Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          eAYUeLWSYapnmwlyHOmO3m27nbrWFmLz1p1B97hZFxg=
Subject key identifier:   BC:02:ED:37:47:1C:EF:F8:1A:83:21:CD:4F:63:93:30:24:4F:0D:01
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       0198D54E74561A7029B8E690DCD89C4C49BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          0425
Signing time:             Sat 23 Aug 2025 05:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:25 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: tZRTFfLIk7EHhBhyycRx8CVo1Fk69i222Iu5ji+l4rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:74:56:1a:70:29:b8:e6:90:dc:d8:9c:4c:49:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Aug 23 05:02:25 2025 GMT
            Not After : Aug 24 05:02:25 2025 GMT
        Subject: CN=bc02ed37471ceff81a8321cd4f639330244f0d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:ed:b9:16:39:b1:ed:cd:06:f2:8b:de:9a:
                    7b:3f:e2:f0:57:71:29:18:69:9c:02:2f:88:a1:be:
                    f9:c2:db:8e:15:d3:33:e5:27:92:14:c2:d2:08:10:
                    c4:8c:9a:8b:21:8c:0b:f1:33:c0:13:e6:3a:ad:a9:
                    38:48:d0:ae:f9:c1:c9:dc:55:42:9c:45:f4:68:32:
                    45:14:f8:87:41:62:fb:07:e4:31:4d:6e:a5:99:fa:
                    27:a5:57:f3:5d:78:86:f3:3f:56:4d:d3:54:f0:f3:
                    98:9d:cd:cd:aa:a0:0f:31:fa:7d:25:f9:b7:53:07:
                    d8:b7:62:5c:e8:de:04:71:d7:13:a7:15:c1:99:fa:
                    4e:3e:d7:4d:45:93:a7:0b:9b:b2:ef:86:f8:e5:fe:
                    f3:59:f0:2f:98:77:92:58:4d:41:d3:bc:14:70:02:
                    4a:b1:7f:81:39:68:2f:12:70:a3:b4:1e:7e:26:07:
                    15:28:39:43:c6:31:8d:f9:2b:1d:50:94:53:0f:1a:
                    88:3a:09:f8:94:89:21:e4:5b:0e:0a:3f:0a:cf:54:
                    d7:1f:c3:63:54:7b:59:a8:e9:1b:a6:ce:ff:3f:b6:
                    84:66:3c:e5:1e:0f:96:68:57:c2:22:c5:bd:a6:a7:
                    c1:d4:f6:c2:e1:21:d5:81:8e:b8:13:2c:1a:56:82:
                    90:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:02:ED:37:47:1C:EF:F8:1A:83:21:CD:4F:63:93:30:24:4F:0D:01
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b5:11:3d:df:56:7a:53:b8:c4:9c:ab:1c:5c:8c:1a:5d:71:
         6f:45:a9:16:0f:ee:76:e2:9d:2d:46:85:07:90:e5:72:5d:06:
         db:db:0a:45:cc:8b:18:c8:87:20:19:09:c4:c6:ef:b6:37:2e:
         60:d1:7a:ad:09:7c:8a:56:10:01:6a:2a:70:fb:9e:26:f7:c4:
         ad:88:ec:b1:4e:54:5f:77:56:1e:e9:e0:22:60:77:71:cf:28:
         3e:a7:f9:e6:ae:af:df:72:02:d2:01:e6:88:f1:5f:be:d7:37:
         c0:f6:03:dd:1f:4a:86:06:da:ee:9d:c9:69:15:2e:df:3c:39:
         63:37:18:e3:45:41:ca:61:5a:82:20:9d:4c:cf:57:b2:99:bb:
         e9:35:12:d7:af:d3:5b:9c:67:a4:2d:0d:f5:3b:41:76:10:b0:
         3e:c6:6b:62:8e:b6:d7:0b:01:ef:91:0d:f1:bb:4d:32:c1:d8:
         4d:2a:0e:cf:31:87:2b:ee:df:f0:a9:07:15:e6:c5:ee:23:46:
         cd:6b:46:17:90:6f:69:f9:97:92:af:e8:e4:d5:e4:a8:d8:80:
         a8:98:2d:c5:bc:cd:89:7b:df:d0:81:b9:68:cb:6c:04:74:cd:
         fd:b6:bf:72:a5:31:47:a5:b0:c0:ed:80:5d:51:d5:2c:c2:0a:
         70:6b:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:13 2025 by rpki-client