Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
File:                     Vu9y3nfRt-K0RwW2y85jlCHam-8.mft (raw, json)
Hash identifier:          pZSRGbxuG7idLUd+ETYK2L99j9DKcvD7+vZc5vBXpps=
Subject key identifier:   0C:63:CD:7D:A0:9D:C5:3A:B1:19:7C:66:8C:8F:26:11:A9:EB:9C:A3
Authority key identifier: 56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF
Certificate issuer:       /CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
Certificate serial:       01989CDEBED39CE2DBDA09987211282649BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
Manifest number:          046E
Signing time:             Tue 12 Aug 2025 06:01:40 +0000
Manifest this update:     Tue 12 Aug 2025 06:01:40 +0000
Manifest next update:     Wed 13 Aug 2025 06:01:40 +0000
Files and hashes:         1: Vu9y3nfRt-K0RwW2y85jlCHam-8.crl (hash: mhwJPzZip6OLQpfROn3+GeENkDC08m/uow8yOjbCvqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 06:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9c:de:be:d3:9c:e2:db:da:09:98:72:11:28:26:49:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56ef72de77d1b7e2b44705b6cbce639421da9bef
        Validity
            Not Before: Aug 12 06:01:40 2025 GMT
            Not After : Aug 13 06:01:40 2025 GMT
        Subject: CN=0c63cd7da09dc53ab1197c668c8f2611a9eb9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:23:42:a5:8d:58:34:95:6e:7f:6e:bf:6b:
                    7e:c5:c6:23:7f:3c:49:6e:cb:19:ca:01:bd:0b:54:
                    42:cf:df:1a:ae:a6:2e:bd:2e:f7:3a:87:db:a8:e1:
                    b6:4b:be:a3:82:63:65:77:c4:37:5d:3d:f9:84:fd:
                    09:df:7e:46:31:9c:c7:80:e8:c0:08:42:9b:bb:ed:
                    06:8d:dc:6c:0b:65:97:84:2d:f3:0b:ef:a7:3f:1a:
                    c6:49:03:e7:5b:f5:02:8f:65:4b:da:5b:8d:9c:8c:
                    d5:4d:b2:87:37:96:d3:36:ed:29:e8:be:6c:55:e5:
                    65:10:f2:04:f1:aa:6f:47:fa:65:20:7e:1b:88:e2:
                    41:84:c4:be:84:5c:fc:01:12:89:53:c5:89:12:e7:
                    84:1e:74:54:87:2f:83:6e:bb:cf:cc:d5:bb:17:98:
                    5f:99:3d:1a:76:c4:67:f6:0a:be:12:5d:f8:2e:eb:
                    b4:8e:59:53:a8:12:af:01:fa:9c:f7:13:12:86:50:
                    b2:bb:c9:0a:ec:b4:39:81:d2:b1:cf:a4:84:ef:af:
                    22:c1:61:41:61:84:11:0d:24:5d:6c:6a:76:0a:7e:
                    d1:2f:09:13:32:71:6e:6e:e9:ae:c0:49:21:23:30:
                    53:cd:ac:bc:6b:95:82:d1:88:aa:cb:ed:67:bd:79:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:63:CD:7D:A0:9D:C5:3A:B1:19:7C:66:8C:8F:26:11:A9:EB:9C:A3
            X509v3 Authority Key Identifier:
                keyid:56:EF:72:DE:77:D1:B7:E2:B4:47:05:B6:CB:CE:63:94:21:DA:9B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vu9y3nfRt-K0RwW2y85jlCHam-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/71fdd5-c29d-4d38-8ef9-4f656f29a51b/1/Vu9y3nfRt-K0RwW2y85jlCHam-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2c:be:a2:ea:d0:09:9b:80:00:20:bd:c1:1f:24:cd:f2:ce:
         c4:12:e2:3b:c6:96:f1:78:75:43:df:d9:b9:2d:fd:65:06:e1:
         f6:fd:bd:88:c7:e7:93:d1:20:9b:48:ed:4d:61:ab:a0:4b:0a:
         55:a4:b4:fa:5c:41:49:c1:9c:a5:95:64:53:f9:e7:90:a5:6f:
         28:0e:24:39:2a:a3:d5:de:df:16:c8:a2:be:37:e0:6c:c1:7c:
         13:29:71:fc:1e:3c:d4:09:41:0f:b9:96:34:6f:21:4a:c5:a2:
         47:e5:d5:67:b4:d0:41:ed:fa:69:53:1f:34:f7:28:a2:f9:20:
         55:a7:5a:ac:28:a3:fa:06:99:c0:a8:e5:39:8c:ee:01:5e:bc:
         31:6b:77:a1:60:b5:02:e2:b9:2e:02:d0:c6:01:7a:c3:d3:44:
         5c:92:5e:1d:ad:59:4b:56:41:6d:c5:ee:f2:e9:b0:38:95:83:
         ad:c9:ad:e4:10:82:c5:13:4d:fa:4d:56:81:c7:22:02:6e:9a:
         19:96:22:79:5d:52:eb:0d:23:e1:bc:ae:1e:f0:e5:ca:c7:0d:
         91:57:d1:62:14:b6:b7:aa:84:d3:ed:2a:2e:8b:d4:90:f7:bd:
         c3:22:28:8e:65:37:98:f4:a0:5b:53:27:86:b7:56:98:9a:d8:
         53:54:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:56 2025 by rpki-client