Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          Nbpb+Kqr2NEWsbm2xLy0B6pGJzvoK/SWnunHm29v9So=
Subject key identifier:   99:49:7B:C4:90:8F:62:1A:15:BD:D9:94:9C:56:42:27:0F:5B:4A:83
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       019923A0E4BAE9BB05B67A210C702E3DAB9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          05F1
Signing time:             Sun 07 Sep 2025 10:02:50 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:50 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:50 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: BBPdfCaNwFQ/0QH9cLG4HKdXqW4KIojnAqG33fO8Shw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:e4:ba:e9:bb:05:b6:7a:21:0c:70:2e:3d:ab:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: Sep  7 10:02:50 2025 GMT
            Not After : Sep  8 10:02:50 2025 GMT
        Subject: CN=99497bc4908f621a15bdd9949c5642270f5b4a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:03:58:39:9e:87:a4:e5:9f:9d:0c:20:c8:61:
                    84:b1:d8:77:37:d1:5f:3b:92:52:d7:12:cf:82:61:
                    66:10:e4:62:a0:b3:5f:83:ab:8a:e0:97:64:81:cd:
                    6b:ec:d3:e3:89:68:81:a8:d6:b0:59:24:a8:0f:12:
                    7d:e7:51:29:21:47:01:fc:ad:bb:de:a6:36:f8:f0:
                    0a:c4:2b:7a:89:45:84:6d:38:db:52:dd:90:b1:5f:
                    e2:18:a9:10:61:f5:62:58:11:1c:9f:56:3c:57:66:
                    b3:1f:74:c2:c1:84:60:15:cb:9f:15:f6:de:06:f5:
                    17:eb:dc:72:ec:b9:29:c2:4a:3a:22:06:29:10:e9:
                    be:c0:c8:cc:59:44:e9:bc:21:c1:a2:b8:90:70:4a:
                    78:13:94:09:a5:dc:bb:1a:d5:b1:d2:ef:8b:38:81:
                    57:dc:c3:b1:e6:5b:b1:1c:1a:33:b5:94:a8:bf:9e:
                    05:28:f2:1d:f4:40:f5:42:41:55:4a:6d:d4:bc:90:
                    85:92:94:80:ff:a5:0b:9f:61:8e:10:b9:86:d8:f4:
                    af:47:8c:e8:97:52:0e:4c:70:f3:2b:1c:09:e1:49:
                    6c:6a:6a:58:f0:69:eb:fc:c9:8f:c6:81:ed:32:47:
                    f7:c4:6e:0c:86:06:e4:9c:4e:92:7a:50:8c:2b:a0:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:49:7B:C4:90:8F:62:1A:15:BD:D9:94:9C:56:42:27:0F:5B:4A:83
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d4:ab:3b:e2:e1:3b:3a:18:27:3a:a2:50:7e:c8:5f:49:f7:
         51:c4:56:0f:92:32:25:6c:b3:80:5e:83:f5:77:1d:9e:53:ec:
         81:80:98:77:ad:ca:cf:2b:e4:56:c8:4c:77:cc:49:47:9c:a6:
         97:51:29:4f:8d:02:d6:60:49:98:e2:41:a1:17:ce:cf:d5:57:
         3c:2b:a9:a5:64:3a:f3:79:0f:24:2b:f6:31:70:4b:b9:5a:76:
         96:79:67:37:eb:9c:3f:26:ad:ae:98:fd:59:63:b3:8f:02:a9:
         b2:81:d0:b0:9b:c1:74:44:71:b0:e1:7d:66:5f:2c:59:2a:e5:
         ec:a2:e2:02:41:7b:20:34:91:22:6d:0a:a8:3b:5b:21:cf:62:
         5e:9a:40:2b:2f:ce:14:a3:df:b1:83:0b:b8:1b:45:07:b4:a3:
         93:d0:68:60:61:4d:09:01:bc:d1:0b:56:ca:d2:3a:c8:65:25:
         dd:80:99:b0:8e:04:97:f1:cf:58:2b:e1:b8:7f:30:d2:44:a0:
         64:85:df:6b:95:cc:77:39:6d:5d:1d:66:ba:21:0d:b3:5d:b9:
         82:24:e0:0e:73:6d:02:c2:e6:06:bb:0e:3e:ab:7d:ae:6f:37:
         01:b3:f0:ce:0b:cb:81:72:a3:96:73:a7:b2:2e:69:5d:0d:f5:
         5a:0c:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client