Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
File:                     vp7oIiPwQFhr4922qq9lXplCkSY.mft (raw, json)
Hash identifier:          mkhGAPTSTgPiPxseZM29dJM903zqtqzzIG++jVXh8Zg=
Subject key identifier:   79:9B:C6:33:BB:F3:06:30:12:8A:19:27:C1:D0:A0:B4:9D:14:6D:A4
Authority key identifier: BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26
Certificate issuer:       /CN=be9ee82223f040586be3ddb6aaaf655e99429126
Certificate serial:       0198D65FD931C0023B5CE6E0293C93B08039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
Manifest number:          078E
Signing time:             Sat 23 Aug 2025 10:01:02 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:02 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:02 +0000
Files and hashes:         1: vp7oIiPwQFhr4922qq9lXplCkSY.crl (hash: Hr24rU2/4fwZmlmqUHFAyB7cEaUUNLf6u68t4T88pic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:d9:31:c0:02:3b:5c:e6:e0:29:3c:93:b0:80:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9ee82223f040586be3ddb6aaaf655e99429126
        Validity
            Not Before: Aug 23 10:01:02 2025 GMT
            Not After : Aug 24 10:01:02 2025 GMT
        Subject: CN=799bc633bbf30630128a1927c1d0a0b49d146da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:95:f4:3f:aa:be:31:f5:1d:c4:8f:30:6c:
                    21:79:ea:67:e7:28:23:6d:30:cf:37:fa:0b:26:f8:
                    29:b9:fb:dd:1b:3f:b4:19:6e:0b:cc:e6:b2:9d:56:
                    ab:c9:f1:e7:d5:b0:11:51:89:a9:cd:dd:59:99:db:
                    a6:85:c4:09:0a:f0:9e:be:51:8e:bf:f5:ce:88:4b:
                    14:2b:b1:96:cf:02:4e:4f:eb:26:cf:a3:ff:90:86:
                    9c:74:df:53:42:c3:17:e4:42:bc:81:dd:2c:be:ad:
                    c1:d6:28:62:b5:83:b1:eb:3a:99:b4:54:0b:72:ab:
                    eb:97:2c:cb:a0:a8:87:40:c8:69:c4:52:36:1b:63:
                    42:be:54:a9:f7:c3:90:db:ea:07:84:85:0f:37:11:
                    d5:11:8c:43:35:8a:bb:36:ed:a3:d3:9f:df:a1:bf:
                    f4:aa:3b:c8:63:73:c4:1c:0c:b3:f3:74:dc:c5:ae:
                    a9:f6:dd:14:e6:20:0e:95:78:e1:3e:ca:12:dd:3a:
                    a5:50:8a:60:af:fd:76:f4:d1:88:c1:21:dd:72:f4:
                    e5:7f:be:47:75:4f:c4:9b:41:6f:aa:95:eb:1b:f6:
                    d0:72:08:74:d1:8f:fd:53:bd:c0:ce:8e:1d:f6:63:
                    03:f9:a3:c2:a0:d9:8f:85:bb:f9:b7:78:98:56:4c:
                    7d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:C6:33:BB:F3:06:30:12:8A:19:27:C1:D0:A0:B4:9D:14:6D:A4
            X509v3 Authority Key Identifier:
                keyid:BE:9E:E8:22:23:F0:40:58:6B:E3:DD:B6:AA:AF:65:5E:99:42:91:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp7oIiPwQFhr4922qq9lXplCkSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/327c46-57ee-4f2f-989d-28c0e7df16a3/1/vp7oIiPwQFhr4922qq9lXplCkSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:ae:8e:ea:8b:23:63:7c:79:e8:26:7d:fa:78:83:64:9a:
         50:ff:c7:63:c4:72:b4:36:15:07:da:0a:5d:b7:56:ad:83:22:
         6b:63:2a:38:22:48:53:4c:12:c9:43:39:7f:f4:2c:c1:ae:da:
         73:29:cf:11:d3:f8:96:c7:28:cd:4d:77:82:25:26:ab:43:93:
         35:e1:e5:49:4e:05:ce:e7:fe:59:58:2d:7c:c6:60:ef:19:5b:
         58:c4:2d:40:77:49:03:b3:52:db:f7:fb:5c:16:d9:6d:f9:5a:
         9b:14:87:e2:40:ae:42:91:b7:ca:f1:29:01:4d:43:fa:4a:9b:
         58:4f:df:07:d6:13:20:17:44:42:d1:00:fd:19:7c:1a:3a:2e:
         9f:6a:e7:fb:01:44:e9:37:8f:28:d3:52:bb:2f:fb:f9:af:26:
         17:3a:11:3a:30:50:e4:1a:91:33:a1:dc:58:8f:58:ed:c8:ac:
         b9:e1:23:9e:78:48:88:28:1a:f3:5b:70:5d:f9:fa:8d:d9:6e:
         31:2d:b8:9e:af:ce:68:56:9e:94:75:64:01:ad:c1:50:57:c8:
         d0:f4:e6:38:b7:8f:54:68:0c:b1:8b:d5:93:f6:66:15:1b:2e:
         6f:0b:97:86:6c:af:72:93:54:a9:d4:47:83:67:5a:5e:1d:c1:
         79:95:f2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:47 2025 by rpki-client