Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
File:                     VvhoHvsvqdzUjHxPrz14w6GtLdE.mft (raw, json)
Hash identifier:          MCeSE/RHWIcUxH1PZweaMC4rdN0leIKtj2zzHd84TSw=
Subject key identifier:   21:BB:61:26:D9:BC:F6:27:28:B5:DC:45:54:37:1B:A6:43:70:71:0E
Authority key identifier: 56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1
Certificate issuer:       /CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
Certificate serial:       0199FC585C522805BC9C9DF0E015843BDFAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
Manifest number:          054E
Signing time:             Sun 19 Oct 2025 12:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:13 +0000
Files and hashes:         1: VvhoHvsvqdzUjHxPrz14w6GtLdE.crl (hash: ZQBHFr5JkprpbIYOokpbEuag0r2LszxDHtSuID9V5lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:5c:52:28:05:bc:9c:9d:f0:e0:15:84:3b:df:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f8681efb2fa9dcd48c7c4faf3d78c3a1ad2dd1
        Validity
            Not Before: Oct 19 12:01:13 2025 GMT
            Not After : Oct 20 12:01:13 2025 GMT
        Subject: CN=21bb6126d9bcf62728b5dc4554371ba64370710e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:d4:bc:42:30:01:08:79:a0:76:ee:e4:3b:
                    55:3c:7a:3f:a2:7d:d7:6c:64:89:99:05:27:94:62:
                    b8:a4:17:66:07:8c:cc:1e:85:b4:51:cc:24:e7:e0:
                    23:43:80:d5:e5:02:96:f2:cc:1b:1f:bd:24:06:8b:
                    39:ea:b1:92:8a:f4:ee:44:86:75:6b:da:b2:67:0c:
                    0e:89:dd:da:31:7f:4d:16:11:17:0f:63:a9:5e:c5:
                    f9:98:81:70:a3:48:7a:78:c7:41:90:46:d3:37:35:
                    fe:32:25:a5:6b:2d:c0:fa:e1:de:cb:9d:1c:6e:3b:
                    a5:2d:7f:68:d3:0c:62:5c:49:eb:18:a5:56:b8:ca:
                    e3:42:c6:06:79:70:83:8a:83:81:b2:61:52:54:3d:
                    1b:a6:d1:a6:0a:cd:e4:e0:64:39:35:f7:e0:1f:0d:
                    fd:73:b3:14:f5:40:f7:9f:a0:48:ff:96:b3:e8:bf:
                    5a:b7:e1:6c:d8:a5:7b:60:da:b4:75:ab:4a:46:b7:
                    ed:e8:26:9a:dd:36:62:20:08:50:d2:cf:a5:35:8e:
                    11:81:23:d5:2d:d2:12:39:30:38:b8:14:13:74:32:
                    6b:6a:89:57:02:d6:42:a6:c6:a3:9e:89:2b:42:b3:
                    d0:4f:91:fb:73:83:70:f3:e4:0a:17:65:4f:29:30:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BB:61:26:D9:BC:F6:27:28:B5:DC:45:54:37:1B:A6:43:70:71:0E
            X509v3 Authority Key Identifier:
                keyid:56:F8:68:1E:FB:2F:A9:DC:D4:8C:7C:4F:AF:3D:78:C3:A1:AD:2D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvhoHvsvqdzUjHxPrz14w6GtLdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c25192-a0a2-47c8-a1c9-83a93515ca63/1/VvhoHvsvqdzUjHxPrz14w6GtLdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:fc:2b:ce:d5:02:2a:21:d9:ba:1e:fe:a3:a5:15:36:e1:66:
         82:24:ab:a8:71:2c:ff:56:26:ed:e8:19:81:bd:7f:f7:c1:bc:
         52:4c:71:ae:54:f3:aa:7b:a7:52:2b:9a:fa:40:ff:06:5c:62:
         bb:8a:2c:88:80:1c:08:68:6d:d3:6f:e3:97:67:1d:a5:af:1a:
         bd:63:d2:63:73:3e:24:ab:ea:87:79:ee:d6:6a:7c:69:65:69:
         e1:81:e1:46:1b:20:9d:ef:6a:2e:85:b5:5f:7f:d1:3b:74:a3:
         48:47:3c:3f:36:df:f8:20:be:f8:d8:12:60:8a:47:04:fe:72:
         2d:78:05:d1:4f:1d:78:2b:25:5f:28:8e:95:62:91:98:bf:2a:
         08:a1:78:fd:c2:2a:f1:51:2b:3a:1a:18:e4:1d:9f:25:cc:09:
         ad:37:79:88:cc:12:ef:dc:98:92:7b:18:ec:c2:92:8b:8a:53:
         28:aa:e1:78:e7:93:ed:82:68:88:4c:22:63:db:20:96:e1:32:
         04:14:36:de:06:6d:20:35:a7:3b:c9:27:6f:f2:f3:5b:88:fd:
         61:9d:2a:f3:38:9f:29:d2:90:47:f2:ab:81:2f:6a:cf:14:9d:
         7f:d4:b1:e1:fb:65:d4:2b:08:26:fe:e1:61:09:ec:7c:a6:bd:
         2b:29:32:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:13 2025 by rpki-client