Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
File:                     vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json)
Hash identifier:          C+SlWe1+eisburyr3ZqaK68Pc1HXH3gidbb8DG6PFbA=
Subject key identifier:   78:57:0A:52:04:05:F1:9B:FF:FB:67:11:83:2C:20:F4:43:78:A2:C9
Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F
Certificate issuer:       /CN=bea7769343c691f675bb369253cb3f6fc304b01f
Certificate serial:       0199FC58AB66F971914951599D84EB450FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
Manifest number:          0A85
Signing time:             Sun 19 Oct 2025 12:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:33 +0000
Files and hashes:         1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: lZsMJVi6c7UwqCjLaGa1jvcc1kvv338tbUyvW/B2scE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ab:66:f9:71:91:49:51:59:9d:84:eb:45:0f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f
        Validity
            Not Before: Oct 19 12:01:33 2025 GMT
            Not After : Oct 20 12:01:33 2025 GMT
        Subject: CN=78570a520405f19bfffb6711832c20f44378a2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:f6:88:f7:6b:d9:9e:7d:26:76:2a:7b:ac:
                    82:4c:72:45:ba:4a:85:4e:54:14:82:1e:71:8b:6d:
                    e2:a9:58:f4:f1:79:7e:f9:f1:34:40:76:d1:69:bb:
                    9c:79:e0:54:c0:63:f9:3e:f5:ff:97:18:c9:cd:14:
                    cd:18:5c:eb:9e:43:5e:aa:fd:f2:97:ab:65:fd:17:
                    1e:7d:05:fb:e3:1b:44:c1:2e:16:1c:61:92:13:05:
                    c4:d3:9f:19:a6:8b:ca:69:c2:6e:78:d6:ba:5f:f5:
                    17:f3:f0:98:ca:c1:34:2f:64:24:2d:35:b7:af:a3:
                    b2:c3:1d:4e:a5:b8:08:dc:63:7a:f8:c4:16:cc:47:
                    ec:be:10:61:85:3a:e3:88:eb:16:9e:ad:26:4d:e6:
                    d2:f9:b0:27:99:58:fa:b6:7f:22:2e:25:44:d7:80:
                    c2:13:a6:6c:40:9f:6c:a3:97:fe:79:bd:91:72:fd:
                    0d:67:a7:6a:e2:af:a6:5c:4e:3e:8b:c7:48:1f:81:
                    62:a4:dd:c3:a6:c4:81:ad:e6:93:c3:d8:e4:6a:6c:
                    b5:ca:82:be:c4:12:70:7e:75:19:49:0f:c4:de:8e:
                    07:0b:1e:e1:f9:97:3f:b9:ce:3c:e7:a8:76:e4:24:
                    ce:fc:e3:03:61:1f:87:0d:63:97:85:c6:39:38:82:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:57:0A:52:04:05:F1:9B:FF:FB:67:11:83:2C:20:F4:43:78:A2:C9
            X509v3 Authority Key Identifier:
                keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cd:40:74:4e:e5:ae:b1:f4:72:e5:a7:86:f9:58:e8:5e:f5:
         89:05:69:f1:5b:14:a8:d0:6c:82:b1:36:a2:f6:95:a5:39:a8:
         1a:aa:a5:d9:2e:4f:0d:21:79:fa:54:67:dc:e9:ef:3e:da:1d:
         51:5c:40:ac:b9:00:e3:84:71:69:ae:2d:68:57:aa:ae:6d:af:
         4b:ae:21:62:97:36:fa:c5:a8:45:22:34:02:c6:de:04:44:15:
         b8:ad:f9:54:ff:62:d7:1f:a1:7f:73:61:5e:03:8b:18:87:b1:
         f2:39:01:d6:54:70:58:12:ba:e8:1b:8a:51:fd:56:d7:6f:e8:
         d7:29:de:de:0a:91:74:ff:97:31:e4:43:20:18:0e:7d:bf:0f:
         12:00:2a:72:e5:fa:14:27:28:cf:e1:7e:d1:78:f8:60:70:f6:
         14:59:f6:ba:d8:53:f4:2a:c9:cc:54:c8:63:14:ba:83:40:2e:
         46:10:b4:a3:92:70:2f:41:ff:07:c9:f1:bc:9f:bc:dc:f6:9e:
         82:fa:b6:72:cd:13:d0:20:48:11:5a:09:7a:a6:5d:01:09:3d:
         1a:b0:ab:18:4a:51:34:0f:9e:4b:e5:8c:c6:7e:27:98:27:08:
         28:00:15:e1:23:83:f0:05:95:1c:7a:83:ad:04:af:e4:9c:1a:
         19:35:6c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:19 2025 by rpki-client