Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File:                     VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier:          z7vjXBxHw3rFyJr2E69ctAIE5JBkjrHSJmrte8pZEPU=
Subject key identifier:   9B:CA:73:7E:D8:37:F1:DE:2D:75:89:91:0D:F4:B3:CC:01:ED:53:82
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer:       /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial:       0198752BC83A9598CF27B91CF3A53B8D2153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 13:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:00 +0000
Files and hashes:         1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: HrhTRoNGpqKPGq+wNDqwqIm83Cn69xa+Qz1WOZbCOOg=)
                          2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:c8:3a:95:98:cf:27:b9:1c:f3:a5:3b:8d:21:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
        Validity
            Not Before: Aug  4 13:01:00 2025 GMT
            Not After : Aug  5 13:01:00 2025 GMT
        Subject: CN=9bca737ed837f1de2d7589910df4b3cc01ed5382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:05:4d:24:98:cf:72:30:eb:a0:36:cc:3c:
                    2f:98:f4:6b:c2:df:e5:5b:98:58:68:31:0b:04:92:
                    0b:21:92:62:e1:64:08:58:43:96:4f:7e:5e:bf:e9:
                    51:27:9b:e7:1d:b0:51:cc:ea:7c:7a:b0:20:d0:14:
                    8f:3e:45:c3:d1:46:d7:7e:0a:9b:81:9c:89:d0:60:
                    d5:3f:b0:98:18:ea:75:da:54:d8:3f:53:13:d5:73:
                    32:7d:03:0c:75:af:23:9b:ba:90:2c:13:f8:c5:61:
                    c9:0e:cc:ee:9a:e6:0e:a1:1b:19:16:77:f4:f3:91:
                    57:fd:e8:0a:9d:74:8e:54:b3:ce:98:63:c2:c3:b6:
                    0d:3c:69:a4:e8:21:eb:bf:3a:41:9e:79:2b:68:86:
                    07:b9:f9:ad:06:7b:e4:07:81:c3:ec:ad:f1:6a:c2:
                    43:6d:d6:b6:cb:06:27:04:1d:15:e3:f6:51:56:59:
                    d6:de:04:51:c9:88:ba:59:19:90:52:b6:0e:e4:5e:
                    7d:e1:49:a4:e9:9d:db:65:12:b9:c1:c3:8b:cb:e1:
                    fc:40:29:36:6c:e9:96:26:2f:9c:8f:f8:4c:21:c6:
                    49:28:7b:aa:b3:36:bd:a0:c3:44:53:d5:22:1b:cb:
                    f8:e6:f2:d4:b2:cc:d4:5a:53:02:77:b1:57:35:7e:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:73:7E:D8:37:F1:DE:2D:75:89:91:0D:F4:B3:CC:01:ED:53:82
            X509v3 Authority Key Identifier:
                keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:bd:3f:c5:ff:53:17:f4:51:08:76:c8:d1:3d:92:5d:3f:
         83:0b:a6:27:67:f6:d4:26:aa:89:73:38:43:f9:70:5d:f9:1c:
         fe:7c:e6:3f:d9:4a:6c:b0:62:d2:71:8c:d6:e4:6e:02:e3:41:
         23:d4:27:cd:0a:c7:13:1f:06:65:18:8a:0f:69:47:d5:db:72:
         26:fd:8d:b3:91:99:77:12:9b:a4:e7:56:3e:79:73:61:25:37:
         5b:92:77:02:ed:9a:90:c1:41:1d:cc:28:6e:77:a1:5b:bf:0d:
         92:db:92:48:cf:ad:92:cc:d8:8f:a7:b9:7d:97:14:cd:62:e6:
         6c:fc:a2:3c:26:2d:97:e3:4b:d3:6a:a7:f7:e4:52:91:c6:46:
         61:41:69:94:aa:a8:61:62:d5:a7:ab:a3:ae:57:c9:f2:01:c7:
         8f:01:4e:96:38:15:5a:35:a9:9d:34:95:84:e0:8c:5a:c7:d5:
         09:a3:00:54:95:3f:39:e4:fb:26:a2:ef:b6:28:e1:e9:7e:7f:
         d2:c8:7c:5a:d8:63:18:d7:20:0c:24:c6:0e:08:64:b5:14:55:
         c8:66:02:b8:7c:f6:a3:bf:38:54:70:87:e8:87:64:99:c3:03:
         5c:f5:36:c7:ed:6b:84:b2:fd:ca:c3:33:95:b0:c4:23:8b:f9:
         a9:cf:4c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:10:35 2025 by rpki-client