Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
File:                     vvOp01I_TxVliboKokn9NSXIX2s.mft (raw, json)
Hash identifier:          tOKEsjRHfKMFlXB+ugc8Hd2CiXy37h/YW7B/z8pXRTw=
Subject key identifier:   CB:DE:5A:02:FB:2B:B2:1B:87:2B:D2:F2:68:B1:1D:D5:53:38:BB:D3
Authority key identifier: BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B
Certificate issuer:       /CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
Certificate serial:       019922FA0D2974594E44243347D249C3FE0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 07:00:36 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:36 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:36 +0000
Files and hashes:         1: vvOp01I_TxVliboKokn9NSXIX2s.crl (hash: Xwyw3H7cBLoYHVnFjg8F+oLsJCoeg3k8Asww5qi/NwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:0d:29:74:59:4e:44:24:33:47:d2:49:c3:fe:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef3a9d3523f4f156589ba0aa249fd3525c85f6b
        Validity
            Not Before: Sep  7 07:00:36 2025 GMT
            Not After : Sep  8 07:00:36 2025 GMT
        Subject: CN=cbde5a02fb2bb21b872bd2f268b11dd55338bbd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:36:6a:4a:28:9c:34:16:ac:fd:34:2c:53:
                    79:e2:bb:68:d7:f5:70:6b:2c:84:15:ab:fb:65:03:
                    c7:ab:6c:25:71:f9:20:62:73:44:ac:15:94:da:41:
                    02:55:19:99:d9:06:08:b2:fc:d9:2f:84:32:93:60:
                    20:3b:85:fc:ee:f4:e9:1b:f8:7e:4c:59:3f:b0:87:
                    00:fe:ad:6e:0e:f2:19:fc:c7:a3:e8:dd:4b:8f:bc:
                    42:7c:08:1e:7d:6a:5c:ba:54:0e:8d:06:96:7c:c4:
                    8c:1d:60:1f:cc:ed:30:72:a4:43:67:14:0d:ae:ba:
                    31:99:97:b7:3e:bb:2a:dd:33:45:22:ac:80:69:b8:
                    cc:a3:13:5b:0a:b3:c8:d8:ac:fc:f2:01:85:c2:42:
                    be:05:1f:26:3e:06:99:de:4e:73:43:46:55:ac:c1:
                    4b:28:56:f8:5e:49:eb:c6:06:e9:e3:a7:b2:57:38:
                    ce:86:95:0a:d2:b5:99:ee:37:1c:92:28:89:94:18:
                    f9:2b:53:42:97:c1:59:e7:12:37:91:27:7d:14:44:
                    43:ce:3a:84:be:26:56:26:98:6d:c4:da:51:11:c1:
                    22:15:1c:d1:42:6f:9a:8d:5d:b5:8b:85:9c:56:f7:
                    c8:65:ed:8e:9e:82:c3:42:f9:17:be:61:db:b6:b2:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DE:5A:02:FB:2B:B2:1B:87:2B:D2:F2:68:B1:1D:D5:53:38:BB:D3
            X509v3 Authority Key Identifier:
                keyid:BE:F3:A9:D3:52:3F:4F:15:65:89:BA:0A:A2:49:FD:35:25:C8:5F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvOp01I_TxVliboKokn9NSXIX2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0de8c0-f2c3-462b-a8d0-dfeade3d5641/1/vvOp01I_TxVliboKokn9NSXIX2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:97:eb:78:9a:9f:09:4f:0e:e2:0f:b9:72:5a:04:49:30:
         a6:91:75:e7:a9:68:e4:84:e8:64:f9:75:16:4e:cf:0f:a7:9f:
         f6:59:12:4b:04:32:45:d3:49:1b:25:20:63:d0:28:cc:cb:69:
         dd:5a:f1:61:f2:e1:3c:9d:fd:5b:bd:23:37:1f:44:07:b3:d4:
         2b:6a:4c:30:16:b6:74:b0:cf:ec:14:5c:d1:49:ce:72:f3:a4:
         f4:fc:b5:47:02:8f:dd:c7:1a:c3:06:72:c8:c0:71:f1:b5:39:
         75:b9:66:d3:8d:3a:9e:fc:46:a8:7e:58:16:6d:82:97:3b:57:
         8e:ac:bf:fe:99:75:5e:86:11:d3:34:7e:56:ac:5e:85:26:06:
         dc:5d:c7:75:fa:de:49:3c:a9:ab:a0:2f:68:97:fd:e6:c1:88:
         01:b1:b1:df:ed:92:e2:5f:b4:6b:b7:00:b3:1e:1e:ff:22:12:
         d1:01:7a:e7:43:df:0c:db:f5:bd:6a:5a:27:6e:f7:8f:3a:07:
         84:28:64:cb:eb:33:69:43:2b:7a:15:75:98:e5:01:1b:08:d4:
         b9:99:eb:c1:9e:68:1d:ce:1e:af:db:9d:d6:63:f6:eb:64:2c:
         a3:7b:b9:71:57:21:7e:a2:9d:7f:6b:1c:e2:e8:c3:56:fe:2e:
         91:0c:27:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:52 2025 by rpki-client