Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier:          dT6548RwVNA78AB8kC7owlHgwetiG6fQlx17ZtG33mg=
Subject key identifier:   05:92:4A:AC:B3:5A:68:CD:CE:35:29:AC:2B:95:26:1C:75:4A:A2:93
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer:       /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial:       0199FB46168236A88D5DF2A584D2A83D3286
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number:          16DC
Signing time:             Sun 19 Oct 2025 07:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:38 +0000
Files and hashes:         1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: 2glV46Lx03I9V07ow5wzcQHs0BAs5CZG2J4lAbW0EdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:16:82:36:a8:8d:5d:f2:a5:84:d2:a8:3d:32:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Validity
            Not Before: Oct 19 07:01:38 2025 GMT
            Not After : Oct 20 07:01:38 2025 GMT
        Subject: CN=05924aacb35a68cdce3529ac2b95261c754aa293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:55:2c:84:9e:9e:ba:d2:ca:bf:3d:70:76:
                    72:c0:bf:cf:31:bf:b6:01:1e:80:d5:b2:24:e4:48:
                    6c:83:eb:00:df:76:30:16:cf:36:58:80:2d:46:5d:
                    28:38:45:a6:30:3f:d4:26:71:b0:ab:ea:10:7b:9a:
                    5e:10:b1:8b:aa:c0:ce:b6:30:ad:82:a5:e5:ce:ce:
                    90:91:ac:28:64:03:cb:8b:39:5a:e8:93:d2:be:7b:
                    42:fe:14:b0:83:7e:be:be:a2:3d:be:32:45:f7:ce:
                    c1:91:28:ef:39:4d:2e:ce:62:71:14:e4:6c:b9:4a:
                    74:58:b7:8a:11:f4:27:cc:b5:60:a7:a0:bc:bb:6a:
                    cc:02:9f:76:e5:91:35:df:d4:df:78:2c:54:57:2f:
                    f9:2b:29:a7:89:63:46:97:b8:36:34:17:cd:d2:db:
                    40:8c:75:4e:6a:9a:6e:02:b2:f2:19:ea:61:88:01:
                    3c:42:b2:fc:b4:0d:06:8a:9f:7c:12:42:fc:81:f2:
                    6a:c3:6c:07:8c:7e:ec:2b:d5:0d:a6:7a:48:97:8a:
                    a4:25:9f:dc:50:e3:06:25:44:e1:b2:5a:50:80:be:
                    1c:b9:2c:e9:ef:45:41:f4:8b:1f:fe:f3:75:c0:7d:
                    4c:b8:d3:59:30:62:72:09:25:29:d7:0d:3c:42:dd:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:4A:AC:B3:5A:68:CD:CE:35:29:AC:2B:95:26:1C:75:4A:A2:93
            X509v3 Authority Key Identifier:
                keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:d3:59:5b:ce:7c:6e:c5:f8:8a:61:f3:bd:a4:a1:f1:ce:
         e1:48:78:bf:06:6b:ad:92:18:f4:6b:7c:df:8a:b5:6e:37:66:
         bf:e3:9d:49:75:95:de:56:a4:e3:dc:7b:e0:d6:70:64:e0:fa:
         c2:a4:af:37:6f:e7:36:20:9b:e4:45:13:71:18:42:26:2e:37:
         e0:62:6c:67:99:bb:3e:a2:d5:89:a5:e3:e6:b4:3c:0d:cf:0d:
         b6:85:14:6d:e3:56:68:2e:34:ce:88:5c:df:86:d7:3c:7e:e0:
         68:43:39:65:07:79:f0:2c:3b:70:74:03:c9:c5:3f:2a:1f:1e:
         6d:f8:f7:c8:53:5b:8c:19:bc:0b:fe:1a:52:0b:bd:a5:b7:55:
         4c:b4:22:fc:80:b2:df:06:f3:df:bd:1a:0b:af:5c:27:e8:f0:
         62:97:f2:f7:88:12:89:67:ac:17:f7:df:5a:67:ec:d1:6f:0c:
         a9:f1:37:ae:97:d6:a5:dc:a3:7c:c1:cb:8b:31:0f:28:3d:df:
         6f:64:9c:07:d9:2c:f3:f0:58:a6:fb:e8:57:85:9a:6c:7d:27:
         b9:93:10:34:e1:91:2e:2c:32:39:c2:87:ec:fa:e7:9d:76:eb:
         ef:d2:cf:c0:08:3e:9d:5e:b2:76:6f:72:67:e5:a5:7e:39:ab:
         61:fa:3b:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RhaCNqiNXfKlhNKoPTKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlODQ3ZWJiMjQ0OWE4NGZiZjZiMjU1YzYwNDAyOGQxNDIy
MDJjOTUwHhcNMjUxMDE5MDcwMTM4WhcNMjUxMDIwMDcwMTM4WjAzMTEwLwYDVQQD
EygwNTkyNGFhY2IzNWE2OGNkY2UzNTI5YWMyYjk1MjYxYzc1NGFhMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jFVLISenrrSyr89cHZywL/PMb+2
AR6A1bIk5Ehsg+sA33YwFs82WIAtRl0oOEWmMD/UJnGwq+oQe5peELGLqsDOtjCt
gqXlzs6QkawoZAPLizla6JPSvntC/hSwg36+vqI9vjJF987BkSjvOU0uzmJxFORs
uUp0WLeKEfQnzLVgp6C8u2rMAp925ZE139TfeCxUVy/5KymniWNGl7g2NBfN0ttA
jHVOappuArLyGephiAE8QrL8tA0Gip98EkL8gfJqw2wHjH7sK9UNpnpIl4qkJZ/c
UOMGJUThslpQgL4cuSzp70VB9Isf/vN1wH1MuNNZMGJyCSUp1w08Qt0KqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWSSqyzWmjNzjUprCuVJhx1SqKTMB8GA1UdIwQY
MBaAFL6EfrskSahPv2slXGBAKNFCICyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9SLXV5UkpxRS1fYXlWY1lFQW8wVUlnTEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jYjA1ZjktNTZiZS00ZGZiLWE0YTkt
ODkzYjBiZWJjOTM4LzEvdm9SLXV5UkpxRS1fYXlWY1lFQW8wVUlnTEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jYjA1ZjktNTZiZS00ZGZiLWE0YTktODkzYjBiZWJjOTM4
LzEvdm9SLXV5UkpxRS1fYXlWY1lFQW8wVUlnTEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb7TWVvO
fG7F+Iph872kofHO4Uh4vwZrrZIY9Gt834q1bjdmv+OdSXWV3lak49x74NZwZOD6
wqSvN2/nNiCb5EUTcRhCJi434GJsZ5m7PqLViaXj5rQ8Dc8NtoUUbeNWaC40zohc
34bXPH7gaEM5ZQd58Cw7cHQDycU/Kh8ebfj3yFNbjBm8C/4aUgu9pbdVTLQi/ICy
3wbz370aC69cJ+jwYpfy94gSiWesF/ffWmfs0W8MqfE3rpfWpdyjfMHLizEPKD3f
b2ScB9ks8/BYpvvoV4WabH0nuZMQNOGRLiwyOcKH7PrnnXbr79LPwAg+nV6ydm9y
Z+WlfjmrYfo7KQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:17 2025 by rpki-client