Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          IPG7f/Igd0fHEAU4gqzeHs6GnZv2bgyZGoU0XA2XtqU=
Subject key identifier:   F2:C1:90:F3:FE:73:C9:34:C9:07:98:19:4C:1A:A6:92:58:B9:18:26
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       0198D6CCF6FDAE63950C038481148F9B1D35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          09ED
Signing time:             Sat 23 Aug 2025 12:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:13 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: PCD6cgR/7x85+t6HXlv8rZZV7FRL3FlRSr8+D6uM6rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:f6:fd:ae:63:95:0c:03:84:81:14:8f:9b:1d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Aug 23 12:00:13 2025 GMT
            Not After : Aug 24 12:00:13 2025 GMT
        Subject: CN=f2c190f3fe73c934c90798194c1aa69258b91826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:12:82:f3:06:b5:b5:a3:64:3c:09:e7:a1:71:
                    2e:f0:fe:fe:63:19:8c:81:95:77:f0:11:31:e0:9b:
                    a8:03:56:3f:fa:03:24:97:cd:7d:f7:e9:0f:7e:74:
                    e0:0e:cd:b4:07:5e:c0:ac:4f:3d:d3:c0:c4:14:09:
                    8d:7c:ed:b8:1a:02:d5:36:1d:f5:eb:0a:cb:4e:ea:
                    13:fb:fc:e0:5f:07:80:1f:89:6c:5e:2a:9a:ae:38:
                    56:16:0e:cb:72:02:ca:35:a2:4c:f4:95:f4:9e:66:
                    a9:05:fb:3c:01:6d:36:17:d0:a0:65:8d:57:66:45:
                    b3:e4:9f:7a:8f:42:b7:50:19:c6:67:90:37:cc:d4:
                    fe:f4:f9:83:4e:5b:f2:24:a4:ed:49:0a:e9:f1:24:
                    1b:ce:b2:e4:1e:68:95:10:a6:46:ce:2a:b9:b8:a1:
                    8a:3c:4b:b6:17:e7:26:02:21:e6:f4:f1:5c:5f:19:
                    3b:de:16:85:10:14:15:80:ba:34:8a:ee:56:32:28:
                    9f:83:0b:30:20:d7:a1:80:2d:b1:6f:ec:3b:d0:a4:
                    dd:bb:3c:02:e7:bf:cf:9e:ed:8c:90:38:db:8a:b7:
                    7a:3d:b0:2e:fd:a1:6a:fe:41:5c:06:9f:06:e9:80:
                    27:da:c2:04:53:68:ff:e7:2f:40:7d:ad:e0:3f:3c:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C1:90:F3:FE:73:C9:34:C9:07:98:19:4C:1A:A6:92:58:B9:18:26
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cd:84:d4:e0:8b:72:47:fa:40:3f:8a:de:e4:4e:43:a0:b4:
         9b:53:ae:7b:15:01:d5:a2:d0:e9:35:95:87:d3:a9:12:bb:9e:
         4e:8e:50:fe:c7:44:ec:49:ed:11:6f:0e:e2:87:67:bd:3e:ae:
         21:62:4d:94:09:6c:f0:e9:4a:b9:98:bd:f3:05:98:ec:81:78:
         8f:98:29:76:f7:ee:41:60:6a:b5:bf:8c:2d:27:53:7e:12:f9:
         47:db:d9:90:3b:03:df:1f:8c:46:78:49:9f:0c:af:ba:87:24:
         a0:b4:0e:a0:a6:1f:ce:bf:04:35:55:8f:55:b2:1d:dc:30:9a:
         d6:af:ad:13:67:79:be:43:b3:f0:f5:92:bb:ea:f4:3e:56:c6:
         9c:83:c0:a9:86:ec:1d:e9:bb:85:78:58:93:c1:fa:81:5e:29:
         6e:9f:ce:c1:2f:fb:93:eb:e8:8f:55:07:8a:aa:80:37:47:62:
         79:29:c6:4d:d1:7d:51:98:5b:e6:01:cf:d9:f8:50:e1:0f:9b:
         45:35:c2:05:87:34:d8:c1:4d:0b:46:80:9c:dc:a7:25:77:c3:
         17:c2:d4:2f:f5:08:79:5f:09:f1:26:a0:a1:8d:ef:3c:78:7e:
         eb:60:84:23:9c:dc:47:79:1a:2e:3f:c4:b7:6b:a3:35:67:ea:
         9b:de:96:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:40 2025 by rpki-client