Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File:                     v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier:          oFCB0juyBIgHOpoHLAjNlQiC7gSX4PpHMq+/ypA7jNI=
Subject key identifier:   8E:72:11:A8:9E:6D:33:67:05:B5:8E:26:43:EF:F5:DB:92:82:28:55
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer:       /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial:       0199FC588E2B6953266551AA48BEDB254355
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number:          1401
Signing time:             Sun 19 Oct 2025 12:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:25 +0000
Files and hashes:         1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: dg3ne1Ws5KnIdEPFmMZWnoA6xGRSOY8Z/LMS49Zxw1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:8e:2b:69:53:26:65:51:aa:48:be:db:25:43:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
        Validity
            Not Before: Oct 19 12:01:25 2025 GMT
            Not After : Oct 20 12:01:25 2025 GMT
        Subject: CN=8e7211a89e6d336705b58e2643eff5db92822855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:19:74:b0:ed:bd:f6:9e:a6:ad:9a:b8:59:
                    98:ef:d7:9d:af:a3:ea:7e:8a:41:02:b4:57:72:26:
                    7d:4d:80:53:c5:1f:88:24:f6:a8:15:5b:93:67:9a:
                    26:54:6b:48:3c:5b:d0:ec:4a:c9:67:29:dd:20:99:
                    7a:25:5e:3e:49:4f:c2:c6:75:ec:44:3b:a3:b0:c5:
                    86:f9:b1:dd:52:12:f7:cd:d1:0a:ee:89:d3:b6:75:
                    c2:1b:bb:e9:72:ab:1d:ba:aa:79:a4:bf:23:22:7b:
                    8c:2b:a5:88:bd:dc:a5:09:3d:ee:06:8e:57:3c:b2:
                    56:68:03:d5:91:f6:fe:77:c6:3f:f2:48:b6:8f:be:
                    a0:59:e5:29:6c:3b:ba:38:12:09:0c:25:a1:3a:f5:
                    8b:07:97:f3:36:3b:01:4f:fe:23:24:e6:66:b6:5b:
                    18:1c:eb:3c:59:34:d9:ad:08:0c:be:39:37:00:b8:
                    61:05:2f:02:54:a3:73:86:df:57:a0:ac:b8:08:15:
                    51:3f:2e:23:51:de:7f:83:60:93:fe:c8:92:48:30:
                    c9:31:1b:1a:02:6c:f6:82:c9:bd:79:38:52:b9:d5:
                    bf:13:84:24:bf:b8:e5:50:1d:0c:55:14:17:2d:b1:
                    ce:7c:4d:01:31:63:a2:26:1c:e2:c8:0a:32:82:db:
                    1e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:72:11:A8:9E:6D:33:67:05:B5:8E:26:43:EF:F5:DB:92:82:28:55
            X509v3 Authority Key Identifier:
                keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:67:bb:dd:85:44:d9:d1:a5:10:db:a3:47:be:82:6e:5c:d5:
         c7:5c:96:5e:ff:90:76:a7:c1:31:ff:bb:aa:8d:00:eb:08:9c:
         85:4a:f6:1e:06:5b:31:0c:6b:bb:60:b7:ce:a7:50:9f:11:5c:
         9f:2b:07:6e:4a:aa:f8:6f:bd:79:27:b8:80:0d:a9:fb:6c:40:
         cd:91:fe:61:3b:a2:80:27:b2:3c:69:80:ee:e2:3e:28:49:09:
         7d:c0:f5:b1:f5:f0:d8:8b:bc:f0:17:d0:ba:53:a0:79:f1:b7:
         e5:39:01:fd:fd:29:89:04:76:f7:b2:3b:e6:ad:62:82:59:5e:
         ff:f5:c8:19:6d:70:4b:2a:17:37:60:b5:42:63:db:2a:8d:75:
         26:42:21:5d:2f:b8:64:ef:f3:3e:70:e7:60:34:e1:45:ea:97:
         33:5a:6d:30:d6:33:4a:1e:ae:87:74:db:9d:20:77:c8:a0:d2:
         cd:94:9e:21:16:95:c8:a8:24:09:1a:85:7c:38:25:7b:22:c2:
         79:28:7b:ef:3e:57:a8:c4:6b:d1:49:e9:2d:08:3d:f5:51:ab:
         61:de:05:36:b4:89:a6:09:45:cd:7c:0e:62:86:a8:d3:3b:82:
         06:75:44:b8:f1:9a:50:7c:7f:9b:00:5a:36:cd:f0:7c:df:b4:
         42:14:6f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client