Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File:                     vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier:          McJ2EOp0BE1ftdUOapWzo/NLgT0qKuNpbhrLFYDp7sg=
Subject key identifier:   33:53:26:CA:BB:E2:D0:F4:CA:30:7F:81:78:B6:EC:1D:8D:68:AE:2E
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer:       /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial:       01988A698FD96291CBC78581B374C289851F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number:          135C
Signing time:             Fri 08 Aug 2025 16:00:30 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:30 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:30 +0000
Files and hashes:         1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: VYXRknnjUUFBDO3q1f6xZMzg36X1FU2VriENEZTQ8CM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:8f:d9:62:91:cb:c7:85:81:b3:74:c2:89:85:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
        Validity
            Not Before: Aug  8 16:00:30 2025 GMT
            Not After : Aug  9 16:00:30 2025 GMT
        Subject: CN=335326cabbe2d0f4ca307f8178b6ec1d8d68ae2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:d8:89:b6:c4:8f:12:4d:60:5e:28:c1:44:
                    91:21:19:e2:ba:95:bf:3f:25:a3:9d:0c:f2:c1:c9:
                    0d:b5:76:90:c5:51:82:2e:7b:73:ab:13:25:c3:2b:
                    bf:13:79:2e:96:41:66:85:0e:cd:70:1b:b4:3d:1f:
                    6e:0b:4a:47:7b:4c:13:a5:c6:bb:25:5e:7b:5c:99:
                    b8:db:bb:ef:e5:cd:b5:9f:3c:8e:66:68:3c:35:55:
                    d8:37:39:43:b1:89:21:71:88:9e:39:5f:d0:91:9f:
                    66:4e:a2:e4:39:21:af:b5:27:37:0b:89:45:ac:fb:
                    43:da:3f:ab:bc:40:93:7e:ab:b0:05:fb:e9:6c:0f:
                    8c:bc:7c:88:9d:29:1b:5f:e7:18:f2:b7:3f:8b:e2:
                    b8:65:d1:5b:a0:fa:60:e7:87:ae:a0:d7:1b:3c:58:
                    27:30:9c:17:3c:a2:e3:5b:8b:47:89:a0:49:63:a6:
                    19:72:de:66:9f:5f:7d:d6:7f:49:2e:ce:c3:89:ab:
                    42:b1:9f:85:7d:2c:c8:0b:6d:b4:b0:16:30:17:05:
                    d8:38:48:f4:f0:2b:55:1d:20:0f:ed:ba:05:a1:d1:
                    6d:ae:d3:ee:b6:8e:3d:17:5b:fb:fe:41:6f:17:24:
                    24:ab:7f:ef:e0:bc:d7:55:70:5a:bf:84:cd:d3:88:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:26:CA:BB:E2:D0:F4:CA:30:7F:81:78:B6:EC:1D:8D:68:AE:2E
            X509v3 Authority Key Identifier:
                keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:39:97:49:cc:99:74:24:5c:59:55:ea:11:55:d4:b7:bc:c8:
         ba:bf:09:27:7c:1d:d2:b9:3f:60:d8:c1:14:30:93:f5:b4:c4:
         a7:10:f7:2d:35:b6:8f:ad:8d:ff:1b:5c:b4:f1:89:84:2e:c6:
         a7:69:44:50:f6:2d:3d:ff:b8:65:75:73:6e:99:76:4a:a0:4b:
         80:26:d4:7d:10:f2:e0:eb:34:d6:50:e9:7a:c1:d4:85:f7:41:
         53:15:68:7c:3c:6f:9e:e7:1d:c1:82:ef:42:ce:3f:1b:14:b1:
         a8:6f:63:b9:c6:ff:8a:a2:d4:9f:4b:b2:de:2f:01:4a:64:28:
         c5:09:7c:13:e4:c9:ed:ad:57:38:c4:5a:96:06:f3:ef:6e:51:
         df:9f:1c:be:9c:ff:0e:c3:8b:c4:ca:a4:75:df:98:e7:de:f7:
         04:6b:80:af:4c:2b:78:60:2e:b5:09:a8:d2:c7:42:75:5c:69:
         58:fe:8f:0c:04:93:1f:84:1f:20:c4:47:4c:87:4a:03:f3:35:
         7f:38:3f:a7:bc:a1:c6:d4:07:e2:70:8c:24:9a:81:c9:de:bd:
         97:72:bb:bd:00:be:b7:5d:41:61:a7:02:e9:33:e7:42:b4:10:
         eb:33:71:2e:67:40:45:b7:5c:23:2c:9b:55:f4:e7:eb:7b:87:
         cd:b9:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:41 2025 by rpki-client