Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
File:                     Vxp0VREn6Q1zotOylfGm_1FRn98.mft (raw, json)
Hash identifier:          4+xZOtCAw+3mVCy6W83mYmoeRKprgsTPrgcGH5ccctY=
Subject key identifier:   84:24:56:15:8A:D2:F7:BC:4D:71:8E:74:CC:5F:5E:CE:56:57:10:DB
Authority key identifier: 57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF
Certificate issuer:       /CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
Certificate serial:       01987DF8A21F7BBFE5E8FE92BE7695F853D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
Manifest number:          0859
Signing time:             Wed 06 Aug 2025 06:01:43 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:43 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:43 +0000
Files and hashes:         1: Vxp0VREn6Q1zotOylfGm_1FRn98.crl (hash: qJDnI6Bdcn3sH8WWTy561duBY09kY70/Um5zPxMDO6o=)
                          2: aNICsUm_YHsuMjtHuPHf5eTVELc.roa (hash: FFxXKtXGviWIg2hjziI4X0dpXs0FS5YBP6Wt80lUyGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:a2:1f:7b:bf:e5:e8:fe:92:be:76:95:f8:53:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a74551127e90d73a2d3b295f1a6ff51519fdf
        Validity
            Not Before: Aug  6 06:01:43 2025 GMT
            Not After : Aug  7 06:01:43 2025 GMT
        Subject: CN=842456158ad2f7bc4d718e74cc5f5ece565710db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:fc:3a:c2:4c:9b:82:e0:ed:13:3a:aa:53:
                    08:2e:73:cc:db:e9:57:bd:84:51:23:3a:c8:29:97:
                    89:9c:48:36:f7:6f:50:b1:c0:32:f7:87:01:06:55:
                    28:e4:c6:31:c0:5c:2f:a6:40:7d:e2:5b:5e:0a:ae:
                    52:9f:ad:f6:60:09:1d:dc:50:af:9d:25:93:da:46:
                    33:20:90:13:ef:83:9b:d2:eb:74:95:67:bf:05:fc:
                    c7:28:96:8c:24:38:e6:e5:85:49:bc:c1:00:92:36:
                    86:c6:be:a4:f2:36:d0:12:35:d4:f6:e6:6b:85:19:
                    8e:33:b4:1e:80:76:98:a3:93:19:b5:87:78:b7:fd:
                    18:10:09:f8:83:0e:2d:b7:aa:a0:c5:03:2e:43:4b:
                    99:83:9e:29:a6:64:ef:8c:7f:e2:e3:fe:3d:37:2f:
                    2f:d2:a9:9d:cd:b3:30:67:14:0f:84:89:3c:9d:d4:
                    64:22:31:02:fb:3b:9c:ad:99:b0:a3:37:b2:de:a2:
                    8d:ea:66:2c:87:82:32:af:b6:3c:c5:1f:c9:9a:7b:
                    53:9c:33:7c:eb:f6:64:fb:b7:d2:8d:60:ef:46:35:
                    2b:c9:95:0e:4a:e6:dc:fa:66:b9:9d:f4:fe:89:af:
                    47:f9:cd:af:53:cb:07:fb:a9:e7:7c:98:5a:ff:f0:
                    e3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:24:56:15:8A:D2:F7:BC:4D:71:8E:74:CC:5F:5E:CE:56:57:10:DB
            X509v3 Authority Key Identifier:
                keyid:57:1A:74:55:11:27:E9:0D:73:A2:D3:B2:95:F1:A6:FF:51:51:9F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxp0VREn6Q1zotOylfGm_1FRn98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/dc1545-59ed-4b5e-bc3f-6eb0483236df/1/Vxp0VREn6Q1zotOylfGm_1FRn98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:42:17:e9:28:b8:57:32:48:f5:8d:35:4c:ec:17:70:53:4d:
         80:56:da:e6:ad:ea:b9:84:02:a2:f4:ef:92:a1:d0:47:c2:e7:
         d7:96:7b:83:2c:df:48:8a:33:17:4c:7b:a5:ce:b8:89:c1:6d:
         6b:4b:4d:8e:dd:0c:20:4f:67:98:45:e0:da:be:df:01:39:61:
         e4:8b:62:f0:16:ed:48:fa:e8:1a:4b:ed:2a:79:0a:26:0f:54:
         b1:04:fc:bf:26:c3:06:ee:51:52:1a:1a:4e:74:37:c7:31:de:
         33:37:9a:70:23:1c:29:01:49:cd:bc:88:91:6b:8c:ee:21:34:
         86:71:5b:0f:a0:76:a6:be:3f:b3:b5:86:55:cb:f1:65:d9:71:
         dc:1e:48:55:7f:11:e1:76:12:bb:7d:fc:55:20:f8:a2:dd:2f:
         d0:35:46:41:e5:da:83:33:8d:9e:38:86:5e:68:8e:91:34:85:
         3c:a4:22:d9:9d:26:69:0e:e7:e0:bb:4b:a6:0a:a4:c7:26:87:
         74:fd:ce:ac:37:7b:3e:0b:71:79:69:a7:83:53:4a:4c:da:80:
         75:71:73:39:3f:c5:6b:b0:43:92:90:2f:9c:cf:e1:c6:53:cf:
         58:63:ee:1d:49:f1:85:2b:ca:9e:f6:6b:1a:4b:f3:67:42:f8:
         d9:9e:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:43:51 2025 by rpki-client