Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
File:                     vln_z7TGm3nZrNy-apTbidUjYI4.mft (raw, json)
Hash identifier:          puDOMm8oYFBxd9eRISIbASab+KTw9tgFFvRIiUaWhH0=
Subject key identifier:   E6:50:21:1A:31:5E:F6:57:C0:85:A1:F2:2E:07:81:C1:C4:07:A3:01
Authority key identifier: BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E
Certificate issuer:       /CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
Certificate serial:       019849663CDDFA79BE5DBC32E1F69615D693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
Manifest number:          0899
Signing time:             Sun 27 Jul 2025 01:01:33 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:33 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:33 +0000
Files and hashes:         1: vln_z7TGm3nZrNy-apTbidUjYI4.crl (hash: EKt7vwRricGzBqj2pX3x3PWfZIm9ZefUTEtyyBr83+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:3c:dd:fa:79:be:5d:bc:32:e1:f6:96:15:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be59ffcfb4c69b79d9acdcbe6a94db89d523608e
        Validity
            Not Before: Jul 27 01:01:33 2025 GMT
            Not After : Jul 28 01:01:33 2025 GMT
        Subject: CN=e650211a315ef657c085a1f22e0781c1c407a301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:c0:8c:4d:95:ca:2d:59:fa:44:0d:fb:77:
                    f7:5e:3d:57:13:83:e4:3d:b4:67:44:0e:a2:cd:cc:
                    d6:11:75:24:7e:d0:ba:cf:89:2d:8e:41:d4:0b:74:
                    34:80:c5:28:a9:72:98:17:01:3c:c7:10:39:ca:e3:
                    7a:a9:0a:87:f7:a5:21:1a:ab:11:e4:e9:7e:c5:bf:
                    84:4a:9c:c0:b7:4a:bc:ff:d2:45:14:9f:31:64:cb:
                    11:e6:fa:2e:eb:19:05:4a:9e:ed:ee:ca:06:31:d4:
                    ec:17:82:9c:7b:69:53:04:fd:72:fa:6e:d6:45:13:
                    55:1a:18:86:4a:cb:7e:9b:7d:bf:b6:1b:9b:2a:aa:
                    2b:4b:54:05:c5:8c:8b:7b:64:94:e8:2e:b0:36:3c:
                    94:02:a6:65:cb:7b:ee:59:1d:7c:12:01:88:b7:3a:
                    d7:a1:4c:1b:78:b4:e0:08:49:30:43:e8:df:b5:53:
                    e9:c6:e4:0f:eb:8b:5a:7c:e6:c3:7e:90:e9:6c:3f:
                    00:66:18:f5:45:ca:88:ff:00:65:0e:7b:b8:02:c0:
                    7f:b7:51:76:55:de:99:f1:2b:c7:da:c1:f4:06:1f:
                    94:2b:5c:3c:02:32:48:65:c6:90:d0:0c:17:b8:99:
                    f8:88:09:9e:7b:26:6c:06:88:bb:c9:0b:84:43:a2:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:21:1A:31:5E:F6:57:C0:85:A1:F2:2E:07:81:C1:C4:07:A3:01
            X509v3 Authority Key Identifier:
                keyid:BE:59:FF:CF:B4:C6:9B:79:D9:AC:DC:BE:6A:94:DB:89:D5:23:60:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vln_z7TGm3nZrNy-apTbidUjYI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1ccc69-986a-4bad-bd3a-9b6a0f369bcd/1/vln_z7TGm3nZrNy-apTbidUjYI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:ad:da:56:10:1e:98:5d:ac:35:f5:ab:4c:16:26:a3:ff:
         b4:79:76:e6:37:ea:67:95:36:5c:fc:d2:7b:81:ca:f1:6a:d9:
         53:47:63:89:0a:6d:9a:23:e0:c3:32:10:f4:1f:28:38:04:4a:
         31:07:6a:57:3b:2e:a7:1f:95:7a:53:f9:89:22:85:1b:b2:bb:
         69:c5:f6:99:23:4f:3b:1b:cd:bc:d6:8d:e4:fe:c7:de:47:2a:
         98:18:43:dd:5f:68:33:71:cc:64:26:1c:20:9a:ce:ef:d2:6f:
         c8:38:c1:fd:16:77:34:d8:4a:cf:77:6c:ea:1a:64:af:6b:fc:
         49:8f:5f:bb:b6:3c:b1:38:f5:b5:1c:15:88:96:85:54:4a:3b:
         de:46:24:cb:7a:5c:7b:bf:f7:0d:a6:7a:38:ce:22:31:81:58:
         c9:32:07:31:a0:be:1c:53:bc:4a:14:0b:24:d2:97:ad:8e:43:
         fc:30:29:07:81:8c:57:90:d0:48:34:a7:55:1b:bf:e5:5e:2d:
         b4:a6:fd:f0:a6:ae:bb:56:bc:cf:c1:f3:de:20:c9:0b:77:00:
         4d:60:36:29:64:61:bf:ba:df:1d:85:c9:62:c6:ea:61:e1:c0:
         72:a7:65:2f:bd:60:38:25:55:7b:77:0b:51:ed:03:85:e1:73:
         4a:5a:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:21 2025 by rpki-client