Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          OsnLdkBXuMpB97BNgrNrFs8MOYGwYwIy25KwrP7pSz4=
Subject key identifier:   C3:98:36:01:80:CA:A9:97:56:05:14:4F:D5:6D:88:26:F7:40:B9:5D
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       0198D54DE998889C03195C0938C020827DCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          065B
Signing time:             Sat 23 Aug 2025 05:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:49 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: 2aMBgExcurFWlPcOKpSo74cnmkVUDPUFLXkNPPc1PBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e9:98:88:9c:03:19:5c:09:38:c0:20:82:7d:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Aug 23 05:01:49 2025 GMT
            Not After : Aug 24 05:01:49 2025 GMT
        Subject: CN=c398360180caa9975605144fd56d8826f740b95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:85:4b:88:03:0f:e7:2a:e7:ab:40:cd:1a:
                    63:fa:95:5d:2a:30:c3:ce:af:1f:11:00:66:5a:59:
                    08:cc:55:49:88:89:fb:93:5f:d7:2a:b7:21:19:01:
                    dc:41:b4:a3:89:01:ab:c9:46:ad:6c:b3:5e:99:ec:
                    8e:04:80:ec:4c:73:24:80:21:47:af:50:a0:f7:53:
                    6b:3d:d1:78:9a:c1:75:09:8e:e3:2a:6e:d1:eb:fa:
                    32:13:5b:25:1d:68:8e:f1:50:d2:cc:3c:3c:c9:ec:
                    fb:58:84:92:ec:5f:e3:2f:b6:f5:e0:d3:1b:c9:15:
                    d6:55:66:47:33:f1:bb:44:a7:f2:f3:7c:19:cd:19:
                    14:12:e1:ad:49:d6:a8:a4:28:5f:99:d1:10:6f:7e:
                    c0:d1:3a:27:11:7e:3b:a7:40:fb:d8:d9:5b:93:c3:
                    30:01:8c:64:a1:76:9c:4e:a3:89:08:e7:d6:c8:9a:
                    80:d1:ca:46:fe:e4:6e:39:84:f2:7b:75:71:dd:6c:
                    81:11:3f:da:92:28:fa:77:31:9c:1a:14:89:c7:0f:
                    24:bd:3f:e6:5f:f0:35:cb:7b:6b:74:1c:c7:8f:40:
                    9b:18:36:b5:50:03:20:9a:c7:a0:1d:2a:54:29:b0:
                    50:b5:e3:19:a7:0b:2d:2c:c4:9e:c2:f4:96:13:37:
                    9c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:36:01:80:CA:A9:97:56:05:14:4F:D5:6D:88:26:F7:40:B9:5D
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c9:e3:68:79:2b:cb:20:09:34:da:b8:e0:e3:13:21:07:86:
         57:e2:2f:e1:4a:19:72:68:69:c4:79:8d:7b:22:6f:30:0a:93:
         1c:8e:ec:f1:39:d9:94:ac:ee:61:9c:ba:d9:82:61:e0:1e:9e:
         ac:cf:ad:28:42:90:ec:a9:ab:d9:e6:bb:98:3d:9d:dd:58:68:
         6f:0d:b7:38:1e:1a:c0:ff:bb:fd:9d:4f:84:09:6d:77:e1:5e:
         cd:ed:3b:34:f5:3b:a7:66:6f:8d:b1:fb:c4:84:21:00:cb:74:
         b2:b8:45:06:76:4b:8f:db:e7:c1:99:0b:b0:6b:06:5a:2b:7b:
         e3:63:51:35:48:f8:a5:0c:22:9e:de:26:b5:a7:82:20:e6:5f:
         5f:23:ea:ba:bb:77:8e:04:f7:30:74:c3:82:bd:ff:48:88:d5:
         15:a8:31:d5:a3:af:ea:0a:36:7a:a8:81:4c:18:f8:02:33:d1:
         1a:96:51:70:b7:88:b1:18:7a:f0:21:13:3b:46:60:86:13:68:
         83:8e:cf:d1:f8:94:72:cc:b6:b4:5c:7a:51:b3:e2:76:2f:34:
         af:de:1e:55:4f:07:b9:5d:8a:18:fd:9b:23:03:52:8f:53:c7:
         2f:d5:8a:f8:4e:a1:a2:16:35:6d:59:ba:8e:bf:41:a9:72:45:
         5f:ed:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:10 2025 by rpki-client