Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File:                     veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier:          JqDN0g27LiKTl/NoMQjMWoKoWXC8EIF8QY6BwTPH674=
Subject key identifier:   E5:40:88:6D:B4:22:A5:99:DC:08:4A:3A:7D:DE:76:D6:C6:7B:07:65
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer:       /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial:       0199FC584372AA63CD3FD4B11062000E0ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 12:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:06 +0000
Files and hashes:         1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: SrknPFUENtGMIRhqxisAr51Imwwe6ppKRbUCfvwErP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:43:72:aa:63:cd:3f:d4:b1:10:62:00:0e:0e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
        Validity
            Not Before: Oct 19 12:01:06 2025 GMT
            Not After : Oct 20 12:01:06 2025 GMT
        Subject: CN=e540886db422a599dc084a3a7dde76d6c67b0765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:57:57:8f:ce:18:ec:00:32:08:23:8b:9e:da:
                    d7:ec:72:0b:72:f8:31:1b:b1:8c:d8:b2:9e:c3:01:
                    bd:06:f3:92:fb:fc:f4:c2:31:1e:96:29:da:54:62:
                    6f:f4:d3:c3:50:e5:34:7d:78:d5:ff:19:89:d4:04:
                    d5:00:b6:61:fb:f6:85:67:7c:5e:8a:91:3b:ce:9a:
                    5a:4d:73:85:8b:9b:2c:9f:54:d8:43:3f:57:8a:e4:
                    f7:b4:d6:7d:9f:c0:eb:35:d1:c7:8f:50:ea:54:27:
                    d8:f4:b0:f2:2e:c1:fb:e2:2b:53:49:af:26:15:96:
                    3d:f9:ec:86:e5:c3:72:d3:d3:29:86:a9:74:ef:01:
                    ba:19:5a:a2:37:20:af:ca:34:b5:a2:c4:1c:eb:95:
                    a0:ce:23:7a:cc:84:c6:f9:ab:86:90:26:40:23:3b:
                    6d:4f:5c:8f:15:4b:ef:f4:b0:52:b9:14:9a:cd:6c:
                    c9:7a:18:32:72:8b:b2:e4:cb:4d:a5:57:d4:c3:70:
                    b6:b7:82:d6:e6:87:0d:22:e7:83:f4:07:a3:55:03:
                    0a:49:91:62:89:0c:02:cb:3e:ec:42:4c:ef:d5:08:
                    f7:96:c2:a0:f2:5e:63:cf:a8:b6:97:4d:8a:76:15:
                    5a:05:1c:ee:31:89:26:ed:17:de:87:d6:23:a2:90:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:40:88:6D:B4:22:A5:99:DC:08:4A:3A:7D:DE:76:D6:C6:7B:07:65
            X509v3 Authority Key Identifier:
                keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:f9:c6:60:d5:6a:78:53:18:91:c9:f8:0a:ff:53:91:1c:
         ab:58:c6:ff:3d:18:7d:6c:f2:a5:36:8c:15:6e:d1:14:70:f4:
         90:ca:f1:da:71:dd:ce:d0:2b:9f:fd:c3:16:66:ae:3a:ef:11:
         e5:5d:ce:48:7a:e9:4f:3e:b9:c4:f7:60:ac:6e:ba:e8:13:ed:
         81:33:56:c0:c2:ee:cd:ee:4b:3e:2e:df:54:af:6e:f9:35:1d:
         5f:71:86:be:f5:34:b9:26:e5:f8:db:0b:41:fd:58:f4:7f:04:
         c0:2c:3f:0b:83:70:5b:e4:fa:47:ca:fb:3e:cf:4b:97:34:d6:
         4c:62:b4:06:c2:a0:f3:af:ea:a4:86:7b:8f:32:0a:98:b4:3c:
         ce:56:7e:06:9f:fb:89:f1:c7:5c:89:02:e7:53:1f:c6:b5:a4:
         c4:ec:1c:b2:4f:a8:95:c0:9d:3e:87:45:78:50:3e:f3:66:71:
         10:4b:6a:da:bf:9e:ad:72:d7:fb:ae:a3:3c:a0:ac:d3:f5:75:
         40:03:10:d5:31:a2:03:f5:b4:d2:ec:b5:c3:a3:c5:b7:55:c4:
         91:45:ee:cf:52:12:00:6b:f5:aa:2a:87:39:de:4b:1b:76:3c:
         aa:9e:df:e5:ce:6b:3a:a5:4e:8d:8d:bf:c4:e5:c1:86:d2:e1:
         80:a7:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:24 2025 by rpki-client