Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File:                     vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier:          GVoJYtcUnzEjNhAJCdgoIERALv+gck2Jchz9p63Iq7M=
Subject key identifier:   B1:70:C7:5F:F7:68:1E:64:3C:DB:A6:8C:0B:A1:88:E5:62:DB:39:4F
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer:       /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial:       01974967A86C7C42CD0CE25A7C644E1F96FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number:          065E
Signing time:             Sat 07 Jun 2025 08:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:19 +0000
Files and hashes:         1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 3KXQTWWS6VZfC4InCOhB0hFuXeOb10GOy9Cn8XaZElQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:a8:6c:7c:42:cd:0c:e2:5a:7c:64:4e:1f:96:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
        Validity
            Not Before: Jun  7 08:00:19 2025 GMT
            Not After : Jun  8 08:00:19 2025 GMT
        Subject: CN=b170c75ff7681e643cdba68c0ba188e562db394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:9a:fb:dc:3b:65:0d:1b:60:50:41:ac:3e:
                    80:24:0f:14:60:64:ff:a1:3f:af:6c:1c:ea:f3:2d:
                    1d:f0:9b:43:93:f8:58:a4:bc:00:8a:68:80:c3:9c:
                    8a:3d:26:a4:a8:47:72:1d:35:83:dc:56:ca:4b:95:
                    98:ce:62:e0:a6:77:0e:9b:10:f3:12:41:49:c3:08:
                    b0:12:52:35:70:6c:5e:8c:53:0c:ea:ee:5d:fe:1c:
                    f8:b6:71:14:22:bb:44:98:69:4e:96:73:c9:91:6a:
                    ed:ec:9e:5d:6e:82:a5:d4:ed:91:68:5d:a3:19:4f:
                    d5:c2:3f:ba:ed:6c:b2:7d:3c:00:04:e1:5d:7f:c3:
                    f4:ca:85:b8:b2:73:7f:79:d6:b3:51:d7:65:a7:24:
                    dc:38:2d:24:4f:a6:cd:47:c5:48:c5:7c:5b:6f:03:
                    66:f8:08:08:b7:79:13:56:2e:88:f5:09:25:1b:89:
                    8f:b9:e2:4f:7a:a9:d2:30:e2:f7:b2:f8:08:65:77:
                    ad:f5:62:74:0b:c9:39:b0:c6:1c:19:7e:d1:89:b1:
                    eb:76:54:08:dd:2a:bf:f6:ce:d0:8d:e9:7e:31:d1:
                    9b:79:cf:54:0d:b9:5d:b3:aa:41:ab:9c:0a:fd:7a:
                    ec:69:fb:09:d2:c7:a2:bf:7d:51:f9:c9:5a:e8:d0:
                    63:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:C7:5F:F7:68:1E:64:3C:DB:A6:8C:0B:A1:88:E5:62:DB:39:4F
            X509v3 Authority Key Identifier:
                keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:83:75:2e:6b:5f:b7:89:e8:bc:87:06:cd:56:a2:6b:90:0d:
         ff:fe:09:4a:0f:7d:3b:14:67:29:8f:bb:21:3f:b7:75:1d:80:
         0f:4f:78:63:57:ff:6c:d0:c0:be:f1:00:84:4b:78:a0:4b:f0:
         ea:63:e5:df:22:24:42:b6:8e:de:59:44:4b:07:8e:3b:d1:fa:
         ac:de:99:04:d6:ae:ff:52:46:2d:e8:be:8c:6f:53:91:c5:4d:
         20:7e:1a:da:7e:9d:94:0e:61:48:86:af:85:72:46:fa:b2:43:
         65:ca:b6:00:7a:19:f7:74:ce:54:fe:27:90:26:18:c8:4c:b9:
         26:07:8e:18:0b:61:3f:75:61:65:0c:d7:f3:2f:08:8e:4e:77:
         c2:35:1f:b4:25:ef:90:92:38:d7:51:5c:1e:52:4e:81:93:28:
         a5:a3:c0:e4:d4:16:0d:04:b2:66:04:9d:b3:2e:ca:bc:6b:a2:
         d0:aa:7d:b7:8a:d5:63:8b:cf:b2:ed:5e:26:e7:6c:6c:cb:7f:
         39:ca:22:09:b7:c5:d3:a5:2e:6d:de:e7:2b:12:ae:c9:67:37:
         5d:52:9c:62:cc:0e:98:5b:60:0b:32:a3:a8:5c:dd:39:76:30:
         51:1f:7e:48:c2:81:d8:bd:0b:f0:0a:19:69:30:7e:17:c0:f5:
         2e:ae:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:25 2025 by rpki-client