Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File:                     vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier:          kgCgbQ5A0Atjoy8buahy/6xpuM6/sr6BPwno6VdtmAY=
Subject key identifier:   3D:BD:7E:9D:08:6B:05:19:DE:6B:FA:9F:79:A8:B2:FE:35:10:78:E7
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer:       /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial:       0199FCFD7081E1E32F646E1202D964B9CF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number:          141C
Signing time:             Sun 19 Oct 2025 15:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:31 +0000
Files and hashes:         1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: miNq2facj5k0Mz7fe64a+REs2DYNXVHFx96p3PP2XcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:70:81:e1:e3:2f:64:6e:12:02:d9:64:b9:cf:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
        Validity
            Not Before: Oct 19 15:01:31 2025 GMT
            Not After : Oct 20 15:01:31 2025 GMT
        Subject: CN=3dbd7e9d086b0519de6bfa9f79a8b2fe351078e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8c:04:f1:10:fe:12:3e:02:8d:23:64:12:56:
                    b2:6a:21:75:6c:01:aa:a4:5d:18:76:4c:35:55:ff:
                    b8:19:8c:ae:f2:97:9c:82:4b:bf:63:6f:3d:d5:f7:
                    2d:a8:5e:ea:a9:89:87:c6:d9:a8:6b:e5:1b:9d:f1:
                    de:f4:a5:52:0a:17:25:bd:18:30:47:4a:51:5c:54:
                    64:31:3d:26:44:ce:42:4f:e3:2e:aa:a6:3f:cd:fc:
                    69:a0:d4:ef:ee:b5:ae:f0:78:49:06:8e:58:60:3b:
                    f7:cc:06:ec:a5:1a:d9:64:c6:d8:50:b4:01:50:d7:
                    ea:92:c5:a3:86:75:ed:ef:16:4e:9a:bb:e4:2a:09:
                    f0:76:fd:da:a5:ea:fc:e9:74:c4:6b:5d:cd:6d:09:
                    c1:1c:ef:1f:db:22:ba:4c:92:70:f9:69:09:0e:0e:
                    0c:e4:08:88:a8:3c:15:27:d7:e7:c6:0a:a3:ca:d7:
                    94:de:04:7b:17:68:c4:2e:1a:04:7c:be:79:8a:4c:
                    7a:dd:cc:1c:aa:7f:db:05:6c:ae:ea:f8:92:01:d2:
                    00:1f:89:99:57:24:31:9f:77:76:7d:a9:fa:9f:b0:
                    c4:3e:f5:e5:c5:3f:f6:eb:d3:14:39:7f:a8:2c:52:
                    27:7a:28:69:36:a2:41:d8:36:f0:0c:0b:36:f2:8c:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BD:7E:9D:08:6B:05:19:DE:6B:FA:9F:79:A8:B2:FE:35:10:78:E7
            X509v3 Authority Key Identifier:
                keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:22:df:7f:5b:9d:63:93:58:3b:91:34:a9:6f:c8:47:cc:fd:
         15:11:72:66:27:13:e1:a0:58:85:60:7a:6b:61:90:d8:6f:00:
         e1:8e:1b:c5:0b:eb:94:44:f5:63:5a:94:77:a8:2e:99:44:76:
         be:91:ed:4b:d8:2a:d3:5c:09:56:18:cf:0e:d6:1f:b1:8c:d4:
         59:76:39:e1:e3:e5:86:57:06:e4:44:e0:f4:21:74:98:30:a5:
         cd:0b:ca:3e:a4:dc:ce:44:08:52:ce:99:89:d4:d5:17:43:b3:
         7b:95:64:2d:42:5a:3a:01:ce:50:6b:0c:0a:60:42:73:a4:c7:
         0d:02:e1:49:62:7a:62:56:2d:4e:c3:e3:95:67:58:e6:81:1b:
         23:37:ab:47:e5:56:f6:9c:2e:f3:9b:8f:88:fd:d9:5e:fc:af:
         81:6d:38:8f:ad:f4:3c:7c:c2:03:b0:b5:c8:05:0d:c2:ac:0a:
         2b:1c:7f:15:03:88:01:d9:8d:31:13:5f:29:f5:3a:86:d4:12:
         76:d6:a4:b2:59:1d:72:3c:83:21:06:76:d3:41:96:08:0b:c8:
         0e:54:b9:72:45:97:92:79:e9:ce:38:b0:03:c4:1e:29:1f:1f:
         e8:c3:18:d2:9f:4a:2b:a1:cc:73:25:9b:9b:6d:40:c6:37:b8:
         67:67:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----