Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
File:                     VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft (raw, json)
Hash identifier:          3aEjdXr8owvV4vB+/6zpC8ibi2NYxv2CjpvsPIdIj+4=
Subject key identifier:   40:26:DC:42:9B:93:66:AE:F1:7C:3E:28:A5:7C:14:91:47:99:FB:BC
Authority key identifier: 54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54
Certificate issuer:       /CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
Certificate serial:       0198D54EB2C4D062608D450D4554B81963EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
Manifest number:          144A
Signing time:             Sat 23 Aug 2025 05:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:41 +0000
Files and hashes:         1: VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl (hash: TEb6yQGCfsYWXpMSIURENL3q2TMNuU9eonH7F7m8oqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:b2:c4:d0:62:60:8d:45:0d:45:54:b8:19:63:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54078cbff4fd78f7d04dcf79c7b9240514d04b54
        Validity
            Not Before: Aug 23 05:02:41 2025 GMT
            Not After : Aug 24 05:02:41 2025 GMT
        Subject: CN=4026dc429b9366aef17c3e28a57c14914799fbbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:26:85:f9:57:08:f8:89:f3:bd:48:f3:aa:
                    30:2a:3e:68:4e:24:21:c7:b8:ce:8c:29:ac:90:ec:
                    e9:4a:40:c5:c0:a4:fc:06:2d:b8:a0:0e:37:f8:34:
                    50:b4:29:5a:88:9a:4b:27:b1:1e:62:67:63:89:c4:
                    80:d1:cb:b3:b7:33:ae:be:f9:fc:60:89:c8:0b:51:
                    e7:4d:e3:06:45:31:70:df:14:9b:7e:7d:87:a0:da:
                    fa:02:21:94:57:c3:bb:e3:e5:6d:13:f6:ca:bc:ce:
                    2c:a8:3c:4d:31:32:33:8e:ff:1a:4e:d7:a7:8c:44:
                    c9:ef:88:e1:1e:fa:f2:a4:de:79:4f:5c:8c:8e:2a:
                    20:40:80:bf:14:9f:f0:19:82:05:28:6b:b4:52:e9:
                    f2:e4:c0:b6:65:73:ca:dd:f7:83:d9:60:e3:da:c0:
                    7f:c7:07:f6:23:c2:87:6e:18:c6:8f:58:d7:b9:4d:
                    4e:27:2a:1d:a6:9a:60:cf:cc:a3:4a:d4:77:91:91:
                    df:e8:83:37:ac:00:87:5f:b8:76:1a:51:c7:23:cf:
                    29:be:5d:a6:5c:30:86:3c:00:44:fd:27:11:f2:5e:
                    82:cd:ec:c5:f4:78:27:fb:aa:66:39:cd:09:e0:4a:
                    e3:5d:3f:ff:b8:8f:e9:e8:e9:d6:f1:b3:ea:70:63:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:26:DC:42:9B:93:66:AE:F1:7C:3E:28:A5:7C:14:91:47:99:FB:BC
            X509v3 Authority Key Identifier:
                keyid:54:07:8C:BF:F4:FD:78:F7:D0:4D:CF:79:C7:B9:24:05:14:D0:4B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAeMv_T9ePfQTc95x7kkBRTQS1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/29ee4f-53e7-48e6-916f-fb6a2bfe9997/1/VAeMv_T9ePfQTc95x7kkBRTQS1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:06:78:59:6e:1c:37:5d:33:18:8b:d4:76:29:ac:da:ba:4d:
         1a:59:df:ab:9c:5c:89:50:e7:78:9c:1d:dd:8b:ec:5a:17:c4:
         31:85:f1:ac:b7:84:f7:13:ac:31:44:66:b0:a7:19:75:fb:65:
         15:7c:fb:eb:3d:e8:c3:ed:dd:16:aa:f8:86:e8:ab:d3:e0:74:
         e3:23:ee:8f:0c:20:d9:25:67:57:0a:bc:cf:86:e7:3c:28:08:
         35:9b:30:fe:19:5b:47:b6:ee:98:5a:82:32:0b:ac:0d:66:21:
         28:21:4c:7c:00:99:77:b5:5f:91:a7:40:fa:68:5a:c4:21:07:
         b6:d9:d2:47:ef:d1:05:10:4d:71:95:27:7f:bb:6d:e5:86:4c:
         b3:0f:3c:b5:6d:9f:6b:10:53:f8:9e:7c:9f:fe:f5:ae:21:c6:
         e2:fa:e3:cd:d4:bd:1d:a9:4e:7a:61:00:49:5f:9d:e9:86:5e:
         40:43:d4:83:42:55:f7:6c:2f:51:9b:34:0a:00:72:37:26:31:
         3c:bd:b1:b3:32:c3:af:b1:97:91:47:a9:05:d2:09:b8:26:37:
         2e:92:ea:09:89:84:d7:64:e8:af:92:33:45:fa:1b:40:b7:03:
         45:94:b5:11:ef:58:ea:54:ce:d2:ae:07:c3:af:fb:79:47:77:
         83:f7:e1:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTrLE0GJgjUUNRVS4GWPuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDc4Y2JmZjRmZDc4ZjdkMDRkY2Y3OWM3YjkyNDA1MTRk
MDRiNTQwHhcNMjUwODIzMDUwMjQxWhcNMjUwODI0MDUwMjQxWjAzMTEwLwYDVQQD
Eyg0MDI2ZGM0MjliOTM2NmFlZjE3YzNlMjhhNTdjMTQ5MTQ3OTlmYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9gmhflXCPiJ871I86owKj5oTiQh
x7jOjCmskOzpSkDFwKT8Bi24oA43+DRQtClaiJpLJ7EeYmdjicSA0cuztzOuvvn8
YInIC1HnTeMGRTFw3xSbfn2HoNr6AiGUV8O74+VtE/bKvM4sqDxNMTIzjv8aTten
jETJ74jhHvrypN55T1yMjiogQIC/FJ/wGYIFKGu0Uuny5MC2ZXPK3feD2WDj2sB/
xwf2I8KHbhjGj1jXuU1OJyodpppgz8yjStR3kZHf6IM3rACHX7h2GlHHI88pvl2m
XDCGPABE/ScR8l6CzezF9Hgn+6pmOc0J4ErjXT//uI/p6OnW8bPqcGMprQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAm3EKbk2au8Xw+KKV8FJFHmfu8MB8GA1UdIwQY
MBaAFFQHjL/0/Xj30E3Pece5JAUU0EtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYt
ZmI2YTJiZmU5OTk3LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yOWVlNGYtNTNlNy00OGU2LTkxNmYtZmI2YTJiZmU5OTk3
LzEvVkFlTXZfVDllUGZRVGM5NXg3a2tCUlRRUzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwZ4WW4c
N10zGIvUdims2rpNGlnfq5xciVDneJwd3YvsWhfEMYXxrLeE9xOsMURmsKcZdftl
FXz76z3ow+3dFqr4huir0+B04yPujwwg2SVnVwq8z4bnPCgINZsw/hlbR7bumFqC
MgusDWYhKCFMfACZd7VfkadA+mhaxCEHttnSR+/RBRBNcZUnf7tt5YZMsw88tW2f
axBT+J58n/71riHG4vrjzdS9HalOemEASV+d6YZeQEPUg0JV92wvUZs0CgByNyYx
PL2xszLDr7GXkUepBdIJuCY3LpLqCYmE12Tor5IzRfobQLcDRZS1Ee9Y6lTO0q4H
w6/7eUd3g/fhwA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:18 2025 by rpki-client