Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          kgGFA+TcgphLmuh7/PDhNCwrum+j94XJsV7q+ba9Bp0=
Subject key identifier:   DC:C0:81:29:77:24:35:E6:C7:2A:7E:7B:52:E9:D5:AE:F3:30:FC:4B
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       0199FEB4FC0B3A9127C0EAFF8C72959AADB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          04BF
Signing time:             Sun 19 Oct 2025 23:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:37 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: B0fs43+SuoQ5AWbBbi5PMBo/x/K66Ar5uXSbXf2uHM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:fc:0b:3a:91:27:c0:ea:ff:8c:72:95:9a:ad:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Oct 19 23:01:37 2025 GMT
            Not After : Oct 20 23:01:37 2025 GMT
        Subject: CN=dcc08129772435e6c72a7e7b52e9d5aef330fc4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:b4:66:c4:84:e3:da:c5:1e:d1:cd:5c:c1:
                    ca:e3:ec:e1:13:c7:8f:81:ad:e8:eb:c5:13:ff:3d:
                    54:20:6e:25:05:49:d8:92:a5:29:b1:67:63:7c:e0:
                    ce:51:22:a3:e5:7b:e8:c4:73:93:9d:05:c2:70:61:
                    27:bb:f5:88:95:fc:a9:9e:03:d4:2f:89:31:0d:a7:
                    c1:b5:a0:47:3e:7a:69:df:68:e7:18:9c:53:26:80:
                    02:36:4c:6b:7b:99:7d:f6:31:47:6e:85:93:04:62:
                    42:b3:71:7c:9b:93:4e:76:de:d6:04:cb:63:97:2d:
                    58:ec:05:f8:ab:c6:0c:41:96:6c:ac:39:9c:9d:2f:
                    cd:0c:47:23:0b:2d:fd:7e:60:a1:23:e5:01:b1:c1:
                    c7:0a:be:9d:5f:3b:d2:fd:8b:18:7d:96:60:08:59:
                    9d:ff:8c:21:01:11:de:59:e0:87:a3:72:2c:46:86:
                    3f:10:c6:6e:82:03:f6:14:29:53:ae:9f:ee:ec:4b:
                    ab:3e:0e:44:5e:89:cc:b4:b0:44:ee:4d:32:82:d0:
                    7e:ef:ed:d8:2f:55:c6:3f:6d:f7:11:04:17:d8:c4:
                    cd:c6:ea:25:3d:83:43:fa:7d:45:2d:87:af:54:c0:
                    ce:32:a5:e7:89:91:27:3f:a2:cc:59:b9:72:f1:3d:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C0:81:29:77:24:35:E6:C7:2A:7E:7B:52:E9:D5:AE:F3:30:FC:4B
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:d8:63:5c:d0:4a:2a:61:9a:4a:d8:9a:ff:92:c1:ec:53:
         72:a6:d5:a1:ce:72:52:91:7a:a8:61:87:a2:ce:9b:27:fd:21:
         b5:2b:d5:87:ba:c9:b4:e1:a0:a2:10:80:13:e2:00:9b:6d:9f:
         d2:0b:a1:db:98:ff:8b:95:51:79:e5:59:74:c4:67:f2:27:db:
         25:bb:a1:2f:f4:2f:b1:5d:60:68:25:17:d7:df:99:32:0a:fa:
         db:de:bf:25:90:47:7c:a4:34:fc:aa:f2:71:0f:3b:06:bc:c5:
         4d:14:16:98:6c:8c:ac:2f:6a:86:d1:b5:c3:22:14:48:37:1b:
         b0:3c:ac:2c:7b:cc:83:56:ad:2c:4e:67:6a:27:21:ca:24:4f:
         1a:66:a3:33:6e:aa:34:e4:e9:9f:49:f1:d4:9a:e6:9f:5a:6f:
         75:65:4a:ee:0e:eb:c5:3d:86:e9:48:32:7e:92:a9:0b:e8:56:
         1d:c6:e9:2c:81:66:07:59:6d:43:0b:5f:27:79:d6:a6:c0:97:
         ff:b7:87:cc:92:e6:b7:33:71:b2:54:44:72:dc:87:c2:eb:db:
         9d:ed:35:f8:7b:16:6c:3e:a9:9f:dc:bd:51:64:36:7e:bf:2a:
         aa:14:9f:33:43:88:14:62:41:65:26:2e:5c:ca:a3:49:00:be:
         4a:e3:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:11 2025 by rpki-client