Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          JkIFfAV5KFCsxsZ3Es6EF3TdZMcE81kPLCpbbjYP9xg=
Subject key identifier:   7B:38:01:23:91:7D:11:55:44:D5:53:9F:A4:0A:0E:9F:8C:B2:10:16
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       019873E1D48547DE3F03BD9DAF3FCB5A6F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          12AC
Signing time:             Mon 04 Aug 2025 07:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:36 +0000
Files and hashes:         1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: R/qHon8ziCy67Aq/MpkOhxdvNiehlEN3Fy0uKPjQ2VA=)
                          2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:d4:85:47:de:3f:03:bd:9d:af:3f:cb:5a:6f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Aug  4 07:00:36 2025 GMT
            Not After : Aug  5 07:00:36 2025 GMT
        Subject: CN=7b380123917d115544d5539fa40a0e9f8cb21016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:ff:82:d8:82:74:6d:25:76:eb:ee:c7:c9:
                    fa:b4:12:f7:27:92:b2:cb:3b:95:33:73:99:5d:d9:
                    69:d8:22:44:f3:01:dc:82:60:99:18:e3:85:26:56:
                    dc:3c:a4:35:15:fb:39:3e:d4:c6:56:4a:2a:28:19:
                    d0:1c:fe:bb:2a:02:89:24:f4:19:b2:60:87:81:7c:
                    7c:49:9b:9a:14:e3:57:82:85:bd:d1:cc:93:44:4b:
                    6d:33:d4:ef:db:a9:5d:0d:58:16:a3:7e:25:ad:85:
                    e5:7e:9e:76:e7:73:42:16:94:3a:b8:80:f5:da:6a:
                    40:a4:98:3d:28:bf:07:77:5f:f4:61:62:b1:22:0d:
                    df:fe:83:4c:ff:1b:c3:8a:9e:38:99:d0:10:2b:10:
                    07:cf:94:8e:49:da:f7:b5:9a:34:8d:b6:b0:6c:86:
                    37:d1:3d:d7:bc:a5:86:8e:40:20:33:17:95:f5:08:
                    fe:92:ff:5f:3b:bc:60:14:2b:28:82:21:e1:6a:51:
                    cb:02:2c:6a:35:1d:70:ee:5c:ae:5d:1c:a2:49:78:
                    7f:20:ce:f6:e5:91:7b:17:95:63:1e:75:f4:e8:45:
                    a3:88:2f:27:9c:b3:2b:79:08:7c:0b:3d:5a:a4:7f:
                    02:6a:3f:c1:b4:19:db:e6:28:1a:4e:a2:e9:66:77:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:38:01:23:91:7D:11:55:44:D5:53:9F:A4:0A:0E:9F:8C:B2:10:16
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4d:e0:46:a5:b9:f3:1e:2e:d6:53:b9:42:1a:e3:eb:e2:76:
         52:bb:23:67:86:a8:2f:0c:f8:a2:24:67:b7:87:37:b2:bc:f8:
         c1:d7:88:0c:2f:80:ea:a6:ed:2c:55:91:f8:fc:f3:df:f2:7f:
         df:3b:21:71:41:dc:e2:01:fe:35:ec:78:36:b7:b7:0c:1a:60:
         05:23:cb:72:99:cf:db:a1:5d:f5:67:90:6d:13:bf:f4:3a:37:
         42:6b:ec:c6:4a:3f:2a:75:b3:47:2c:e4:88:2e:85:52:28:2c:
         93:be:03:1b:c8:42:c1:09:36:4f:b9:68:64:2d:6c:ab:f8:1e:
         cb:81:1e:13:86:ec:0a:87:d9:1f:56:c8:92:ab:56:6e:e9:2b:
         03:dc:8b:71:84:9b:e8:ab:ca:bc:2d:b0:78:f8:3a:a9:16:ab:
         b7:21:2e:7f:01:46:f1:f7:65:a8:ca:8d:3f:6a:a6:5b:b2:62:
         26:10:e7:35:a0:40:15:94:59:14:f7:0e:19:ff:70:45:6c:59:
         d9:5c:ae:4b:e3:7c:f9:da:aa:8e:c9:9a:fe:fb:62:ef:53:b3:
         d7:02:0f:82:47:44:2b:33:52:61:23:51:cf:91:92:25:a0:dd:
         73:73:12:49:16:f9:6b:0d:b4:bb:2d:00:70:b2:5e:2e:25:92:
         ca:3a:26:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:37 2025 by rpki-client