Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
File:                     vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft (raw, json)
Hash identifier:          1GcqIGXX2ZmlZV/4y0MjX19Sl1DGiiZQKN8f9aIf2mo=
Subject key identifier:   7C:49:49:F4:A9:9A:92:30:CB:0D:32:C8:25:51:78:EC:0D:52:9C:8A
Authority key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Certificate issuer:       /CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Certificate serial:       0199FAD801FDDADABB6FAEB244F0245A4BE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
Manifest number:          6B
Signing time:             Sun 19 Oct 2025 05:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:24 +0000
Files and hashes:         1: vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl (hash: eE6PJIWxOs9+/SHDstzyMs6OOjq5hSkaPrAZ0xBbPGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:01:fd:da:da:bb:6f:ae:b2:44:f0:24:5a:4b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
        Validity
            Not Before: Oct 19 05:01:24 2025 GMT
            Not After : Oct 20 05:01:24 2025 GMT
        Subject: CN=7c4949f4a99a9230cb0d32c8255178ec0d529c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:35:89:01:93:17:b1:c2:45:48:73:d2:6c:
                    8a:0c:8f:00:c8:29:d2:58:98:f9:a9:ec:54:8a:2e:
                    79:f9:69:31:8f:60:c2:f7:3f:cf:45:fa:f9:84:04:
                    bf:ea:2e:f0:97:22:95:08:49:dc:96:ab:bf:97:8c:
                    a7:22:dd:f9:83:b1:64:13:07:00:f4:96:62:8d:12:
                    a4:da:25:be:04:22:b8:c9:c0:e7:81:a1:86:b9:f2:
                    5e:1f:a3:3e:c9:bc:49:15:fa:93:4a:1d:df:6c:ac:
                    c8:87:d2:56:ab:5d:f5:cd:fb:16:ad:fb:cd:84:f3:
                    30:f7:c9:42:ab:4d:fe:ab:a1:45:ec:ac:88:db:fb:
                    db:fd:8e:1a:e5:36:52:d4:79:8f:da:9e:83:aa:9f:
                    8e:16:8b:f1:65:39:14:aa:ff:d0:09:7d:4c:2c:00:
                    da:c0:05:64:9d:c8:a3:e2:52:fa:54:82:94:92:c0:
                    04:93:c0:d9:54:3a:23:c1:c1:c2:cf:62:4d:3d:d8:
                    1a:a9:fc:86:bd:f4:6e:28:ff:ac:df:26:35:01:f0:
                    63:01:03:7a:8b:b1:74:2f:3b:e1:1b:49:5d:ca:a8:
                    17:4f:28:96:3e:8f:7c:e4:3c:cd:52:4e:51:af:68:
                    68:9a:f3:fb:0e:4b:e3:ca:a4:99:99:d4:04:dd:50:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:49:F4:A9:9A:92:30:CB:0D:32:C8:25:51:78:EC:0D:52:9C:8A
            X509v3 Authority Key Identifier:
                keyid:BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:73:44:7b:e0:17:28:06:bc:cb:13:af:62:fe:47:99:60:
         36:c0:bf:98:f9:26:1f:42:b9:a0:82:ce:e1:1f:17:7c:5e:33:
         58:92:e3:e4:11:51:c9:30:a8:69:de:47:51:1f:b8:24:d4:fc:
         8d:ad:14:75:11:8f:cf:1b:d4:53:f4:16:53:f7:0c:d8:96:65:
         81:9b:db:14:7f:5f:a9:f3:d2:2f:0b:bd:f3:32:69:76:10:7f:
         a1:74:7f:14:72:1b:6a:28:d0:d3:95:bb:41:0a:49:c3:9a:06:
         b0:a4:f6:d8:6b:5d:b9:15:37:a1:fb:99:70:a8:39:92:7b:b5:
         b9:86:c7:5b:e3:fa:af:12:69:f9:e7:c1:a6:29:3a:37:2f:3e:
         3f:2a:c1:11:fa:60:7b:5f:98:f7:9b:b8:a1:cc:48:ec:4d:04:
         e4:54:02:b5:30:b7:59:d6:f5:a0:1a:41:f5:2e:3a:30:40:0d:
         7f:31:04:41:b2:54:8e:81:f8:79:3b:8a:c3:a0:37:fb:56:d8:
         63:b2:a3:5f:fc:46:03:1a:40:c0:a5:5a:ac:ec:ba:9a:bb:b7:
         e8:75:1f:84:2f:d1:9f:d1:70:98:ff:b4:b4:76:60:45:6b:7e:
         63:d9:14:33:b3:ef:0d:8e:af:64:87:28:83:78:32:fc:e2:f6:
         09:21:0e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:41 2025 by rpki-client