Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
File:                     vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft (raw, json)
Hash identifier:          MU/0QdjKda99LjLErk6qpCSyjKV77XFzcBesQ/Wv+9Y=
Subject key identifier:   EA:A1:C4:F5:0A:87:49:AC:68:40:58:ED:DD:03:49:97:12:86:C9:14
Authority key identifier: BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4
Certificate issuer:       /CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
Certificate serial:       019A70A4CF983D3B615CBE2265BE125CF718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
Manifest number:          A8
Signing time:             Tue 11 Nov 2025 02:00:40 +0000
Manifest this update:     Tue 11 Nov 2025 02:00:40 +0000
Manifest next update:     Wed 12 Nov 2025 02:00:40 +0000
Files and hashes:         1: vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl (hash: hQ6oPuz6G0yveXZkA/9TQfGA4O4zFkQj08yTu/jw8RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:a4:cf:98:3d:3b:61:5c:be:22:65:be:12:5c:f7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcecb5c9212365d2cb1bf71d59ea3e123ebce6d4
        Validity
            Not Before: Nov 11 02:00:40 2025 GMT
            Not After : Nov 12 02:00:40 2025 GMT
        Subject: CN=eaa1c4f50a8749ac684058eddd0349971286c914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:68:fb:a3:db:e2:7e:2a:2a:db:00:aa:75:97:
                    bc:6d:fe:28:7b:7e:db:89:41:c6:ad:05:6e:99:04:
                    67:df:cc:a7:e7:e2:05:96:17:44:4e:12:2a:4c:51:
                    83:41:cb:75:ce:96:51:e9:07:62:bb:ec:33:34:87:
                    a6:14:b6:79:95:8b:a6:0f:73:b9:bd:e2:dc:0a:d6:
                    6c:3e:bc:7d:7c:d7:b7:e6:c5:db:ec:4d:d4:4a:c6:
                    e9:29:41:30:29:f0:ca:72:e7:f4:56:5b:a1:cf:6a:
                    a1:07:e2:ce:e8:db:34:29:b0:bf:f4:52:9e:a3:ad:
                    f0:91:3c:05:14:bd:88:3f:8e:82:ba:95:fd:4c:6b:
                    56:80:8b:db:1c:43:72:01:49:33:a6:80:9d:6c:42:
                    a7:03:18:56:c1:79:c8:53:1d:6c:31:54:b5:a6:13:
                    b1:1f:2f:5f:f5:26:7d:cf:00:a2:a8:f8:77:ad:e1:
                    b3:95:45:a7:b6:1a:92:0c:94:ec:c3:66:a8:0a:8f:
                    85:0a:00:d2:15:29:dc:d0:fa:4b:04:4f:bd:9f:ed:
                    ee:5d:91:be:5c:f4:40:a0:3f:dc:4b:eb:36:c5:5b:
                    02:d8:b1:2b:94:56:e2:14:22:cf:39:be:e8:1b:ce:
                    32:9d:ca:41:ee:98:10:16:90:57:6f:48:dc:65:66:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A1:C4:F5:0A:87:49:AC:68:40:58:ED:DD:03:49:97:12:86:C9:14
            X509v3 Authority Key Identifier:
                keyid:BC:EC:B5:C9:21:23:65:D2:CB:1B:F7:1D:59:EA:3E:12:3E:BC:E6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOy1ySEjZdLLG_cdWeo-Ej685tQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/15056e-cb0c-496e-862d-ca2b4341a95a/1/vOy1ySEjZdLLG_cdWeo-Ej685tQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3f:58:5b:24:d5:2c:d9:c9:b8:b8:14:1b:1c:47:9f:c1:1c:
         ee:f0:e4:dd:0d:f4:b9:c5:2e:b1:8b:60:eb:65:c6:8a:56:43:
         52:bd:92:9c:d1:1e:4e:76:c5:ca:bc:75:b5:f2:3e:e1:e8:76:
         df:1c:91:ed:bc:c2:a6:40:b5:b6:b4:e6:81:b4:85:93:a8:92:
         ba:43:05:ca:1f:d7:b2:00:77:1e:ba:e7:ab:5c:56:68:d8:8f:
         f0:bc:88:d1:d7:65:b1:46:ab:1e:fd:ab:a5:9a:4b:97:ca:31:
         a5:79:bb:05:fd:07:64:e6:44:f7:13:e7:af:17:e8:81:b9:9f:
         e3:d0:e4:9f:c2:9c:9d:8a:e0:be:e8:39:87:4c:04:0d:64:13:
         8d:ae:02:27:85:32:06:40:b2:a1:ab:85:38:87:4a:5e:49:b3:
         3d:bf:36:df:e3:21:0d:94:50:54:4c:26:52:41:08:c4:53:63:
         55:e2:7a:ee:d0:9b:56:10:2e:7f:13:24:ba:cf:4f:f5:3f:b6:
         19:04:45:5d:53:22:8c:35:42:01:c0:86:59:fa:0c:41:45:88:
         65:c6:8a:76:2a:7b:0a:df:25:a4:11:f7:cc:f2:08:b0:64:a2:
         34:c2:ca:c2:a7:b3:c3:6c:6d:20:d3:85:6c:f6:26:0b:ae:3f:
         c7:18:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:15 2025 by rpki-client