Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
File:                     vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft (raw, json)
Hash identifier:          3IMF8sSvlEcvxtRUuA30GuwQaPBxmpGTktBjlS80i5U=
Subject key identifier:   83:EF:4D:7A:27:06:F4:12:DF:78:03:40:62:8D:04:1E:FA:27:6F:39
Authority key identifier: BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7
Certificate issuer:       /CN=bee4540296476681c4048c6d650d0baaa6cb98e7
Certificate serial:       0199221EB1A2AAD342211EC8AD50015B2D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
Manifest number:          15B2
Signing time:             Sun 07 Sep 2025 03:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:00 +0000
Files and hashes:         1: vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl (hash: Wuh+mbVuGwpl7TXjjUrvJ3ChFDRyJlcaBSTNqv2PADs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:b1:a2:aa:d3:42:21:1e:c8:ad:50:01:5b:2d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bee4540296476681c4048c6d650d0baaa6cb98e7
        Validity
            Not Before: Sep  7 03:01:00 2025 GMT
            Not After : Sep  8 03:01:00 2025 GMT
        Subject: CN=83ef4d7a2706f412df780340628d041efa276f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:bc:b2:dd:9b:e3:97:0d:96:7a:74:12:dd:
                    ca:94:90:fa:92:96:16:17:5e:88:c6:25:48:81:d9:
                    39:00:5c:bd:b7:09:e4:d8:ce:7c:40:6b:33:20:21:
                    6d:58:b1:38:38:f4:79:6e:a5:3a:bd:31:f9:fe:c1:
                    27:3e:58:88:6b:0d:cd:7d:8a:40:06:32:30:a0:4a:
                    30:d8:99:4a:31:59:4c:0e:89:3a:55:63:ba:b9:40:
                    62:ca:9e:e4:8e:77:1c:a1:c2:a1:9a:2f:a6:e6:45:
                    49:09:2a:aa:f8:1a:f8:d7:b1:24:91:7d:01:ab:84:
                    a3:30:a9:6c:14:8b:f6:1b:90:0b:4f:55:4b:42:41:
                    84:e7:c3:f6:e3:9f:13:5d:f9:bd:62:e4:9d:9b:48:
                    ca:3a:7b:26:5b:92:aa:f3:34:91:1d:93:5a:9f:24:
                    43:21:0f:6a:00:01:b2:54:f7:8e:29:28:b5:7f:90:
                    17:e0:4e:cb:4f:a9:86:c4:cc:5a:38:15:a1:3c:14:
                    c7:cd:e1:bc:dc:94:6c:25:34:5f:58:d8:7c:e2:68:
                    73:6c:4d:e0:a3:5b:ef:6b:ad:eb:80:a2:59:2b:e6:
                    91:7d:e4:46:e1:0a:d5:79:66:ea:7f:a4:39:de:67:
                    8a:b9:48:01:d7:47:fb:d8:10:28:5e:ee:c4:5b:73:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EF:4D:7A:27:06:F4:12:DF:78:03:40:62:8D:04:1E:FA:27:6F:39
            X509v3 Authority Key Identifier:
                keyid:BE:E4:54:02:96:47:66:81:C4:04:8C:6D:65:0D:0B:AA:A6:CB:98:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuRUApZHZoHEBIxtZQ0LqqbLmOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2f689a-29cd-4704-94ce-d90558af2c39/1/vuRUApZHZoHEBIxtZQ0LqqbLmOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:4f:b6:2b:80:9e:31:f0:9c:ab:d4:d7:97:f5:66:64:38:
         96:ca:73:51:cf:69:cc:b0:e6:11:e0:af:9e:52:8e:1e:7a:32:
         a6:9f:bc:9c:7b:7a:87:65:1e:a2:97:a0:f4:bf:6b:0d:00:4f:
         c8:35:98:cc:95:77:85:2b:85:34:3f:dd:18:4f:80:93:87:19:
         e6:ba:2e:d1:e8:9c:5f:2f:47:ce:b6:0c:ad:ec:68:64:d2:46:
         21:46:09:55:e7:ad:4b:8e:5d:c8:18:09:c1:0b:7a:23:cb:43:
         25:f3:bd:10:1f:59:52:d1:b4:4b:1f:78:72:33:79:16:97:02:
         f0:2e:69:d9:73:19:f3:bb:e4:87:21:60:f2:bb:ba:76:44:77:
         9b:5c:8b:5e:03:ac:ae:0c:6a:f8:7b:3a:1e:8c:45:09:d4:88:
         6d:4f:4a:a5:a5:ec:92:70:33:ac:4b:33:ee:5a:1c:0c:ce:44:
         34:28:97:6d:80:d2:fa:b1:87:a2:a1:8b:1d:94:5e:1b:45:a9:
         9a:76:04:ad:f8:98:30:ec:55:6e:52:66:ba:fc:30:f7:dc:d2:
         7d:45:b6:96:83:aa:bf:ed:56:b2:36:30:81:65:88:cd:f1:e7:
         5d:13:6d:fd:4b:83:49:9c:7b:7f:d4:7b:75:9b:af:89:95:77:
         53:95:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:00 2025 by rpki-client