Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File:                     voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier:          LGVrATaYEBNBo3PopkwbS+EfC5lHozeFjWBE9RkxTac=
Subject key identifier:   3A:55:20:48:68:5B:B0:E1:59:41:7B:CA:09:6C:2D:EB:C2:58:6A:E8
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer:       /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial:       019A503DBA96A8864C7A98198360F904640B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number:          1708
Signing time:             Tue 04 Nov 2025 19:00:13 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:13 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:13 +0000
Files and hashes:         1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: 4JKfEFqTCBW8SzLCwj398thfJjSo1djJFxyC80AizwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:ba:96:a8:86:4c:7a:98:19:83:60:f9:04:64:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
        Validity
            Not Before: Nov  4 19:00:13 2025 GMT
            Not After : Nov  5 19:00:13 2025 GMT
        Subject: CN=3a552048685bb0e159417bca096c2debc2586ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:98:b4:11:f7:99:16:1e:1a:d0:2e:c3:a9:
                    fb:00:84:69:4d:67:a6:6b:ba:e2:27:55:56:c6:f0:
                    49:35:c5:00:1a:f3:85:d6:41:77:d7:85:53:ff:87:
                    94:04:13:bb:48:32:c5:74:2c:c1:8c:7c:58:7f:f6:
                    48:8c:69:c6:ac:54:dc:d6:76:30:22:12:31:88:6d:
                    e4:f0:72:b9:c5:5c:d7:63:20:09:cc:76:c1:49:85:
                    e2:62:6b:5d:7d:23:f9:d5:f4:63:c7:5f:9b:f6:b7:
                    b3:0d:af:74:f4:60:a1:17:4c:cd:0d:05:33:9b:c6:
                    82:7f:18:a8:ec:8f:d8:1c:65:d2:eb:3f:f1:83:4d:
                    18:60:d9:fd:1e:14:50:0d:c7:bb:18:65:04:1a:02:
                    4b:dd:ff:c6:ee:2b:7b:fb:80:9e:c9:a4:82:2f:89:
                    2e:b3:c3:b8:cd:20:5f:77:88:9c:9d:e3:3d:32:5c:
                    ca:05:fd:ae:46:72:d1:3f:2d:b4:2c:4d:94:a6:a3:
                    ec:e1:c9:67:a3:4e:74:86:6c:2c:9d:f7:6d:15:a6:
                    06:3c:47:91:ca:f8:4e:3f:f7:54:01:86:b7:6d:e8:
                    0e:f4:aa:06:4d:97:af:e6:9b:83:f1:a7:87:a1:b2:
                    9b:59:5d:31:d9:33:ae:7e:ae:ef:17:a8:6d:00:50:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:55:20:48:68:5B:B0:E1:59:41:7B:CA:09:6C:2D:EB:C2:58:6A:E8
            X509v3 Authority Key Identifier:
                keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:b5:3f:5c:c4:bd:a3:5f:56:ba:31:b4:30:54:ef:7c:ef:
         22:a0:80:d6:27:71:bb:8e:9c:a7:e7:89:7f:59:23:82:4a:8f:
         a8:9e:c2:ff:aa:06:b1:5f:13:19:8d:69:8d:60:91:69:c1:ad:
         67:ce:54:c7:90:9d:20:bc:db:7e:e1:14:cf:df:f3:bb:53:1a:
         0a:8b:37:0e:14:ce:83:8c:fe:6e:c3:63:77:35:f6:76:87:a9:
         4d:5c:df:0f:c7:5b:1a:c2:b4:4a:83:e4:02:96:d6:b0:52:80:
         8f:41:d7:c1:17:11:97:36:be:ed:e9:71:dc:d0:16:c4:12:dd:
         03:d3:47:37:2c:14:d9:28:8a:ed:ce:81:ae:35:51:05:a5:e8:
         f5:f5:b6:3e:c7:62:97:14:82:16:d9:5c:dd:6e:02:2b:db:e6:
         0c:97:cc:dd:7f:b6:a1:2c:fb:b9:49:c6:ea:b0:d8:f0:51:6d:
         7e:c0:4f:52:2b:29:83:cf:68:20:b3:26:b1:98:aa:47:bc:23:
         d8:5d:e6:b4:30:fe:49:24:82:f7:f1:02:6b:ad:19:60:c4:3f:
         c3:0f:62:4f:06:0e:6e:78:cf:73:3a:92:97:ac:cb:b1:19:f2:
         a0:b3:54:1a:50:89:8b:cb:ee:82:d8:38:84:62:94:60:cf:0a:
         a2:90:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:53 2025 by rpki-client