Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          wkCLW/wwnLzjZJUwOJw5aMBgZWYGAaHuUZbtvp26aQQ=
Subject key identifier:   64:3B:7B:FC:66:AE:79:C2:41:D3:9E:EA:8E:C2:A6:F0:E4:3D:2F:49
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019918E5239BDE25D1B2558144054AD2B201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          0448
Signing time:             Fri 05 Sep 2025 08:01:34 +0000
Manifest this update:     Fri 05 Sep 2025 08:01:34 +0000
Manifest next update:     Sat 06 Sep 2025 08:01:34 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: EIIFoWjXqJv+SGPl4o0wun1IGeROEKiC+au7nAd460I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:e5:23:9b:de:25:d1:b2:55:81:44:05:4a:d2:b2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Sep  5 08:01:34 2025 GMT
            Not After : Sep  6 08:01:34 2025 GMT
        Subject: CN=643b7bfc66ae79c241d39eea8ec2a6f0e43d2f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:9c:11:6c:c3:bb:9b:b9:4e:7f:74:e8:bf:
                    c9:00:1d:c7:2e:cc:d0:fa:54:68:fc:59:82:73:9c:
                    3d:7e:f6:e8:12:a3:73:f7:79:b4:a9:a9:4c:98:ef:
                    b3:6a:f0:97:cd:3e:4b:74:4c:ab:98:01:80:34:19:
                    31:98:63:8c:b9:a3:79:95:80:c2:4e:87:5a:7d:ce:
                    3d:9a:e0:1a:8b:6c:55:e2:d8:9f:16:01:b4:cc:b9:
                    3b:84:2c:a2:f7:83:5c:9d:1c:c2:99:2f:7a:ae:d4:
                    da:b2:4c:51:1a:42:bc:a1:4e:dd:a2:94:41:bf:7f:
                    32:9e:6d:2d:49:0e:46:2c:e3:44:42:b8:ee:a8:d1:
                    b9:e8:6e:34:20:78:50:4a:92:97:e0:72:db:0f:a1:
                    04:79:88:1e:88:d4:fa:0f:21:68:50:8f:5c:8d:b1:
                    67:e4:f7:ca:a0:6c:e2:1e:cd:a2:94:d0:81:2c:76:
                    02:1f:31:aa:fa:5c:8a:7f:f9:10:44:60:ae:65:63:
                    be:ba:c2:e6:b0:2e:93:81:c6:97:d8:47:13:0b:5c:
                    59:ba:35:69:b1:d2:96:8e:df:14:ba:70:b6:e4:a1:
                    71:9d:3d:12:4c:65:a1:88:61:1a:ce:cf:87:e7:a1:
                    42:65:b5:6f:01:cc:6b:53:9a:06:b6:1b:f8:65:89:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:3B:7B:FC:66:AE:79:C2:41:D3:9E:EA:8E:C2:A6:F0:E4:3D:2F:49
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c0:3f:f3:b7:fa:db:79:a4:e3:bb:8c:30:c1:18:65:48:09:
         6a:17:b7:b7:c6:ce:29:8f:c9:4a:1a:5a:b3:e8:e6:45:5e:62:
         dd:13:3a:bf:9a:41:3d:68:56:5a:f1:7d:09:b4:30:de:67:b0:
         c3:b8:45:83:70:42:a5:22:c9:a1:73:48:6d:e8:33:b8:e0:f7:
         2a:5c:eb:74:43:64:70:ae:92:02:c4:47:50:c1:5a:42:14:f1:
         d2:ae:40:43:4a:70:f1:81:67:1a:77:b5:2d:98:08:49:a7:0b:
         74:2c:af:68:bb:01:5d:18:4a:90:ed:75:0b:60:ce:86:9a:bf:
         3c:74:de:0f:a8:75:8a:7f:bc:b3:96:35:9e:dc:c5:9e:6c:18:
         d4:d0:c5:62:1b:52:79:0e:ec:55:84:86:32:5b:e0:eb:6f:28:
         7e:f4:88:0b:70:67:c3:1f:2a:ce:f5:22:d8:ec:5e:7f:20:97:
         e2:35:3f:e5:8e:83:f8:c2:e2:a9:43:5e:ac:82:3a:ad:56:6a:
         af:cb:ef:0c:58:8e:80:81:26:38:aa:82:5d:0b:1d:7e:bc:cd:
         0f:45:11:6b:4d:71:66:4d:8b:9e:20:a2:22:02:f0:f9:84:e6:
         c3:9c:9d:ab:3a:0c:9a:eb:18:7c:d6:e6:6a:ee:5d:29:cb:19:
         fb:9d:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:40 2025 by rpki-client