Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
File:                     Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft (raw, json)
Hash identifier:          +K7hV5HbytzD67vcKyGGzT9JP8FCkTY/pqtb1vAnp5M=
Subject key identifier:   A8:A0:CF:14:81:3C:CE:58:F9:DC:62:5A:74:6E:82:F4:83:1F:50:05
Authority key identifier: 55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83
Certificate issuer:       /CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
Certificate serial:       0199FC8F59FC133A04D2F6F7E51C885E2F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
Manifest number:          0A4B
Signing time:             Sun 19 Oct 2025 13:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:17 +0000
Files and hashes:         1: Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl (hash: FG3dVgNEpZTjQz7E6tCABTeeEYzhTWXcMuCnzJ0VP5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:59:fc:13:3a:04:d2:f6:f7:e5:1c:88:5e:2f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9a183ee3fc0a3576c1f0ca3cc9977309e4583
        Validity
            Not Before: Oct 19 13:01:17 2025 GMT
            Not After : Oct 20 13:01:17 2025 GMT
        Subject: CN=a8a0cf14813cce58f9dc625a746e82f4831f5005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:eb:04:a2:55:11:7c:45:65:ac:49:79:91:
                    9f:71:66:86:4c:bc:ab:c5:e2:73:90:4f:c3:8f:85:
                    2f:7a:a4:13:01:7b:ee:11:86:55:88:02:61:a0:25:
                    df:ee:f6:0a:d8:65:ad:34:bb:33:06:d4:71:5e:a6:
                    09:cb:d4:a5:5a:ab:0c:ff:46:17:07:58:cc:d2:45:
                    0a:a7:e1:a8:73:2f:cf:b6:0c:71:73:0e:d8:16:a2:
                    d7:b9:5e:db:2f:83:67:57:49:fa:cb:3e:d0:a6:28:
                    96:47:2b:b1:df:8f:45:36:94:e3:b0:47:9a:32:11:
                    44:e8:4e:be:3c:03:fc:ed:ed:47:32:27:58:d9:85:
                    2a:55:74:fd:1d:27:ad:5c:c4:e1:41:0f:4f:5d:30:
                    85:3f:6c:0c:68:8b:ba:b7:fa:5e:c7:5c:4b:d4:15:
                    6f:56:70:42:7b:40:90:c1:ea:46:c4:b7:9f:79:bf:
                    79:14:20:69:8f:d0:d5:8c:80:5f:f4:d1:2e:b3:be:
                    f4:96:06:89:39:06:63:32:6f:11:ae:b0:13:45:90:
                    28:c9:b3:1d:5f:69:d3:da:77:07:69:c8:cd:fd:bc:
                    3d:cc:3a:3f:84:5d:4f:48:85:f5:1f:07:7f:26:81:
                    02:a9:fb:b5:ab:84:a9:95:b8:dd:fa:5a:0b:52:a6:
                    dc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:CF:14:81:3C:CE:58:F9:DC:62:5A:74:6E:82:F4:83:1F:50:05
            X509v3 Authority Key Identifier:
                keyid:55:C9:A1:83:EE:3F:C0:A3:57:6C:1F:0C:A3:CC:99:77:30:9E:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/68c06a-693c-4938-8767-d2687d4c9efa/1/Vcmhg-4_wKNXbB8Mo8yZdzCeRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:d8:4d:f1:d2:82:f9:2b:7b:e4:10:04:72:e1:e9:8c:71:
         80:c6:00:af:63:ac:e2:f2:93:97:4d:f1:1f:55:47:6d:7e:b6:
         99:89:e9:0f:0e:a7:f8:c7:29:94:7e:9a:e3:1e:bb:d6:05:e1:
         49:00:10:f5:17:af:2d:9b:56:20:c6:c0:64:85:7b:0f:ce:50:
         d5:60:0e:e3:b6:38:f4:e2:04:03:a1:b9:98:d2:b3:55:cf:2b:
         23:14:6b:c9:87:f4:c6:d4:8d:50:73:ad:22:ea:28:dd:85:55:
         11:7b:bc:45:22:33:cf:59:f0:dc:84:e3:fc:18:40:ca:be:fe:
         e5:98:45:54:2a:1f:bd:a8:10:8d:48:02:a4:72:8f:7e:56:f1:
         e3:63:38:70:b3:96:01:76:f7:f1:05:06:db:dd:a4:86:a8:b8:
         33:dd:f1:b6:55:00:83:54:38:5c:32:fc:e2:87:2a:a5:ee:80:
         e0:78:89:79:b7:cc:2c:1c:f2:09:90:ea:96:28:c2:fb:5a:7a:
         41:15:40:ec:7a:e3:fb:4e:17:f9:2e:76:56:dd:6a:08:75:4b:
         89:bd:26:b8:77:7a:9c:30:ea:a7:2c:6e:0a:a8:1d:b3:84:fd:
         29:ca:2b:2b:ab:b0:47:d5:fd:9e:7c:f5:c5:cd:38:df:35:12:
         dd:1e:f8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:30 2025 by rpki-client