Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          +wpURNlgb/lhsMxIuXrJmkr27AgKojjI1mnp0/Hrr/k=
Subject key identifier:   19:DE:4F:75:EF:15:CD:F1:9D:F9:3C:D3:D2:12:67:38:4D:8B:A6:E6
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       0199FE101DF4F090773D9E2229757D48A984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0CF0
Signing time:             Sun 19 Oct 2025 20:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:33 +0000
Files and hashes:         1: 15i89b2ooCC5Wqcsjg2SBUg3A40.roa (hash: lZ5oTep+frYUK0lIlk9v0/P+KqGOWHdfH+9b58myH+w=)
                          2: EpDBPVNlNeVkVgjR_m5x1NyX39k.roa (hash: xU4je7vw+hy54ZIE4xMAX4T+f8GKgqonphRIwXr+3Ro=)
                          3: I7bRp2vZ3RbrhhKUKOmFr8bTJzo.roa (hash: AZx1yPV7v0204nnrhDxa3tWJoguxJZGcuqHPYDdtiSU=)
                          4: IncQidH1EmOM3JDy5YVCBk0c4NE.roa (hash: nhq9/WaK4JTE9KAnd8mPqXQNZIF7TP9W57FIRXqjj1I=)
                          5: YQXawzEq297nYPKGFHjn15vLQy4.roa (hash: Udmu0JeOulXkRY2BS5ADE7Szvrk9JXARAC12HzwSPsY=)
                          6: kMQGr9JvSdf0YWyn95oAWrgW1pM.roa (hash: MFKvDOkMYqx88W0zwkPF8EbtQvbV0tupci16xZ+ClUg=)
                          7: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: 9IuRIK4hGJUlOLMq39YO/UKBfogSJC6mG5KEzT5m3CM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:1d:f4:f0:90:77:3d:9e:22:29:75:7d:48:a9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Oct 19 20:01:33 2025 GMT
            Not After : Oct 20 20:01:33 2025 GMT
        Subject: CN=19de4f75ef15cdf19df93cd3d21267384d8ba6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:4e:23:4a:61:fa:ea:09:58:bd:4c:80:cf:
                    6c:19:31:48:2a:5c:89:80:78:21:32:a6:b5:19:a0:
                    db:d7:24:9c:63:d1:b4:71:a3:a6:47:a0:ad:88:47:
                    10:6c:cd:b1:16:dd:57:27:e9:45:d0:2f:77:35:9b:
                    26:c4:14:eb:97:6b:c4:d1:aa:55:6f:bc:f1:7c:c0:
                    bc:e5:46:05:63:a7:6f:6e:0b:0c:f5:69:ec:2d:85:
                    10:6b:39:ee:fe:91:5b:45:40:6a:c7:3a:e9:a6:70:
                    76:53:c9:2e:e1:01:a1:17:7c:0b:5d:0f:f4:d0:84:
                    ca:ec:f3:ce:ab:60:45:1c:09:d4:9f:42:75:e2:cc:
                    f6:ad:e4:1c:7e:98:8b:d2:d0:97:02:8a:85:82:ec:
                    45:99:47:92:2c:0d:25:b9:87:30:f5:ba:9a:15:54:
                    0d:0d:c9:2f:16:97:7c:12:e1:bc:3c:c6:f7:55:45:
                    3b:45:eb:ae:07:89:02:89:36:2e:3c:45:4a:c1:e0:
                    d2:f5:a9:d8:23:97:41:1b:ed:50:47:d9:78:31:9c:
                    d3:0a:4f:e7:85:2b:11:f1:1d:79:19:c4:65:5a:c2:
                    5f:87:43:41:a1:2b:b0:1f:04:fb:bf:2d:ed:82:d9:
                    ce:f6:6a:99:6a:0e:b6:b6:a4:79:25:20:e3:38:31:
                    be:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:4F:75:EF:15:CD:F1:9D:F9:3C:D3:D2:12:67:38:4D:8B:A6:E6
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bd:27:82:63:f7:d9:90:46:c3:4e:19:31:c5:f8:5b:87:bc:
         02:03:e6:71:88:21:6d:aa:91:28:ee:b5:58:68:af:95:0b:74:
         11:8e:fa:4f:b9:3c:df:45:b7:ec:b7:f3:b2:48:d4:e0:01:bb:
         de:fa:42:39:6b:e1:aa:b3:fd:53:f1:87:f7:ea:5d:c8:a6:9c:
         9d:57:10:8e:08:d1:40:4e:da:38:ef:40:cb:7a:52:8f:33:9b:
         c7:12:26:86:04:34:80:ad:dd:38:8b:b8:81:7c:95:16:8f:43:
         3e:14:41:4e:2f:8c:b7:9e:ae:8d:eb:a2:cd:07:26:40:60:e2:
         2f:4a:b3:3c:fe:19:a7:3e:f7:b0:3f:92:4d:18:15:e6:8b:4d:
         54:c2:e5:24:c9:2e:c8:10:f3:b7:92:e0:dd:e8:67:50:25:c0:
         ee:b2:5c:1f:af:93:3c:bf:51:29:78:1a:24:5a:e3:28:36:27:
         4d:a1:fa:a5:87:60:53:20:6b:52:ef:df:3a:54:9b:77:ed:57:
         c6:4d:fd:d4:ab:74:d7:8c:00:81:55:f0:02:09:3a:27:cc:84:
         0f:09:82:ef:5a:74:ef:0b:6c:70:1c:9e:0e:fc:c6:6f:75:e1:
         b8:22:b6:8a:65:16:88:9c:4d:14:70:21:13:2d:6f:6e:c5:97:
         2a:b5:a1:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EB308JB3PZ4iKXV9SKmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjUxMDE5MjAwMTMzWhcNMjUxMDIwMjAwMTMzWjAzMTEwLwYDVQQD
EygxOWRlNGY3NWVmMTVjZGYxOWRmOTNjZDNkMjEyNjczODRkOGJhNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+tOI0ph+uoJWL1MgM9sGTFIKlyJ
gHghMqa1GaDb1yScY9G0caOmR6CtiEcQbM2xFt1XJ+lF0C93NZsmxBTrl2vE0apV
b7zxfMC85UYFY6dvbgsM9WnsLYUQaznu/pFbRUBqxzrppnB2U8ku4QGhF3wLXQ/0
0ITK7PPOq2BFHAnUn0J14sz2reQcfpiL0tCXAoqFguxFmUeSLA0luYcw9bqaFVQN
DckvFpd8EuG8PMb3VUU7ReuuB4kCiTYuPEVKweDS9anYI5dBG+1QR9l4MZzTCk/n
hSsR8R15GcRlWsJfh0NBoSuwHwT7vy3tgtnO9mqZag62tqR5JSDjODG+DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBneT3XvFc3xnfk809ISZzhNi6bmMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVL0ngmP3
2ZBGw04ZMcX4W4e8AgPmcYghbaqRKO61WGivlQt0EY76T7k830W37LfzskjU4AG7
3vpCOWvhqrP9U/GH9+pdyKacnVcQjgjRQE7aOO9Ay3pSjzObxxImhgQ0gK3dOIu4
gXyVFo9DPhRBTi+Mt56ujeuizQcmQGDiL0qzPP4Zpz73sD+STRgV5otNVMLlJMku
yBDzt5Lg3ehnUCXA7rJcH6+TPL9RKXgaJFrjKDYnTaH6pYdgUyBrUu/fOlSbd+1X
xk391Kt014wAgVXwAgk6J8yEDwmC71p07wtscByeDvzGb3XhuCK2imUWiJxNFHAh
Ey1vbsWXKrWhpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:08 2025 by rpki-client