_4rdtfGww2o90laLdMpRU.mft (raw, json)
Hash identifier:          06ZY91067bNLwdrjOK3ZdBAm7PDXr0llpmxLZ+/kQiE=
Subject key identifier:   6F:1F:AD:65:B3:9C:44:BE:BB:D4:17:F7:2C:BF:AD:1B:B9:92:32:B1
Authority key identifier: FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15
Certificate issuer:       /CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
Certificate serial:       0198A0F18D1E52032C30DDC3C69E43F43E93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
Manifest number:          0B11
Signing time:             Wed 13 Aug 2025 01:00:41 +0000
Manifest this update:     Wed 13 Aug 2025 01:00:41 +0000
Manifest next update:     Thu 14 Aug 2025 01:00:41 +0000
Files and hashes:         1: _VnTVh_4rdtfGww2o90laLdMpRU.crl (hash: dxLdhw48LjMI6/EReFikKn0YhyAiLEl2bLyjtKSxl5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:f1:8d:1e:52:03:2c:30:dd:c3:c6:9e:43:f4:3e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd59d3561ff8addb5f1b0c36a3dd2568b74ca515
        Validity
            Not Before: Aug 13 01:00:41 2025 GMT
            Not After : Aug 14 01:00:41 2025 GMT
        Subject: CN=6f1fad65b39c44bebbd417f72cbfad1bb99232b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dc:80:82:7e:7a:5f:90:06:dc:c5:c7:c0:bb:
                    1c:d6:3a:cb:b7:18:f8:b2:cd:77:98:41:62:e6:13:
                    e1:6b:4f:e6:58:69:80:7c:2f:10:d5:7c:7b:eb:8d:
                    dc:5b:70:f1:b4:c6:9a:88:74:19:4b:ff:cb:90:29:
                    44:07:cf:31:28:b1:77:6a:7f:48:15:7d:a2:9f:dd:
                    15:45:2c:c2:58:cf:83:33:cb:94:da:24:1b:1c:ea:
                    af:67:d6:0d:92:3c:89:4b:ab:fe:90:f5:8f:20:c8:
                    96:10:ab:de:27:31:b7:0e:dc:6f:b5:a2:f8:38:b9:
                    59:fe:b8:8d:22:2c:5f:8f:80:1d:f6:b8:03:51:d1:
                    eb:c5:fd:8c:ab:7d:4b:d3:a4:1b:1e:37:10:0b:d5:
                    88:a8:36:1b:c9:e2:b2:de:d2:c5:95:9d:3f:bf:80:
                    58:71:30:b8:8b:a1:d7:f5:4a:a9:31:8c:7c:f5:30:
                    d7:f1:04:4f:f6:2b:12:06:e4:ca:e4:00:d7:6f:31:
                    63:14:2e:6a:0f:05:47:64:9b:f6:59:8b:4e:63:20:
                    88:58:ea:55:b1:1b:6a:1f:8f:c2:cc:fd:b4:02:14:
                    0c:6f:49:74:ce:40:a5:9c:6f:e8:3a:15:8a:41:a8:
                    64:ea:88:dc:6e:5c:60:3c:5d:08:7d:a0:cc:f6:4f:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1F:AD:65:B3:9C:44:BE:BB:D4:17:F7:2C:BF:AD:1B:B9:92:32:B1
            X509v3 Authority Key Identifier:
                keyid:FD:59:D3:56:1F:F8:AD:DB:5F:1B:0C:36:A3:DD:25:68:B7:4C:A5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VnTVh_4rdtfGww2o90laLdMpRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/af2b36-6e8b-4601-b074-d612a21ebeae/1/_VnTVh_4rdtfGww2o90laLdMpRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e6:bb:6c:52:ec:d7:18:34:94:cc:23:d2:f5:3f:ad:b4:52:
         b9:36:96:ef:0b:8d:0c:c0:0d:74:75:3b:50:01:6c:30:11:5a:
         fa:72:4c:53:54:f0:6b:07:9f:ee:3f:97:bc:ab:69:ea:59:35:
         de:87:69:37:54:f3:a1:45:ae:c5:00:13:21:c6:0d:56:d0:ac:
         3c:e0:65:ea:2c:f5:7e:34:0b:b9:0e:8e:a8:b5:9b:2e:65:84:
         af:39:d1:67:97:83:ca:6f:e9:bb:4d:1d:7d:1e:0f:3b:21:f6:
         ff:10:fe:e5:fe:d3:52:07:e6:aa:63:1b:41:19:94:38:42:e2:
         a6:b8:7b:82:9b:9b:6d:b4:ce:34:bc:de:ee:b7:72:46:58:0a:
         f2:2e:2f:33:fa:c9:b0:7a:3a:2a:0d:74:84:31:fb:ad:83:e4:
         f4:03:ca:f4:31:4f:52:ee:73:29:b4:82:dd:24:c9:d3:72:6b:
         43:2c:38:2b:e9:9d:63:5d:9d:a2:db:65:62:02:c1:d6:79:14:
         4f:0d:a5:ee:b5:34:7e:55:db:01:c4:3c:3f:fe:27:f8:dc:02:
         cd:cf:d5:ad:1d:76:b3:2c:31:85:eb:9d:16:86:7a:7f:22:d0:
         da:f0:b5:c0:4c:76:40:43:b7:f7:ea:12:5b:85:46:28:96:ce:
         cc:ec:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:44:14 2025 by rpki-client