Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          g0HGKGhwdThDV0Edsv1JWAJXAgGlunkFUVICDnYArfM=
Subject key identifier:   4D:67:08:5A:08:0B:DF:89:AF:4D:E0:E2:51:08:2D:C0:31:0B:C6:6D
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       0199FE7DA5EBEC96AFF2668C313F53A58A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          067D
Signing time:             Sun 19 Oct 2025 22:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:11 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: nnw/Nlw5CS7v+wgc2LwDSgmsbRsxscs618Ju1xTQ0XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:a5:eb:ec:96:af:f2:66:8c:31:3f:53:a5:8a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Oct 19 22:01:11 2025 GMT
            Not After : Oct 20 22:01:11 2025 GMT
        Subject: CN=4d67085a080bdf89af4de0e251082dc0310bc66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:bc:f4:ee:29:31:ac:e1:66:a1:9f:d7:1c:
                    c1:f6:e1:0c:d9:e5:a8:ba:c1:75:c1:dd:39:57:a2:
                    fe:2f:f0:cd:25:8a:5b:a9:af:71:a9:9b:36:40:36:
                    69:fc:08:61:28:f2:94:b0:33:90:4f:b5:a7:75:de:
                    9f:af:76:b9:9a:1d:48:0a:11:84:da:31:07:ac:6f:
                    d6:72:60:12:13:de:f3:ed:6d:5e:a6:da:ab:61:b3:
                    8c:27:5b:a3:10:92:34:82:af:c4:7b:8e:74:30:46:
                    2a:2d:8b:8e:18:78:0d:49:36:43:e6:62:85:35:99:
                    61:a1:d7:a8:f7:8b:3a:7d:b4:0f:86:8e:ea:52:ff:
                    0f:93:5e:23:d3:8c:26:3b:e8:c5:de:a4:ca:89:c2:
                    9a:39:53:59:93:eb:b8:24:55:13:f8:bf:e8:d6:bf:
                    37:ab:33:7f:f0:3d:d2:83:f7:01:d4:71:d8:56:32:
                    c8:a9:48:8b:f0:ea:d0:06:e5:ab:a3:37:09:ac:22:
                    03:d4:51:af:a8:a2:1d:dc:f7:06:c9:7b:05:1a:5c:
                    3e:4e:b3:eb:7f:89:93:f0:72:f6:f8:7c:69:79:1d:
                    11:92:d6:2a:c0:e8:31:b0:8c:01:bf:7a:35:21:ab:
                    51:21:52:f0:49:98:ce:f5:06:fc:6a:8e:1c:f3:2e:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:67:08:5A:08:0B:DF:89:AF:4D:E0:E2:51:08:2D:C0:31:0B:C6:6D
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:38:86:d0:d8:50:66:69:8f:e6:3c:7d:8c:85:e4:6f:df:
         82:ba:a6:8a:6f:8e:b7:d1:42:37:33:e0:be:9c:28:64:a5:ac:
         5f:37:ef:4d:c2:82:92:49:ca:2c:d5:b8:34:fe:15:be:64:ac:
         e9:b6:be:e9:46:a7:90:9c:30:61:1f:44:f4:54:73:87:4f:93:
         ea:17:dc:da:93:86:55:7d:1f:6c:12:5d:fa:7d:df:12:aa:fc:
         13:7a:0f:3c:75:6e:aa:75:b7:d6:aa:1f:ed:44:30:3b:32:8c:
         cf:96:a6:5b:ef:1c:c0:c5:35:98:fd:fc:98:82:68:f9:2e:49:
         a9:ef:dd:6a:59:8b:72:b1:07:3f:41:6d:9c:bd:10:da:05:1a:
         41:89:6e:d3:c6:fb:9d:1b:d9:5c:71:e2:e9:ff:fc:26:76:3f:
         35:30:fb:b8:27:05:c6:c4:1b:54:d3:c1:bc:f7:b7:fd:96:2e:
         6b:f1:37:a9:cf:f6:a5:9d:d8:27:6a:ab:3a:6a:52:8f:9a:17:
         a8:42:32:a8:f4:3b:de:94:2d:3a:f8:b6:9a:6c:aa:f7:ec:10:
         83:d1:16:59:d1:20:4e:ec:e3:d4:56:50:36:78:17:d7:fa:57:
         01:94:2b:d8:ce:2c:2f:3f:db:6d:3a:48:76:f0:8e:93:da:9e:
         6f:d4:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----