Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          mwS1rUiMKVHCa6r4KNa45yiBWyIbAGqXZ0J91hX8qkw=
Subject key identifier:   DC:4E:CF:9D:E6:2A:29:78:F3:CE:E2:8B:0B:C1:7C:EC:4A:F1:F1:94
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       0199FAD803AAB73AFC12E19903642151B1F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          06F3
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: 1wgFW4OXlxOTuL7j/lOR5nP5KQuP26Xwi9ktXhD/xSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:03:aa:b7:3a:fc:12:e1:99:03:64:21:51:b1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=dc4ecf9de62a2978f3cee28b0bc17cec4af1f194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:2a:28:29:a8:83:e1:94:37:d8:7f:b4:c0:
                    06:25:cf:4a:66:8f:04:b1:9b:5d:0c:28:6f:9d:cb:
                    d4:90:a2:69:f3:6d:6a:f9:29:0a:52:54:bf:3e:49:
                    41:b0:4f:e8:3c:06:b6:f0:95:22:8e:10:0d:74:d9:
                    5f:01:9c:bc:46:cd:8c:50:cb:07:df:35:62:38:b2:
                    8f:d0:55:fb:fe:94:cb:46:89:b8:0c:9c:c1:40:4a:
                    0a:dc:31:34:5d:43:81:34:1b:4f:ae:10:10:aa:60:
                    5b:78:bd:76:a0:21:71:a4:71:11:6b:46:96:a2:e2:
                    fc:b4:5b:c5:34:bd:49:0c:8b:c9:26:66:5e:42:d5:
                    4f:25:b5:08:a9:0d:49:bc:db:c2:d8:e6:12:26:d4:
                    2f:88:5c:52:cf:25:d1:ab:7b:87:4f:1f:17:4f:f2:
                    4d:86:38:ef:8f:75:b5:f2:bf:45:35:4e:b5:a6:c1:
                    1f:d0:b0:a1:44:28:19:a9:49:6d:67:40:3e:f6:20:
                    5e:d3:6d:3a:7f:54:ec:30:93:fc:f1:23:27:f0:ba:
                    c8:a6:54:c8:44:5d:13:c4:56:82:49:6f:bf:6d:7f:
                    09:15:29:92:2a:c4:b5:64:16:4b:c5:b8:e1:86:a0:
                    c5:d8:9e:41:20:d4:33:bd:b7:7a:c5:27:9f:8b:87:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:CF:9D:E6:2A:29:78:F3:CE:E2:8B:0B:C1:7C:EC:4A:F1:F1:94
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:98:8b:06:12:ea:47:4d:2b:4c:7c:d6:ab:8f:a3:4d:10:60:
         92:8e:12:34:9a:52:96:b0:a6:dc:7e:84:0d:94:62:4b:ee:e0:
         72:66:64:a8:c4:d3:da:b5:e9:35:4b:02:c2:01:46:5c:9b:a9:
         95:d0:34:0b:bd:3c:08:0d:dc:2a:cb:1d:95:c4:c2:fa:7c:10:
         43:e7:b1:e7:f2:b5:0c:cc:5c:64:9f:87:74:b7:a5:13:46:2e:
         e6:b0:5c:ee:4e:1a:36:2d:8d:7e:eb:04:81:dd:3d:c3:eb:8d:
         5f:66:92:9b:dd:d7:7f:34:a4:77:d8:1e:45:d2:55:b8:30:7d:
         be:38:9d:f2:f9:e3:57:78:6a:84:66:b6:4e:89:ab:5a:b3:74:
         8e:39:dc:d5:33:b1:f6:51:07:ee:5a:09:82:72:b2:64:89:d8:
         51:e1:01:b3:9e:20:bb:e3:0b:d4:68:da:7f:0d:f3:39:cd:af:
         f2:94:dc:bd:aa:7b:d8:65:d9:58:32:93:3e:4e:13:17:f8:ca:
         9b:e1:c5:38:92:06:44:34:5f:5b:87:f1:bb:6f:eb:06:fe:af:
         43:5a:ad:44:d1:09:b8:e4:9e:4c:0e:7f:c8:61:8c:8c:d4:fb:
         d3:82:e3:d9:55:6a:fe:f6:6e:7d:b5:13:ae:40:cd:f0:98:6c:
         b7:fb:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:45 2025 by rpki-client