Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File:                     VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier:          fizYavX72KxjyuBLoesStZwvvyc782ij/ub2uKQlcOs=
Subject key identifier:   30:64:F4:63:F1:63:2E:1D:EF:15:DA:C9:9D:31:5B:68:3F:67:93:2C
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer:       /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial:       0199FCFD2E43BCDF9DC133225A9668FF5756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number:          053E
Signing time:             Sun 19 Oct 2025 15:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:14 +0000
Files and hashes:         1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: utQXcP5akmO/qo/eYXhIj+YHMIebLPAnRE/X5B+bx40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:2e:43:bc:df:9d:c1:33:22:5a:96:68:ff:57:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
        Validity
            Not Before: Oct 19 15:01:14 2025 GMT
            Not After : Oct 20 15:01:14 2025 GMT
        Subject: CN=3064f463f1632e1def15dac99d315b683f67932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bf:85:c0:b8:74:3b:eb:c8:2d:50:8f:aa:79:
                    97:15:ad:08:ee:de:92:03:bc:fa:fc:b5:57:cf:ce:
                    64:f6:22:69:85:0c:ac:9a:26:15:96:d7:fc:32:7b:
                    39:62:d6:0c:be:86:c1:19:cc:72:c0:3a:fd:3f:16:
                    b1:d7:79:f8:87:b7:ff:b7:db:e7:50:92:f0:39:a8:
                    8b:3d:71:4a:bc:69:f9:9a:7e:b3:88:25:2c:fc:8a:
                    5c:24:7b:be:6a:c5:98:34:6f:d2:7a:90:d5:b5:f0:
                    68:79:d4:df:e8:8d:e9:f5:32:f1:87:98:b7:fe:b8:
                    03:06:1e:cf:42:98:d5:ad:a8:f2:ec:10:18:e5:41:
                    eb:db:c5:4a:46:6f:e7:d8:dc:58:8a:e8:6b:15:e0:
                    cb:70:6a:ea:f3:e7:8a:c6:37:f2:04:37:b4:92:e6:
                    64:66:5e:59:8a:07:98:52:f8:e7:ad:e2:5b:57:dd:
                    f4:37:e8:66:d2:c2:c6:3b:66:1a:1b:ff:dc:56:a4:
                    7e:5e:3d:fd:09:6d:79:6e:50:fc:e7:4b:72:9e:0a:
                    ac:96:46:e2:cd:04:55:bb:87:59:cb:c2:ca:67:dd:
                    f5:7a:3f:4b:10:2d:f3:c8:b4:a4:a0:63:75:00:01:
                    e1:cc:8f:e9:52:27:f8:ec:a5:5a:fa:a4:ea:3d:a7:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:64:F4:63:F1:63:2E:1D:EF:15:DA:C9:9D:31:5B:68:3F:67:93:2C
            X509v3 Authority Key Identifier:
                keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2f:f2:15:61:31:ce:58:42:f1:93:da:bd:ac:d0:70:71:e3:
         39:76:fd:99:f7:1e:42:20:78:48:a4:97:f6:cb:af:5a:b0:60:
         c5:50:d4:89:0c:b0:0c:66:0f:a9:35:e3:fe:99:02:f7:9a:f0:
         5d:03:aa:88:9c:e9:47:64:46:ac:92:07:c5:44:cb:b9:31:38:
         c8:8f:b7:39:ae:9b:8c:32:7c:64:ce:10:7f:db:be:d9:35:9c:
         c2:94:72:72:b4:3b:1c:45:f7:8e:78:ea:64:ae:e9:86:4f:bb:
         50:ab:75:13:57:1b:ef:1a:66:38:2e:3e:9b:c8:43:3d:00:fe:
         d7:50:27:d1:2e:e4:f0:72:1a:83:cc:25:79:5c:f8:d4:a0:b4:
         cd:79:df:9a:ba:11:f0:2d:8c:1a:70:8c:b1:85:80:e0:b8:03:
         af:67:3e:e6:83:a8:f1:1c:ea:2b:8f:f5:79:b7:70:91:b2:c1:
         bb:4f:75:67:c8:e6:97:2e:38:04:d9:66:89:02:28:e8:55:f3:
         76:cf:89:8d:a3:bf:1e:33:07:d8:dd:08:56:ad:18:78:4d:af:
         ab:b7:c9:e2:1d:a3:e4:4d:a1:06:82:01:42:79:ce:f0:2c:d0:
         b2:09:fe:d7:a3:59:74:12:09:6c:5e:f2:6c:54:c3:cd:a8:b5:
         83:1c:1d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:35:08 2025 by rpki-client