Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
File:                     VHKdSdKy4Au8soU6dMvA6UZz8BI.mft (raw, json)
Hash identifier:          PzEQjQyJMiv8G+7lCBiVf76+qxf5sxLyelEZzRmkWew=
Subject key identifier:   00:3E:63:6C:DD:FF:99:88:C0:1C:84:1C:0A:04:C9:D5:0F:79:9A:54
Authority key identifier: 54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12
Certificate issuer:       /CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
Certificate serial:       01987CE55EE94A04417414790A01EB6E349F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
Manifest number:          15F8
Signing time:             Wed 06 Aug 2025 01:01:03 +0000
Manifest this update:     Wed 06 Aug 2025 01:01:03 +0000
Manifest next update:     Thu 07 Aug 2025 01:01:03 +0000
Files and hashes:         1: VHKdSdKy4Au8soU6dMvA6UZz8BI.crl (hash: +hldBEx+sGqAbN7hfJIA19kwO4fZrZKO6Jldj9NDoOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:5e:e9:4a:04:41:74:14:79:0a:01:eb:6e:34:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54729d49d2b2e00bbcb2853a74cbc0e94673f012
        Validity
            Not Before: Aug  6 01:01:03 2025 GMT
            Not After : Aug  7 01:01:03 2025 GMT
        Subject: CN=003e636cddff9988c01c841c0a04c9d50f799a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:95:b0:2f:45:9d:0d:a2:06:33:63:bb:d3:
                    b0:e2:c9:37:ca:53:8f:0e:2e:9c:91:6b:f6:11:da:
                    9b:6d:57:27:0b:be:bf:b6:5e:da:a4:cb:ac:26:a3:
                    c2:79:96:c5:2f:a1:4f:a7:bf:c1:0d:ec:76:86:e6:
                    f0:49:12:be:e0:69:85:a2:71:ca:26:bd:b8:64:c6:
                    e9:06:67:9d:dd:32:e0:8c:b0:95:fd:d5:72:65:f5:
                    e7:e3:f5:c2:6d:66:30:64:58:f4:0f:6c:d9:8b:b7:
                    62:6c:e7:77:60:ac:0e:4b:b8:23:1e:8a:46:63:11:
                    d8:36:a0:22:96:5d:8e:29:c8:ce:41:fc:f0:27:2a:
                    07:75:3f:06:f2:0d:0e:20:a4:f9:72:35:a5:74:99:
                    97:8c:93:50:92:69:9d:c4:95:9e:41:bb:c8:f2:18:
                    f7:2f:a2:cb:ea:0a:2c:f8:d8:9a:8b:8c:83:09:c8:
                    64:23:82:c9:eb:d8:d6:e0:da:41:f8:1f:3d:5f:28:
                    b1:7e:1e:34:6d:65:96:95:72:8b:1d:4b:03:90:9b:
                    75:38:56:95:f3:08:82:30:e4:5d:c3:19:57:f8:a4:
                    8b:44:bd:6a:aa:8f:0c:49:5b:93:68:2a:1b:5d:d9:
                    98:2c:6d:7c:3b:51:08:7b:69:cd:32:6e:d9:05:df:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3E:63:6C:DD:FF:99:88:C0:1C:84:1C:0A:04:C9:D5:0F:79:9A:54
            X509v3 Authority Key Identifier:
                keyid:54:72:9D:49:D2:B2:E0:0B:BC:B2:85:3A:74:CB:C0:E9:46:73:F0:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHKdSdKy4Au8soU6dMvA6UZz8BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a15ef7-b8fe-4659-9698-0fc060220629/1/VHKdSdKy4Au8soU6dMvA6UZz8BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:d5:81:23:cd:e4:b9:8a:93:99:e5:92:55:9e:83:dc:c6:
         52:b6:0a:2d:4d:bc:41:b1:b0:7f:f1:7b:69:b8:ec:a8:72:a8:
         0d:8f:97:bc:6b:c5:0c:51:79:71:f4:f7:92:de:49:1a:d2:0f:
         39:20:67:e1:d2:da:be:f0:64:7f:28:20:0b:16:1c:6e:51:4e:
         e0:a9:5d:e8:f8:b0:e8:20:58:7d:66:61:7e:93:f4:58:67:2e:
         d7:92:f3:a7:82:ee:77:ee:02:c7:4d:d9:5f:06:7a:4d:15:f6:
         b4:10:e0:ad:ed:44:81:74:11:65:b6:8e:40:f7:c3:a2:b4:11:
         d8:67:11:3a:98:0b:2d:cb:1d:e7:c1:bc:7a:4a:48:60:2a:83:
         eb:ac:4a:1b:99:bc:56:3d:4f:12:98:cb:e4:bb:aa:61:b2:81:
         99:7a:6e:87:c5:72:54:e9:c1:20:15:05:70:21:6a:72:93:89:
         5f:75:82:3e:f4:d8:7b:63:84:e9:17:19:a3:61:55:68:86:e9:
         74:0b:de:d7:8a:1c:fc:0a:24:83:a0:df:42:07:d1:b1:c1:7e:
         c4:94:42:c5:ce:49:33:91:44:8f:56:e3:91:17:cd:71:c6:26:
         b9:4f:c7:4d:0f:e1:72:81:c3:a3:14:11:39:b9:06:84:ed:54:
         43:f6:d9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:03 2025 by rpki-client