Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
File:                     Vp3-Sa8607mlhpS6081OY4TwEYY.mft (raw, json)
Hash identifier:          GW7cYVXz+iNnPexeJeOMgzKGQSlxg1ho3UF27EsesQE=
Subject key identifier:   73:69:89:C4:1A:FD:27:64:50:40:BE:E5:6B:ED:CF:A3:70:2F:25:DD
Authority key identifier: 56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86
Certificate issuer:       /CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
Certificate serial:       0199FBEAF58EE452C236CF6BE35A71670C1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
Manifest number:          11
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: Vp3-Sa8607mlhpS6081OY4TwEYY.crl (hash: 0ofbeaWiw1YOpuynmoCe+QQQ9BQH/+55klK42OwHAbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f5:8e:e4:52:c2:36:cf:6b:e3:5a:71:67:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=736989c41afd27645040bee56bedcfa3702f25dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:37:4b:9f:e6:aa:a7:ee:f0:a8:6e:1e:7a:
                    e1:dc:ce:f0:63:cd:55:50:8f:3d:8b:13:c2:ce:c4:
                    3e:c0:47:6c:46:8f:b4:5b:75:4d:20:e8:4f:d7:86:
                    8b:55:38:80:b2:82:e3:5a:59:f6:3a:a5:ed:94:f8:
                    0e:13:db:91:4e:3d:5d:52:69:7e:6b:ab:a3:26:3e:
                    53:92:43:72:cb:56:1d:98:bc:41:58:ad:0e:21:1c:
                    2c:32:7e:bf:5a:f2:55:3b:77:d0:3c:59:12:53:86:
                    91:e5:e5:5a:5b:59:bf:35:b7:eb:e7:41:3d:c7:a2:
                    78:3d:5d:dd:7c:af:2e:ec:2a:25:bf:b5:a5:08:e0:
                    ac:c3:ca:d2:25:6a:d5:af:ff:3c:a2:b7:64:6f:3f:
                    66:13:d0:fb:46:6e:44:ca:f3:76:bf:91:04:26:70:
                    43:7b:5e:d1:74:18:48:67:1d:36:b9:1f:e0:41:c7:
                    c7:d7:0a:96:55:7d:fc:22:3f:e7:bb:01:e6:37:06:
                    8b:16:22:9d:85:e8:b0:94:9e:e4:47:26:90:71:0c:
                    ea:bb:3f:b8:4d:41:54:98:90:bc:f6:ca:d5:4d:a1:
                    c7:38:50:fd:73:05:fd:48:02:34:7b:8e:fb:be:c9:
                    63:bd:0e:78:da:b9:2e:f6:aa:d1:f4:01:be:71:cd:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:89:C4:1A:FD:27:64:50:40:BE:E5:6B:ED:CF:A3:70:2F:25:DD
            X509v3 Authority Key Identifier:
                keyid:56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:ef:2d:ff:2c:a4:f0:a0:ec:b0:19:42:61:4c:72:3d:0b:
         72:45:04:7a:7b:a7:04:5e:01:18:c3:97:f4:5e:ef:10:89:c9:
         7d:fe:4c:19:ac:b8:78:3a:f7:80:82:dc:52:e0:68:8f:09:de:
         91:88:2e:a2:6a:86:92:bf:e9:05:c4:9a:13:83:59:e6:6a:fb:
         df:2e:5c:12:b2:08:bf:f9:f0:96:8b:07:2c:2f:09:1b:91:81:
         94:a0:6b:b2:36:0b:2d:dd:c5:4c:a0:e5:7d:7a:67:b7:05:29:
         0d:3e:53:18:f7:0c:40:2f:ff:42:2c:65:13:e6:4c:af:d7:64:
         39:8a:10:1a:e8:e6:40:4f:eb:12:5c:f5:d4:95:dc:62:b2:e2:
         7b:30:02:e0:9c:d0:cd:ce:ba:53:67:25:8a:75:eb:28:3a:fd:
         88:08:f6:55:89:17:2c:c9:63:c9:22:7b:70:11:e5:93:f6:44:
         5b:16:54:10:e4:1f:b0:c1:c4:a0:3f:df:f0:ce:b8:2b:88:d0:
         48:5d:75:d6:b9:ff:43:51:69:da:80:29:4a:7b:f6:78:8a:ec:
         8d:2e:a8:dd:92:04:ff:04:27:f8:9c:20:b4:e4:b0:db:5c:e4:
         5c:d4:84:02:d3:83:24:5b:a3:21:e6:ab:a3:32:88:29:f2:d0:
         31:21:d9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:02 2025 by rpki-client