Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          BdPCiNXHjQ8IRdAUiiE19tDDPe97EWGGRu0D3k1upsk=
Subject key identifier:   1D:AE:01:23:E2:50:9D:21:52:8E:47:19:8F:25:24:15:48:83:25:02
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       019879087DB555A90748AE5D0D203B674D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          02D8
Signing time:             Tue 05 Aug 2025 07:00:56 +0000
Manifest this update:     Tue 05 Aug 2025 07:00:56 +0000
Manifest next update:     Wed 06 Aug 2025 07:00:56 +0000
Files and hashes:         1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: i0thXFyVopqYma7oQfogr/DNiah/din8bsgZNKQl4nI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:08:7d:b5:55:a9:07:48:ae:5d:0d:20:3b:67:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Aug  5 07:00:56 2025 GMT
            Not After : Aug  6 07:00:56 2025 GMT
        Subject: CN=1dae0123e2509d21528e47198f25241548832502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ae:8a:b5:c8:d2:04:af:b5:ce:ab:1d:d6:e4:
                    59:f3:2e:e6:d2:ea:aa:17:70:d2:97:66:54:5d:63:
                    bc:35:68:ce:1d:e8:fc:f9:b9:3c:33:ca:00:1b:1e:
                    64:fd:cb:87:b2:10:6b:14:5e:65:64:bd:e2:4a:9f:
                    d9:8b:31:0a:45:4c:f2:cd:10:8d:2f:86:e5:f0:29:
                    8e:8f:b7:81:81:2c:18:79:48:73:45:1b:52:63:42:
                    ad:39:39:60:86:23:ae:6a:47:06:da:45:b0:93:1a:
                    0e:f8:3b:f7:b9:a3:9c:3a:82:c3:98:4a:a7:21:8e:
                    fc:22:8c:52:1a:a9:86:4d:1d:e3:37:50:92:25:bb:
                    28:42:4d:01:19:8c:88:8a:f7:26:ee:af:75:6a:99:
                    0d:ea:0c:89:b7:67:a0:2c:d8:d6:24:71:40:f0:78:
                    64:8c:43:34:80:53:e6:b1:8a:4e:6d:6a:db:07:92:
                    ec:ec:7e:4d:be:94:8b:33:22:a5:1b:54:bd:43:ba:
                    56:e9:b7:46:6a:cb:b1:9f:9e:b7:51:d2:dd:88:b9:
                    77:81:e1:2a:21:19:4a:3d:c9:4e:5e:4c:9d:38:d4:
                    cf:41:a6:a6:b1:65:36:b5:e7:a0:31:c5:22:c0:10:
                    32:75:74:9d:c4:7c:8d:2d:0f:b1:32:56:ea:43:db:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:01:23:E2:50:9D:21:52:8E:47:19:8F:25:24:15:48:83:25:02
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:4d:47:ea:3d:ee:82:7e:fd:2d:59:26:bc:6d:1d:b4:ed:8d:
         75:1b:76:80:c0:dc:e1:81:28:37:b8:8f:8e:7d:59:e3:7b:73:
         fe:6d:d1:98:83:38:07:d9:5a:d6:6f:b7:70:d6:e1:78:ae:b9:
         42:6f:38:dc:e9:89:5e:87:21:38:d7:b2:9e:54:b7:e0:dc:b0:
         26:8f:69:d2:85:3c:9b:4b:47:ad:89:30:79:36:af:5c:ae:95:
         f3:68:47:36:2c:41:16:a4:a0:1f:34:1e:13:67:aa:8a:47:0d:
         1c:b3:fe:72:69:f1:50:84:ad:06:86:42:6b:fc:cf:5a:1b:7a:
         74:a0:a1:de:d9:fb:82:a6:42:bd:bd:f8:e3:a3:7b:e2:64:7d:
         cc:27:93:7c:20:67:eb:a8:c7:53:ab:4a:9d:16:3f:38:f3:01:
         44:c5:44:aa:67:be:55:5d:95:cc:40:0e:d7:66:6b:55:6d:90:
         4e:9c:0c:09:13:0e:00:36:a1:62:22:aa:f3:47:33:4a:6c:5c:
         2a:79:db:79:f7:36:7e:6e:98:00:d3:9d:07:4a:00:28:ba:a7:
         53:b7:c9:22:07:b1:1b:2c:9f:00:92:33:2f:c7:c2:b9:ca:15:
         ac:ba:d4:fc:74:8e:b4:a3:c6:60:59:f1:ce:43:82:9a:13:36:
         50:aa:c6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:06 2025 by rpki-client