Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
File:                     VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft (raw, json)
Hash identifier:          QhZL7STl4ZcT+ZndBPd7CSm2Q5vJeZXImWinBS1BVrg=
Subject key identifier:   51:D0:3A:EA:6B:B1:86:F8:1F:3A:EB:EC:2D:67:15:24:24:CA:53:BF
Authority key identifier: 54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00
Certificate issuer:       /CN=5448a5c5c577b53cc298af0443edd4352e1b1300
Certificate serial:       01989592A61D71A292F41852A9B728FDFE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
Manifest number:          013B
Signing time:             Sun 10 Aug 2025 20:01:12 +0000
Manifest this update:     Sun 10 Aug 2025 20:01:12 +0000
Manifest next update:     Mon 11 Aug 2025 20:01:12 +0000
Files and hashes:         1: VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl (hash: rfYdECJI3Z1pL3idh8QteAdzrXsl4f4SAWeicm45i8c=)
                          2: z7A1F9yPjL55IibPa20Kjx9HdWo.roa (hash: n2Ln9x6dFYLELeltpBs/l+euwSQGs6r6YausDD8SqV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:a6:1d:71:a2:92:f4:18:52:a9:b7:28:fd:fe:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5448a5c5c577b53cc298af0443edd4352e1b1300
        Validity
            Not Before: Aug 10 20:01:12 2025 GMT
            Not After : Aug 11 20:01:12 2025 GMT
        Subject: CN=51d03aea6bb186f81f3aebec2d67152424ca53bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:52:8a:e4:1e:99:d4:0b:16:78:2e:3b:24:
                    68:5f:2d:46:0d:c9:2d:07:4c:78:f8:72:28:c9:73:
                    5f:f1:05:43:72:1b:0d:28:fb:93:90:c0:c1:36:c3:
                    df:18:84:92:ec:82:94:40:bb:cc:d9:1a:a4:08:cf:
                    5d:01:65:81:06:77:52:01:c3:a2:ca:59:46:28:e5:
                    92:43:96:9f:c7:6e:82:ed:17:bc:62:2a:6d:8f:17:
                    ef:ca:0a:2a:38:8f:46:f7:88:62:b0:e9:af:2b:68:
                    ae:7f:29:0e:16:d2:39:77:c5:f7:c5:55:a5:96:d2:
                    e0:a0:34:a0:e5:f6:c4:fd:09:ad:86:06:40:b3:63:
                    63:54:c8:e8:c1:c8:e7:28:b1:88:2d:45:a6:99:86:
                    ad:2e:59:1e:1a:5d:37:0a:03:13:71:d1:99:c6:b5:
                    7e:51:4a:52:e1:1d:50:40:ef:86:3c:b4:1c:dc:3f:
                    a5:7e:fb:d2:83:1c:2d:59:40:0c:dd:c4:1a:4f:ff:
                    6d:75:d8:4a:3c:7c:90:1c:32:e5:34:1e:8d:16:37:
                    96:80:be:90:b6:d8:e1:e1:b1:48:5b:23:c2:c4:12:
                    ec:a7:f1:d8:62:2b:e8:3e:eb:0c:e4:d6:42:67:87:
                    9c:bd:48:20:bd:f3:e1:b7:4e:14:42:71:28:65:9f:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D0:3A:EA:6B:B1:86:F8:1F:3A:EB:EC:2D:67:15:24:24:CA:53:BF
            X509v3 Authority Key Identifier:
                keyid:54:48:A5:C5:C5:77:B5:3C:C2:98:AF:04:43:ED:D4:35:2E:1B:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEilxcV3tTzCmK8EQ-3UNS4bEwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dac5fe-b914-4aef-b7ca-3d0c683fa9c9/1/VEilxcV3tTzCmK8EQ-3UNS4bEwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:55:e0:01:3d:10:42:f9:9b:03:ae:4b:01:32:39:40:8d:e7:
         28:0e:05:26:45:a8:7c:fb:9f:91:9d:58:eb:0f:56:82:b1:ea:
         99:35:cd:db:c4:48:0e:b5:30:e3:11:9c:61:61:c7:70:0a:92:
         93:12:6a:5d:e9:fd:3b:ac:a8:9d:1e:0b:5b:a2:6a:84:ef:4f:
         8d:eb:4e:36:b3:7a:42:a5:a2:bc:f0:da:46:c8:51:b2:14:85:
         86:68:7f:64:35:30:a1:1d:db:73:05:1a:cf:a3:6a:2d:0b:30:
         da:cc:d3:75:78:d8:e9:77:19:5a:9c:f9:ce:4c:df:cf:b4:40:
         6f:76:67:01:4a:09:c6:fd:05:64:18:8c:0f:09:c2:a3:32:d1:
         10:d7:38:27:34:78:af:65:2c:f4:cc:c0:ee:fd:86:f3:46:44:
         b3:cf:cd:43:e6:22:29:f7:53:3b:7d:bd:16:09:d2:48:f0:5a:
         d5:3d:cf:7d:39:6a:64:99:bc:bf:c7:92:93:5c:7c:04:e7:7f:
         71:25:40:9a:ab:98:3b:b8:2c:b7:f7:a8:c7:47:3c:52:8c:12:
         48:d0:b7:56:e4:80:08:54:1b:a2:69:a5:ff:02:c6:76:b5:a2:
         67:cb:27:df:d1:96:f3:dd:b5:f2:db:d2:2e:d7:45:a2:7f:96:
         51:cd:c6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:12 2025 by rpki-client