Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          2hK/6FOwArQtYeO1PhApv9ddAFR8qalyrR0ehoUaxgw=
Subject key identifier:   8E:E5:00:29:39:33:44:06:5E:73:AC:14:83:85:3F:1A:8C:3E:2F:90
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       019A4DE1FAF07747248F6D37132A62F67294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          071E
Signing time:             Tue 04 Nov 2025 08:00:46 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:46 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:46 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: rq5AmhbDjQ/uY9nih3+aSB7nn1E81jRKSvrdsrJZCa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:fa:f0:77:47:24:8f:6d:37:13:2a:62:f6:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Nov  4 08:00:46 2025 GMT
            Not After : Nov  5 08:00:46 2025 GMT
        Subject: CN=8ee50029393344065e73ac1483853f1a8c3e2f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:f0:5d:2b:1e:f3:3c:3a:85:98:f2:f8:54:
                    59:58:7b:30:5d:73:8a:e2:72:bb:34:40:99:8f:32:
                    1f:df:6f:56:ae:1d:e5:e1:5c:2d:49:24:7b:02:89:
                    b5:1e:28:9f:b7:4a:3f:1f:3f:75:20:6b:21:ea:02:
                    d8:35:a7:26:5d:df:36:09:79:ac:84:b5:7f:9f:3a:
                    87:a9:7b:f2:f8:74:16:e2:9e:2e:63:63:87:ca:6b:
                    77:ab:95:97:e3:01:5e:d8:a4:34:d5:4f:56:3c:f7:
                    89:2d:f1:25:4c:db:76:d3:d5:38:96:ce:f6:a5:d4:
                    0c:a8:f6:81:9f:ba:0c:84:29:0c:39:9e:8b:0f:76:
                    34:f2:66:81:45:29:35:3a:79:7f:10:66:a1:0c:80:
                    3e:b7:71:19:19:20:8e:b0:42:00:71:fe:cc:4b:91:
                    e7:ec:dd:df:7f:33:36:f2:fb:b5:e6:96:6a:6b:43:
                    c1:10:3e:7a:cc:a1:d8:03:79:59:07:60:c3:30:e3:
                    2f:55:a8:37:19:a9:4e:01:06:d4:53:e1:c6:8f:57:
                    ca:f3:69:94:0b:e6:17:a7:9d:a9:96:40:e2:7b:59:
                    86:16:ae:18:56:7e:9f:48:41:e7:5a:c1:73:1c:57:
                    65:99:0e:ac:9e:5c:62:fd:31:4e:de:d1:0e:62:9c:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E5:00:29:39:33:44:06:5E:73:AC:14:83:85:3F:1A:8C:3E:2F:90
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:55:56:ec:3f:62:3f:c6:bf:67:aa:22:05:90:2f:a7:46:8b:
         d6:bf:ef:02:20:31:29:7f:d4:54:6c:cf:96:68:c3:11:0b:63:
         0f:ea:9a:b5:36:10:1c:22:5a:79:14:a2:bf:35:db:5b:8f:ac:
         93:bb:4d:5f:87:fa:73:ff:62:5e:01:d4:9c:06:85:15:6d:29:
         91:01:01:95:50:ee:8a:9f:ee:37:b8:22:09:0b:90:7e:f1:f9:
         85:71:7d:0e:ed:46:b2:c8:31:af:c8:d2:68:0e:98:a4:17:80:
         3a:e2:58:65:da:f4:d3:57:06:0e:cc:e0:f9:af:f0:60:13:7c:
         39:95:0b:3e:cc:f1:bf:e7:44:0f:f2:0c:aa:5b:cc:f5:43:1c:
         66:eb:0d:63:10:92:d7:53:2f:5e:07:e2:2a:ea:f1:4b:bc:ea:
         1f:73:14:cf:1b:e4:1a:13:1b:1c:99:7b:e9:63:ab:54:57:dd:
         6b:d2:e0:18:20:b7:cf:c9:59:da:c1:a7:e0:2b:27:e9:f0:a3:
         83:ce:0b:b6:1c:6f:a4:0d:5c:f5:11:dd:1f:1a:cd:ec:e3:84:
         2a:63:f3:2c:b0:63:9a:37:4d:4a:e0:f3:13:f1:4e:d8:30:2e:
         d5:b6:cf:e4:36:79:2d:67:4f:aa:85:62:b1:38:41:89:1a:da:
         56:54:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:17 2025 by rpki-client