Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
File:                     VpXFSglZPdyD-s4S21K_aiK5du0.mft (raw, json)
Hash identifier:          lSdFTQZqV7rsR8aAe09XX6pFWDsr2Nyi1alWw6fHjlg=
Subject key identifier:   87:37:DD:29:1A:C5:B0:08:59:45:11:B3:38:15:62:CA:C1:17:8E:42
Authority key identifier: 56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED
Certificate issuer:       /CN=5695c54a09593ddc83face12db52bf6a22b976ed
Certificate serial:       019873E325155FFD4E321C1CEF59FD44BE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
Manifest number:          0728
Signing time:             Mon 04 Aug 2025 07:02:02 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:02 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:02 +0000
Files and hashes:         1: VpXFSglZPdyD-s4S21K_aiK5du0.crl (hash: 8e42RHY0x4eCc+u58v9lBNkHWWvzlj4vH2EmXiqfMj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:25:15:5f:fd:4e:32:1c:1c:ef:59:fd:44:be:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5695c54a09593ddc83face12db52bf6a22b976ed
        Validity
            Not Before: Aug  4 07:02:02 2025 GMT
            Not After : Aug  5 07:02:02 2025 GMT
        Subject: CN=8737dd291ac5b008594511b3381562cac1178e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a0:f5:ef:f0:f3:1a:d0:74:af:e3:11:4e:0b:
                    22:da:cd:93:f2:51:04:f1:64:7a:3f:cf:64:f9:17:
                    17:19:9d:75:92:df:7c:7b:76:81:82:7d:ce:a5:b6:
                    72:43:3b:0a:df:a8:64:cf:8c:fa:68:f8:a9:33:d2:
                    a3:4f:6d:41:b3:68:89:bd:0a:c3:43:f8:69:0b:0a:
                    db:71:53:ea:39:88:85:5e:43:25:14:2a:88:19:19:
                    69:01:0b:24:a5:43:5f:54:6a:bf:66:ff:87:0f:37:
                    1f:89:7f:e8:05:24:4f:02:08:7a:55:e0:00:e6:b4:
                    d1:3f:62:b1:78:49:98:88:b7:bc:4e:bc:1d:83:e9:
                    bc:4b:58:5d:18:36:29:55:ad:2c:89:d8:4a:e4:06:
                    8b:17:a7:f5:ab:12:d8:30:a6:32:59:87:95:fc:8b:
                    2b:e1:8b:ef:53:67:99:62:b4:ed:98:c2:f1:27:69:
                    de:14:16:d4:46:1f:14:81:16:5f:d2:71:7c:80:33:
                    e0:77:a7:a2:04:56:0d:66:4b:2b:4c:b7:75:51:21:
                    cb:7c:18:5f:c2:28:a4:7c:55:7f:9f:5f:bb:d1:66:
                    ba:9c:c9:2b:35:b5:3c:eb:1f:02:ec:e4:6a:d9:56:
                    79:8a:e8:95:96:60:e7:be:12:f0:5f:de:b0:54:83:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:37:DD:29:1A:C5:B0:08:59:45:11:B3:38:15:62:CA:C1:17:8E:42
            X509v3 Authority Key Identifier:
                keyid:56:95:C5:4A:09:59:3D:DC:83:FA:CE:12:DB:52:BF:6A:22:B9:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpXFSglZPdyD-s4S21K_aiK5du0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/eeb517-b38b-4073-a2ae-e3fa9e63b9bc/1/VpXFSglZPdyD-s4S21K_aiK5du0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:72:a8:05:d5:d3:df:54:e6:15:b0:f9:1c:13:7e:4b:ef:da:
         de:e9:db:60:0e:cb:7a:d1:95:f3:67:95:94:ff:be:85:af:ed:
         66:4f:98:05:82:ba:39:a6:95:ca:5e:0c:d0:d4:45:20:6c:ca:
         ee:d8:1c:12:24:9e:92:4c:67:20:a4:49:6e:52:4f:a6:f6:53:
         6d:8a:55:4d:09:03:f6:8a:10:56:6b:59:1d:8e:3b:df:bd:58:
         0b:54:c4:26:76:21:9f:e5:dc:cb:91:d3:dd:dd:5b:db:aa:a9:
         2a:20:01:d1:a0:17:c6:0d:6b:59:45:aa:30:90:95:60:a3:16:
         87:06:d2:48:63:f3:ee:a4:f4:33:e7:46:c0:43:d8:11:3b:06:
         fd:2b:fd:32:82:bf:47:10:88:b0:55:46:cb:c2:74:9f:7a:12:
         04:68:0a:11:91:b0:1d:da:85:4c:1e:6f:60:d7:01:e2:a1:a7:
         cc:3b:7d:b4:90:b3:e6:d9:df:b5:aa:10:43:77:d3:9c:d0:4d:
         8e:65:f1:25:e9:a5:4f:69:9e:5f:04:b6:ff:d2:74:02:e4:c0:
         d0:53:3a:88:9b:d3:43:b3:6e:48:2f:cb:3d:1b:75:27:93:a4:
         d5:6a:34:a3:57:7b:49:de:69:b8:ff:ae:b5:5a:f5:3c:e1:1b:
         4d:8e:ae:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4yUVX/1OMhwc71n9RL52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTVjNTRhMDk1OTNkZGM4M2ZhY2UxMmRiNTJiZjZhMjJi
OTc2ZWQwHhcNMjUwODA0MDcwMjAyWhcNMjUwODA1MDcwMjAyWjAzMTEwLwYDVQQD
Eyg4NzM3ZGQyOTFhYzViMDA4NTk0NTExYjMzODE1NjJjYWMxMTc4ZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aD17/DzGtB0r+MRTgsi2s2T8lEE
8WR6P89k+RcXGZ11kt98e3aBgn3OpbZyQzsK36hkz4z6aPipM9KjT21Bs2iJvQrD
Q/hpCwrbcVPqOYiFXkMlFCqIGRlpAQskpUNfVGq/Zv+HDzcfiX/oBSRPAgh6VeAA
5rTRP2KxeEmYiLe8Trwdg+m8S1hdGDYpVa0sidhK5AaLF6f1qxLYMKYyWYeV/Isr
4YvvU2eZYrTtmMLxJ2neFBbURh8UgRZf0nF8gDPgd6eiBFYNZksrTLd1USHLfBhf
wiikfFV/n1+70Wa6nMkrNbU86x8C7ORq2VZ5iuiVlmDnvhLwX96wVIMXPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc33SkaxbAIWUURszgVYsrBF45CMB8GA1UdIwQY
MBaAFFaVxUoJWT3cg/rOEttSv2oiuXbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUt
ZTNmYTllNjNiOWJjLzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9lZWI1MTctYjM4Yi00MDczLWEyYWUtZTNmYTllNjNiOWJj
LzEvVnBYRlNnbFpQZHlELXM0UzIxS19haUs1ZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnKoBdXT
31TmFbD5HBN+S+/a3unbYA7LetGV82eVlP++ha/tZk+YBYK6OaaVyl4M0NRFIGzK
7tgcEiSekkxnIKRJblJPpvZTbYpVTQkD9ooQVmtZHY47371YC1TEJnYhn+Xcy5HT
3d1b26qpKiAB0aAXxg1rWUWqMJCVYKMWhwbSSGPz7qT0M+dGwEPYETsG/Sv9MoK/
RxCIsFVGy8J0n3oSBGgKEZGwHdqFTB5vYNcB4qGnzDt9tJCz5tnftaoQQ3fTnNBN
jmXxJemlT2meXwS2/9J0AuTA0FM6iJvTQ7NuSC/LPRt1J5Ok1Wo0o1d7Sd5puP+u
tVr1POEbTY6uyg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:27 2025 by rpki-client