Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File:                     vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier:          E54XrTmPlU8LblLoo6b89XwDIPUA7DJzIu3pqm2cqQE=
Subject key identifier:   CD:ED:2E:DA:44:5B:6D:74:75:AF:82:B6:AE:9D:C0:9B:38:34:15:93
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer:       /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial:       0199FC582FD91F8584B8762FD1F0C272EA9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number:          1623
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: Ib7JkCqIkF4hKU0LZ8pw2eSizLBytugo2bmYUIDRPy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2f:d9:1f:85:84:b8:76:2f:d1:f0:c2:72:ea:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=cded2eda445b6d7475af82b6ae9dc09b38341593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:2f:62:06:52:4c:fa:11:dc:3a:a0:54:99:
                    5a:d1:0f:2e:98:7f:5a:6c:28:a3:10:b2:b7:7a:5e:
                    79:43:56:d2:c9:cf:63:7f:94:a5:65:69:84:e5:6b:
                    5c:49:b1:36:10:b8:ef:c4:21:e1:e8:90:81:d8:a0:
                    4e:62:53:47:3a:66:22:8f:62:bf:59:f7:21:07:b7:
                    28:31:e0:7d:9b:e9:dd:27:0a:19:c4:d0:31:22:85:
                    a4:19:ed:7b:53:91:e8:4a:48:a7:a8:43:e8:45:d3:
                    76:6f:40:3e:72:d1:68:b9:0f:b5:3c:16:72:1b:10:
                    80:18:34:27:ad:e0:9c:dd:e5:9c:5f:0b:f4:9d:ce:
                    e1:bf:8e:a3:02:fe:f7:2a:64:51:de:c7:11:e7:ca:
                    1e:0b:bc:31:55:de:0c:92:69:bf:54:13:b8:ed:b2:
                    79:3a:d8:fd:5c:12:e9:d9:61:ab:23:e2:d3:b0:fc:
                    18:61:db:14:9d:ea:d4:97:cf:19:86:ce:0e:52:90:
                    6c:23:47:57:df:24:1c:f3:09:6f:57:73:bf:e1:98:
                    42:16:83:ce:9c:fe:55:9a:51:b3:5c:e8:c5:a3:63:
                    0f:4b:92:66:df:98:05:30:53:a4:46:f0:a7:de:1f:
                    a6:ca:14:13:75:46:9e:9d:19:30:af:69:b0:36:7e:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:2E:DA:44:5B:6D:74:75:AF:82:B6:AE:9D:C0:9B:38:34:15:93
            X509v3 Authority Key Identifier:
                keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:bd:de:bc:d1:8e:c1:6f:26:00:c5:62:48:f8:fa:64:bf:
         df:94:3b:88:ed:15:e5:b8:ef:49:cb:7f:f8:11:87:c2:40:1e:
         0d:23:7f:ba:a1:48:48:cf:36:de:53:b2:95:52:72:48:43:e7:
         e3:dc:5f:16:1d:30:00:31:3c:90:d6:7c:66:6a:2e:eb:4b:42:
         ae:eb:f6:e4:c5:b2:a7:42:d5:af:0b:b8:63:db:a9:8d:82:d3:
         fd:68:d5:82:1e:53:37:26:36:1e:7d:29:eb:03:d7:a5:9a:9b:
         86:7b:af:14:13:7f:ef:ba:aa:15:6e:e7:39:a1:b6:b9:5c:a4:
         6c:3b:7f:e7:99:dd:b6:e8:4d:04:0e:62:45:1a:a9:f6:b8:cf:
         e6:2c:4c:33:47:d9:f9:77:10:02:23:ef:8b:e8:04:21:50:dc:
         bc:ce:86:82:ce:01:e5:4c:5c:70:5e:f3:52:c1:85:84:d7:a9:
         ae:2c:5b:95:39:19:8f:44:c3:2c:a2:45:59:26:8c:08:1e:b0:
         d3:a2:ec:09:59:34:e1:14:f3:de:b0:fb:8b:87:d8:a0:d0:d4:
         22:2e:dd:61:28:b9:8b:f4:b0:c1:7e:6d:08:3d:77:1f:47:62:
         58:1c:cb:f4:3c:b8:57:f6:a9:47:79:97:b7:d7:9b:b3:63:f9:
         87:e6:9a:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WC/ZH4WEuHYv0fDCcuqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTQ1NDAyOTY0NzY2ODFjNDA0OGM2ZDY1MGQwYmFhYTZj
Yjk4ZTcwHhcNMjUxMDE5MTIwMTAxWhcNMjUxMDIwMTIwMTAxWjAzMTEwLwYDVQQD
EyhjZGVkMmVkYTQ0NWI2ZDc0NzVhZjgyYjZhZTlkYzA5YjM4MzQxNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf4vYgZSTPoR3DqgVJla0Q8umH9a
bCijELK3el55Q1bSyc9jf5SlZWmE5WtcSbE2ELjvxCHh6JCB2KBOYlNHOmYij2K/
WfchB7coMeB9m+ndJwoZxNAxIoWkGe17U5HoSkinqEPoRdN2b0A+ctFouQ+1PBZy
GxCAGDQnreCc3eWcXwv0nc7hv46jAv73KmRR3scR58oeC7wxVd4Mkmm/VBO47bJ5
Otj9XBLp2WGrI+LTsPwYYdsUnerUl88Zhs4OUpBsI0dX3yQc8wlvV3O/4ZhCFoPO
nP5VmlGzXOjFo2MPS5Jm35gFMFOkRvCn3h+myhQTdUaenRkwr2mwNn7TwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3tLtpEW210da+Ctq6dwJs4NBWTMB8GA1UdIwQY
MBaAFL7kVAKWR2aBxASMbWUNC6qmy5jnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVSVUFwWkhab0hFQkl4dFpRMExxcWJMbU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZjY4OWEtMjljZC00NzA0LTk0Y2Ut
ZDkwNTU4YWYyYzM5LzEvdnVSVUFwWkhab0hFQkl4dFpRMExxcWJMbU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZjY4OWEtMjljZC00NzA0LTk0Y2UtZDkwNTU4YWYyYzM5
LzEvdnVSVUFwWkhab0hFQkl4dFpRMExxcWJMbU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZO93rzR
jsFvJgDFYkj4+mS/35Q7iO0V5bjvSct/+BGHwkAeDSN/uqFISM823lOylVJySEPn
49xfFh0wADE8kNZ8Zmou60tCruv25MWyp0LVrwu4Y9upjYLT/WjVgh5TNyY2Hn0p
6wPXpZqbhnuvFBN/77qqFW7nOaG2uVykbDt/55ndtuhNBA5iRRqp9rjP5ixMM0fZ
+XcQAiPvi+gEIVDcvM6Ggs4B5UxccF7zUsGFhNeprixblTkZj0TDLKJFWSaMCB6w
06LsCVk04RTz3rD7i4fYoNDUIi7dYSi5i/SwwX5tCD13H0diWBzL9Dy4V/apR3mX
t9ebs2P5h+aa2A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:42 2025 by rpki-client