Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier:          0FxVGJlmJgyIiNnk/8rA/7h5cApBfczrkB9OzU2HDEM=
Subject key identifier:   0B:A5:B1:1B:0C:CF:B5:24:E8:09:9B:F3:0A:2A:33:91:06:79:E7:56
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer:       /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial:       0198971366BC8D602AD8F76198F47E5195CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number:          0495
Signing time:             Mon 11 Aug 2025 03:01:27 +0000
Manifest this update:     Mon 11 Aug 2025 03:01:27 +0000
Manifest next update:     Tue 12 Aug 2025 03:01:27 +0000
Files and hashes:         1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: gwGSN5tfnPdj/WzEPUDfsaDMQWYjOp1daXnWCAX052w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:13:66:bc:8d:60:2a:d8:f7:61:98:f4:7e:51:95:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Validity
            Not Before: Aug 11 03:01:27 2025 GMT
            Not After : Aug 12 03:01:27 2025 GMT
        Subject: CN=0ba5b11b0ccfb524e8099bf30a2a33910679e756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:03:6c:84:2f:77:00:24:32:a4:99:6b:73:18:
                    9f:1e:ed:bd:f6:02:4d:e6:62:16:f9:ae:e7:31:e0:
                    2d:60:84:7b:7c:12:fe:1d:b7:f7:f6:1a:66:04:ed:
                    dd:fb:70:7b:4b:84:7b:f4:59:56:a1:1f:75:84:40:
                    db:ad:63:d6:37:73:02:ba:53:56:22:b7:8b:65:12:
                    59:cf:f5:9e:dd:aa:19:90:1f:20:3d:05:c8:85:6a:
                    9e:3e:78:df:45:67:e6:83:b9:28:d7:0b:53:c9:73:
                    c1:5a:34:80:49:49:3b:20:3e:a6:77:cd:de:4f:b7:
                    8d:00:1c:df:8a:92:db:4c:83:ae:41:f9:b5:99:e4:
                    48:d6:eb:46:86:1d:e7:da:ce:87:20:6e:6f:fc:fc:
                    de:b7:bc:82:20:86:4d:fd:78:43:b6:5c:de:69:58:
                    2e:be:75:6f:04:63:28:34:66:ff:49:23:f6:e2:ca:
                    d1:12:7e:4d:fd:c2:b6:55:32:fa:9b:c2:41:6a:7b:
                    aa:6c:df:f5:2d:35:62:ed:b7:f0:4f:05:91:31:67:
                    60:72:58:7d:a8:4d:0a:05:ff:dc:91:cf:6a:d0:b8:
                    2e:29:82:b5:80:b3:88:ea:bf:69:1d:e5:6d:f6:aa:
                    0a:af:38:64:09:19:3a:6d:bc:d7:3b:54:6f:05:80:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:B1:1B:0C:CF:B5:24:E8:09:9B:F3:0A:2A:33:91:06:79:E7:56
            X509v3 Authority Key Identifier:
                keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:28:9e:bc:15:2a:d2:06:60:82:a8:9b:86:21:bf:1e:44:
         f6:cd:e7:b7:9c:79:7e:78:50:c7:6e:7a:48:60:f7:95:b0:1f:
         03:38:f7:3a:2a:a7:ae:ee:a9:f8:1a:e3:b9:58:8e:e2:95:c6:
         3b:ef:33:1d:d5:ee:48:08:e5:b8:d5:73:50:e0:94:ab:ab:16:
         c3:99:05:e0:01:42:34:1f:d5:5e:b2:72:61:33:ad:79:97:23:
         df:21:b8:d3:a9:f9:a6:16:25:9a:3a:54:16:d8:13:87:e1:d5:
         ac:da:94:42:f8:b2:d8:cf:7a:55:3c:15:0d:b3:64:4e:fe:ef:
         27:8c:2f:7e:8e:cc:b5:e4:53:59:00:9b:35:18:08:c6:fa:b8:
         85:3c:0e:38:44:c0:51:31:94:18:2e:19:00:ce:87:e1:7e:1c:
         00:66:0c:dd:ad:d5:47:1b:a4:e4:22:07:62:34:bc:36:1a:1c:
         13:d0:2b:1b:23:d1:8a:1e:62:36:7b:7a:48:db:cd:66:63:61:
         7d:36:98:d3:11:16:47:01:d8:2f:8d:09:ea:cc:37:6a:1b:4e:
         6b:a7:c0:cb:23:e8:a5:a7:96:52:03:7f:94:d9:74:60:03:a6:
         ec:2a:9e:03:ff:1c:9f:00:94:50:9a:fb:d7:ab:e7:ca:92:0e:
         0d:48:8b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:27 2025 by rpki-client