Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File:                     VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier:          slmDJ2dBYhU8V9llkpeAhy/tAj9R7pBpkaV5DFtGUCE=
Subject key identifier:   B2:4E:69:B8:38:C0:11:F5:55:A9:15:85:3F:02:FD:AC:FE:DE:C9:C0
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer:       /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial:       0199FCC698D3AB50288D4C8BA70EC3588439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number:          EF
Signing time:             Sun 19 Oct 2025 14:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:37 +0000
Files and hashes:         1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: scWMrw6I0n6O02Rwks48gCLyCwWyuGPjBfukZn722rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:98:d3:ab:50:28:8d:4c:8b:a7:0e:c3:58:84:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
        Validity
            Not Before: Oct 19 14:01:37 2025 GMT
            Not After : Oct 20 14:01:37 2025 GMT
        Subject: CN=b24e69b838c011f555a915853f02fdacfedec9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:9f:ea:fd:d2:f0:6b:b1:4c:31:bb:b5:de:
                    8c:a3:31:8a:d6:fc:e1:ff:00:9c:09:79:ba:dd:c9:
                    9e:11:cf:a7:f3:cc:c3:d5:27:23:46:af:d2:e2:2d:
                    a6:75:b1:c5:e6:12:39:33:aa:73:95:82:52:80:6b:
                    70:96:6c:74:f7:30:19:6b:c8:38:ef:44:3f:45:e3:
                    f0:ce:d7:4e:4e:74:29:af:96:96:15:79:24:0e:0a:
                    88:00:89:40:c4:e1:21:4b:59:36:59:e7:2c:4c:11:
                    f4:0c:96:92:43:26:81:51:a2:d5:0b:98:29:70:87:
                    ad:95:41:6a:74:f9:7e:bb:03:34:23:8d:29:ea:07:
                    3f:fc:dc:3b:67:1b:1a:66:d8:81:60:7c:7b:1f:ba:
                    dd:98:16:14:f4:f9:9e:18:15:a2:3a:53:34:f9:40:
                    27:8b:6f:0f:6c:ef:a7:59:83:c3:77:2d:99:18:ed:
                    f2:30:e4:0a:6a:98:1b:07:9b:e4:d4:89:15:26:76:
                    3e:46:99:b7:e2:53:ef:c2:52:4a:bf:90:a1:92:42:
                    d6:38:00:10:14:2d:f0:d2:2d:47:5e:46:85:84:72:
                    60:9e:ef:39:87:ce:c9:a5:b2:4e:a0:82:ec:10:82:
                    8d:fe:d3:b4:5e:00:c2:91:7f:46:cc:e0:18:62:bb:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4E:69:B8:38:C0:11:F5:55:A9:15:85:3F:02:FD:AC:FE:DE:C9:C0
            X509v3 Authority Key Identifier:
                keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c6:6e:0b:66:61:a6:a3:28:75:46:07:c0:d3:ed:fa:60:67:
         10:f4:c0:0a:6e:e7:44:38:ca:52:be:8b:74:98:8f:69:e9:20:
         aa:a3:ce:dc:23:33:ba:a7:03:81:a1:14:df:58:1c:e5:e4:76:
         b3:f1:50:7b:a4:ec:84:45:8a:0d:23:37:d8:62:8d:12:3c:0c:
         4a:09:c8:08:ac:1d:b5:85:da:0d:44:fe:48:50:8f:00:c4:17:
         80:27:63:5b:1c:cf:87:6c:55:4c:de:79:07:76:35:24:93:16:
         e1:2a:19:a8:a7:c4:d6:16:2d:f7:f5:e8:1f:32:5d:f0:3b:60:
         96:8b:61:99:17:aa:b0:b9:74:d0:33:90:81:c0:97:d0:d4:8f:
         ae:96:fa:cb:aa:38:dc:08:66:2d:c1:ff:5a:3c:4e:27:18:21:
         3d:5e:30:31:a6:be:75:9d:14:dd:0d:e9:44:cf:eb:65:27:29:
         9c:3b:9e:be:90:fd:6c:11:40:10:58:b3:1f:9d:1a:63:ec:66:
         d0:4a:c6:99:03:3d:76:3b:65:f0:78:5e:6d:93:ed:40:a9:c3:
         2b:a7:59:47:83:9d:66:92:be:be:06:15:ee:ac:95:b4:68:de:
         31:d3:a9:61:2f:47:cd:a3:fd:bd:fe:8a:7f:56:1a:e1:a4:93:
         88:ad:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:57 2025 by rpki-client