Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
File:                     VRy0WKT6JZKw_GZGRuJzws9HgkY.mft (raw, json)
Hash identifier:          bUuEN78JFZzfkJcPfV2xVELYmmErvsfrDiH4FFTaM5g=
Subject key identifier:   FB:8A:A9:81:22:EB:77:83:04:A9:EA:A3:FC:C4:E6:EE:67:46:08:54
Authority key identifier: 55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46
Certificate issuer:       /CN=551cb458a4fa2592b0fc664646e273c2cf478246
Certificate serial:       019890DB9CF296F22F5BF8AF67D763CC1923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
Manifest number:          059A
Signing time:             Sat 09 Aug 2025 22:02:48 +0000
Manifest this update:     Sat 09 Aug 2025 22:02:48 +0000
Manifest next update:     Sun 10 Aug 2025 22:02:48 +0000
Files and hashes:         1: VRy0WKT6JZKw_GZGRuJzws9HgkY.crl (hash: nAGKnTj7sbGODFIJcNX1QZdZkrlgQG8FHYQ5S2AZ+Zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 22:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:db:9c:f2:96:f2:2f:5b:f8:af:67:d7:63:cc:19:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551cb458a4fa2592b0fc664646e273c2cf478246
        Validity
            Not Before: Aug  9 22:02:48 2025 GMT
            Not After : Aug 10 22:02:48 2025 GMT
        Subject: CN=fb8aa98122eb778304a9eaa3fcc4e6ee67460854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:31:fb:51:56:95:89:fe:bd:3f:80:6a:df:
                    e4:cf:af:ae:c4:95:ca:65:e7:16:17:22:f6:c3:59:
                    90:18:32:2c:3f:12:40:46:cc:d3:ec:0e:e1:c1:a9:
                    1c:f3:53:14:df:6f:60:49:e1:8b:5e:a3:1c:98:57:
                    75:f0:52:0a:c3:67:bb:5a:2f:eb:b9:9b:99:28:b7:
                    b4:a5:f0:84:6c:99:39:fb:a9:49:4c:f1:01:cc:f5:
                    f9:d7:33:49:08:24:10:ba:95:2e:4f:af:ea:36:73:
                    ae:8e:8c:2a:6b:5d:10:a1:08:a1:68:fb:5d:4d:3a:
                    ac:bb:a7:12:80:5c:4e:6e:c8:15:29:d0:88:3b:b4:
                    fa:09:57:3e:c5:07:65:4f:45:43:ce:6b:70:e6:ab:
                    b9:3f:9c:fe:d8:0d:42:28:34:2c:16:d3:4f:1c:94:
                    a0:be:69:c5:14:68:aa:e7:f2:42:d7:e2:2f:5b:cd:
                    bb:a2:d9:2c:54:58:52:70:7d:f5:cd:05:bb:23:a3:
                    d1:36:ef:50:fa:14:bb:4a:47:9e:9b:4a:6a:5b:39:
                    57:04:28:f2:8d:04:20:2f:52:0b:21:82:77:c3:27:
                    16:79:49:b3:52:7c:eb:d8:da:f8:78:36:b1:b5:3d:
                    1a:96:3a:d2:63:b9:93:c0:b7:3d:35:cf:96:d2:ca:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8A:A9:81:22:EB:77:83:04:A9:EA:A3:FC:C4:E6:EE:67:46:08:54
            X509v3 Authority Key Identifier:
                keyid:55:1C:B4:58:A4:FA:25:92:B0:FC:66:46:46:E2:73:C2:CF:47:82:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRy0WKT6JZKw_GZGRuJzws9HgkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12e871-b29f-4b60-bae3-9d4e6186bb83/1/VRy0WKT6JZKw_GZGRuJzws9HgkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3d:ff:5a:ca:87:0d:e5:ff:48:a2:43:84:d3:8e:bf:9e:07:
         a4:e3:9e:92:1b:67:fa:19:06:fc:be:54:a9:24:36:63:ce:f9:
         e7:27:f6:bc:1c:50:76:f6:89:43:42:08:e8:12:6d:4d:2f:16:
         37:85:7d:dc:a6:d5:5b:22:03:62:25:65:e5:b1:f9:ad:05:12:
         e7:d9:6b:c7:74:68:e4:2e:67:2a:52:ef:9f:b4:a7:aa:f0:d1:
         ab:6d:f2:ab:f9:4b:dd:75:47:cb:46:a6:da:7a:90:53:d2:39:
         1a:d5:a3:d5:69:f7:eb:2b:ce:55:ed:69:7e:37:5a:8e:ff:fb:
         3c:f7:f4:6e:a3:0a:d5:48:ac:d3:1e:20:db:bd:73:78:99:c4:
         22:6f:f0:fb:cd:05:55:2d:d9:3b:44:70:fc:cc:ba:c5:d3:af:
         5f:b5:8e:f0:e3:fe:ea:0f:f0:c9:c5:ee:b2:a0:dc:82:73:3e:
         10:c8:ff:98:43:de:f5:42:07:30:27:0e:f8:82:f3:ce:1e:da:
         84:5d:48:2b:5e:e4:6f:9b:9b:07:fd:86:f8:a9:99:2b:44:d9:
         2d:ea:03:d4:91:1c:0c:4c:3e:6d:cf:02:1c:89:f8:6b:ec:7a:
         9a:07:97:9b:69:94:48:54:2b:9a:d1:82:9e:da:29:d8:94:d8:
         c8:90:d7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:24 2025 by rpki-client