Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          0bWnHaHveuDz00z8uatUkA7wInddzcif/wipC9nDImQ=
Subject key identifier:   49:4B:D1:60:75:C3:0F:E4:B1:78:3B:F3:A4:F7:97:C6:83:FF:52:18
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       019D25F1F1947B92C9E9B374BF27600D584F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          0897
Signing time:             Wed 25 Mar 2026 17:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:46 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: VMO+DFcRBjzLZVHhEtjxYUbI04e00waR4OPSczFcVsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:f1:94:7b:92:c9:e9:b3:74:bf:27:60:0d:58:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Mar 25 17:01:46 2026 GMT
            Not After : Mar 26 17:01:46 2026 GMT
        Subject: CN=494bd16075c30fe4b1783bf3a4f797c683ff5218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:bb:2d:7a:d1:76:45:9a:75:7d:49:00:84:
                    04:c5:98:19:f4:2c:56:c6:e6:45:24:83:15:6f:4e:
                    a5:cd:16:d4:0c:05:67:55:19:6d:f7:99:c9:3d:b7:
                    ad:0e:28:43:ab:86:4b:58:be:0b:d4:41:b1:cf:50:
                    ae:50:9b:e5:79:6b:be:91:4a:2c:70:63:87:a2:67:
                    8c:76:11:31:4a:9a:e5:06:38:32:51:66:9d:29:49:
                    ce:40:00:f3:6d:74:be:b9:23:e3:bd:57:3e:85:27:
                    6b:92:e1:04:ad:8d:8a:74:9c:16:27:d6:57:4d:7a:
                    97:b0:9f:95:3e:05:ba:06:42:e3:68:dc:f6:a3:cf:
                    1a:e7:aa:29:32:3b:46:64:a6:d9:c4:79:ab:8b:7f:
                    03:af:72:ad:c1:1f:b3:a0:dc:1f:94:4b:60:c3:54:
                    3d:34:db:4b:8f:fa:70:fa:dd:cb:d5:d1:9c:28:54:
                    5b:43:ba:1a:4f:ed:26:bd:d9:30:cb:b4:0f:fa:8a:
                    21:d8:b8:e5:e0:a8:0c:37:93:b8:78:e7:57:86:9e:
                    e0:64:57:8a:12:f6:bb:97:af:3e:5b:6f:0d:8b:a3:
                    0e:37:c6:92:2b:a2:e2:05:d7:0e:1d:99:66:00:56:
                    58:9b:a5:4b:45:16:96:31:7b:7e:20:09:21:7a:06:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:D1:60:75:C3:0F:E4:B1:78:3B:F3:A4:F7:97:C6:83:FF:52:18
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:83:30:c3:ac:85:8f:bf:7e:7e:e6:62:f0:f6:02:ab:99:38:
         d0:59:97:6f:58:f6:b3:bc:a5:3c:fe:0b:d0:63:15:e6:41:4f:
         b2:7a:66:23:30:9a:95:e7:75:bb:21:97:60:e6:32:61:60:42:
         3f:e7:18:f4:2e:91:96:c9:46:3e:c7:b1:2c:ab:3f:dc:98:c7:
         55:46:c1:9c:fc:73:8c:f9:f0:13:6d:7f:d4:49:b8:b8:28:8d:
         62:2f:7e:da:40:73:3b:22:8f:b4:42:55:d3:f2:9d:6b:af:17:
         cb:be:18:e6:f0:b3:45:28:49:25:35:73:24:1b:d8:82:e3:eb:
         c9:56:5b:23:23:5c:fc:a1:17:be:7d:d4:17:0a:9b:26:d4:02:
         60:df:de:26:69:00:b2:aa:6d:60:6f:a0:34:2f:79:f3:9f:c7:
         66:0d:00:30:b7:33:42:24:b7:59:4d:ee:ca:ad:ea:59:50:f8:
         b2:1e:b6:49:2f:3e:ef:91:f8:17:dd:3b:cd:9f:0d:95:54:96:
         d8:5f:86:d3:d6:a5:54:c8:0c:41:55:30:f1:a7:33:3e:fe:73:
         72:03:44:ad:3b:56:0c:cf:65:51:e4:27:cb:d5:5b:ae:39:18:
         38:02:19:a6:9c:83:d2:d6:f4:60:37:15:30:01:12:89:8d:9d:
         ba:58:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----