Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          YBDO7qeEjVpMuncY0hocEGq9KjezSmrdFPY8sdfg/Ns=
Subject key identifier:   FD:DC:92:EE:76:A1:9A:76:00:E7:2D:44:34:0E:FA:F2:70:F3:82:97
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       0199FDD943F9186BE3EAAA6609E0CF89D2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          1474
Signing time:             Sun 19 Oct 2025 19:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:38 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: DOYI7mLcjwS6fNDDM1SMLL6oNMZaYQJuAXXyc9lLmuw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:43:f9:18:6b:e3:ea:aa:66:09:e0:cf:89:d2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: Oct 19 19:01:38 2025 GMT
            Not After : Oct 20 19:01:38 2025 GMT
        Subject: CN=fddc92ee76a19a7600e72d44340efaf270f38297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:7c:15:9d:0b:2e:a8:65:35:a3:b7:de:bb:
                    ea:c5:69:e8:08:59:c9:0a:b2:65:4e:56:16:f5:f4:
                    90:26:4e:22:b9:39:24:a4:f6:27:73:44:32:ec:98:
                    6f:ed:da:39:69:b6:f3:d7:c3:28:e6:79:11:ec:b3:
                    04:d2:b0:69:b3:84:91:65:df:32:24:87:cd:6d:bb:
                    44:e2:d8:16:e5:1d:ab:16:27:56:a9:90:d3:94:23:
                    68:a8:0d:48:83:34:0a:5f:bf:e1:7e:59:d5:94:f2:
                    c0:dd:af:17:1e:f9:1c:d3:87:ac:46:4f:4c:c1:31:
                    78:71:0d:fa:a7:89:0f:b0:35:25:60:6d:b1:bc:95:
                    28:70:f6:eb:e3:bf:13:f9:e3:f9:06:af:68:1a:6d:
                    73:bd:cf:49:8d:48:74:5d:1f:66:49:a7:e5:1b:5d:
                    ce:6e:ca:b3:cd:0d:70:df:10:89:af:e2:eb:3d:1f:
                    a9:1c:52:57:25:51:e3:d3:ad:05:31:d7:64:a7:57:
                    b5:ea:84:ff:06:b7:40:c3:27:52:94:37:8d:d5:42:
                    d0:5c:17:4d:1e:ec:64:7f:31:67:ef:2d:8d:e2:a9:
                    85:fd:49:73:f7:ec:d1:74:fa:ff:e0:5e:a7:b8:59:
                    9f:ec:df:f7:92:f1:6f:22:bd:aa:6e:05:6f:81:0d:
                    17:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DC:92:EE:76:A1:9A:76:00:E7:2D:44:34:0E:FA:F2:70:F3:82:97
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e0:e1:72:19:d9:c8:39:5e:16:fe:75:29:d9:10:1a:2f:d6:
         6e:d8:8d:c8:c9:24:b7:47:23:57:e1:f1:24:37:20:3d:ea:a3:
         3b:18:05:21:10:25:75:50:15:32:85:ba:e4:bb:93:b9:58:ed:
         1c:60:b6:7a:8b:e7:2e:36:8b:d7:72:15:fd:ee:8d:7d:72:7b:
         69:2d:f1:4a:a2:50:3c:87:5e:ea:9a:d3:45:8c:1a:0c:7d:48:
         d0:77:5b:8c:16:36:2f:19:69:7e:b0:2c:a2:25:82:01:67:fe:
         7f:fd:b9:a0:db:eb:1e:a7:74:5e:0f:cc:d0:65:8b:a4:06:c9:
         91:16:95:a3:97:40:bc:93:a6:71:03:a5:6e:1b:1e:1b:52:33:
         19:53:30:3a:ee:eb:39:39:be:f7:0f:40:a3:64:60:95:2b:5c:
         d9:1e:50:8a:0d:07:b6:09:56:33:77:e6:e5:f9:c8:f2:d3:66:
         b0:3b:0b:95:f6:92:3f:ca:30:78:33:8a:61:bf:a2:80:b4:37:
         76:f4:76:46:a6:e7:91:cb:1c:b8:57:b1:6a:a5:80:19:ce:1e:
         10:a9:ee:25:3f:20:8c:95:76:a5:b2:ce:b3:32:5b:c8:46:4a:
         60:62:ce:ee:39:82:2b:5a:23:56:72:bd:c0:54:82:77:bc:7d:
         19:40:f9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:05 2025 by rpki-client