Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
File:                     Vp3-Sa8607mlhpS6081OY4TwEYY.mft (raw, json)
Hash identifier:          4VtFhHtGQhjDinhMfGGAvJ8UrYedG8i4hefHxsp5i40=
Subject key identifier:   01:65:B0:6A:F6:59:60:59:6A:84:24:34:0F:8D:4C:9D:95:51:13:71
Authority key identifier: 56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86
Certificate issuer:       /CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
Certificate serial:       019A71B7915BEBF29FE7F292C8FC83010120
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
Manifest number:          4E
Signing time:             Tue 11 Nov 2025 07:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:46 +0000
Files and hashes:         1: Vp3-Sa8607mlhpS6081OY4TwEYY.crl (hash: 4V9uev4DP0xBvq7LfhM8cGFofj0Qur63KM/LmXtjSoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:91:5b:eb:f2:9f:e7:f2:92:c8:fc:83:01:01:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569dfe49af3ad3b9a58694bad3cd4e6384f01186
        Validity
            Not Before: Nov 11 07:00:46 2025 GMT
            Not After : Nov 12 07:00:46 2025 GMT
        Subject: CN=0165b06af65960596a8424340f8d4c9d95511371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:34:d9:b8:5d:b2:63:b2:07:5f:2c:e9:0d:
                    60:28:d2:39:b9:67:86:24:84:62:47:63:21:40:c9:
                    66:50:e8:ff:f2:ef:cc:80:ea:c0:c8:85:59:5b:06:
                    1d:a7:a6:53:92:40:cd:ea:9d:a8:11:a0:da:1e:5d:
                    bd:80:e4:4e:73:09:9d:ee:5c:70:86:61:ad:d9:5a:
                    06:a2:3f:61:9b:2c:7e:e7:9a:00:c1:41:af:0a:96:
                    45:83:66:3b:a4:8c:3a:fe:93:8c:07:cd:4a:1b:7e:
                    34:ce:c6:fc:84:e7:9f:86:d9:68:9c:cc:cb:58:9a:
                    44:18:76:25:5f:29:cb:93:3d:5f:3b:d0:7e:a5:70:
                    9a:64:33:38:03:87:cf:be:4c:d2:b0:65:8b:1f:78:
                    ac:09:34:62:a6:28:3d:62:c8:14:2a:1a:25:7d:c0:
                    c0:00:20:5b:70:52:d2:36:38:9a:f7:ba:ca:cc:b2:
                    18:a5:07:71:6a:60:86:3a:85:f0:7e:db:f1:4a:2d:
                    63:d4:61:2b:57:78:fc:85:4c:74:07:d4:87:38:e6:
                    58:c6:8c:cc:52:72:5c:bd:11:ce:01:a6:da:d7:13:
                    ea:a1:61:3a:a6:6b:43:80:16:82:27:16:e5:19:8d:
                    aa:d4:34:4b:21:0e:31:2b:af:0d:46:c5:d1:37:8e:
                    71:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:65:B0:6A:F6:59:60:59:6A:84:24:34:0F:8D:4C:9D:95:51:13:71
            X509v3 Authority Key Identifier:
                keyid:56:9D:FE:49:AF:3A:D3:B9:A5:86:94:BA:D3:CD:4E:63:84:F0:11:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vp3-Sa8607mlhpS6081OY4TwEYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f6cb85-8e1e-455f-b4b8-dfcf7e636218/1/Vp3-Sa8607mlhpS6081OY4TwEYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:c6:55:54:2b:da:cb:f7:a8:64:93:57:79:ef:ff:5d:20:cd:
         9e:f4:d7:c1:03:62:4d:8c:b6:38:02:12:97:ec:73:d6:c3:3b:
         ea:d1:e8:df:8f:60:c5:8d:20:cd:0b:2d:ec:d4:e7:9b:58:81:
         e5:11:7e:aa:dc:ad:99:64:fc:d1:5d:49:ac:a6:28:c9:57:44:
         4f:b0:c8:87:ef:a2:4b:76:2a:ba:48:d4:df:d0:27:c6:bd:9d:
         14:19:19:88:b4:ef:4a:a4:8a:1d:28:1a:b9:47:46:1c:70:59:
         7e:8c:d9:cd:50:0b:91:3e:ac:74:5d:48:0e:55:8b:ed:25:df:
         93:76:65:c1:37:fc:f9:0b:d1:c1:f7:b3:8a:f7:0d:11:25:4a:
         3b:c7:0e:fb:6b:cc:27:7a:3f:f8:bb:e1:22:4e:f4:f1:62:9e:
         d7:e7:c5:fe:8c:70:3c:80:b7:37:fe:a5:67:a4:7a:b2:06:14:
         3e:e2:ba:f4:86:9d:cb:ac:98:09:b0:f1:f2:e0:8e:67:1c:89:
         56:cb:fa:18:cd:60:eb:76:6a:9f:36:2e:89:6e:fe:ed:13:c4:
         0f:6c:78:1a:dd:99:d2:03:d4:d7:fd:f2:ad:d3:d2:2d:f8:8e:
         bb:5c:3f:5e:d7:0c:95:34:ac:bb:93:aa:57:be:b9:5f:50:4d:
         27:c3:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:30 2025 by rpki-client