Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File:                     VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier:          0Ochpb4gcSP9E7Z+8FxLzcvTSbOm1b9T9h0W90iMixM=
Subject key identifier:   F3:BA:7B:69:CA:36:CD:26:07:8A:BF:4E:F8:90:44:66:C3:80:1F:24
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer:       /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial:       0198D4E0F686146494138D2351F6D838C8D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number:          0BDE
Signing time:             Sat 23 Aug 2025 03:02:49 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:49 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:49 +0000
Files and hashes:         1: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: 8A96dkHZTxOCXOej97THcaP3LNsC4OKoi/TTA8Luxu4=)
                          2: zpnOf9kFG2Xz2U_yV2ggZbtDJtc.roa (hash: iw1XdbLWPraJP46xAmdMKYSNoE+Pua69gMhun7cgX1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:f6:86:14:64:94:13:8d:23:51:f6:d8:38:c8:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
        Validity
            Not Before: Aug 23 03:02:49 2025 GMT
            Not After : Aug 24 03:02:49 2025 GMT
        Subject: CN=f3ba7b69ca36cd26078abf4ef8904466c3801f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:eb:2b:c0:81:07:95:87:d5:3d:f7:b9:89:f8:
                    8f:6c:49:eb:09:42:c0:37:cf:2f:94:c5:bf:dd:b3:
                    50:ee:35:cc:18:ec:0e:68:5d:e0:64:39:f0:c0:cc:
                    be:1a:ab:d4:38:81:7c:b6:19:d4:f2:92:88:66:71:
                    c4:7f:57:9d:28:78:8a:77:74:21:91:89:c7:9a:be:
                    bf:ef:ef:30:d9:4e:0d:83:fb:85:95:94:e5:f7:52:
                    52:0b:7d:12:89:a8:7b:33:f1:df:2f:7c:aa:c2:7c:
                    27:1d:57:59:d2:57:e4:2a:c3:2c:f7:d5:a1:4e:79:
                    3e:48:7d:a0:05:09:9e:4d:87:f9:4f:3c:28:9f:72:
                    cc:65:ce:4e:83:65:7e:0e:2e:78:7f:b0:0d:5b:e1:
                    e8:83:d7:d1:ac:8f:3e:d3:9e:63:de:4c:c2:02:22:
                    f0:0a:1f:82:9a:86:36:d3:ef:ad:ed:1e:20:ab:54:
                    05:e5:42:fd:f0:78:b4:4f:86:29:7b:95:4e:67:6b:
                    32:87:7d:9b:67:85:3d:d2:ee:89:95:ce:84:b5:e9:
                    ac:92:34:84:52:75:9a:55:7c:cd:80:74:c8:a9:fe:
                    fa:66:1d:87:85:af:90:27:fc:8b:91:12:8b:57:96:
                    62:a2:f0:7d:f0:c6:21:87:ee:a7:2b:9f:be:3b:42:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:BA:7B:69:CA:36:CD:26:07:8A:BF:4E:F8:90:44:66:C3:80:1F:24
            X509v3 Authority Key Identifier:
                keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:30:0e:c3:13:86:ad:26:db:c8:1f:08:29:31:b9:40:a7:
         49:b9:9f:1c:c3:f9:42:e8:da:23:b9:1a:b1:55:ac:b3:19:06:
         11:6b:6a:75:16:57:9a:26:80:22:0c:03:d0:78:2b:34:ce:f9:
         f8:19:3d:09:5c:29:51:9d:43:38:37:7d:e7:75:d4:fb:7d:21:
         05:27:fd:e9:47:ec:49:37:de:6d:13:ec:54:ea:58:a4:c0:e7:
         63:6b:fa:3e:e2:e3:e3:f2:a1:4e:7d:5f:9c:91:40:37:05:62:
         69:b0:e2:75:a6:24:d5:91:f4:72:b7:55:fe:d8:d0:70:3a:01:
         ba:8b:a2:7b:a4:2d:3e:e6:c3:0c:57:3f:97:2d:f7:8f:0c:1e:
         21:e9:27:09:f3:05:37:e1:a0:78:cb:cb:8c:64:b4:26:4e:9e:
         55:62:2e:92:05:99:bb:2d:25:45:43:27:a8:aa:99:90:1b:35:
         57:60:98:11:eb:a3:8b:f2:e6:d1:eb:d7:c0:d8:ac:e0:e2:dd:
         f1:d9:ad:2d:b9:c7:b3:eb:a6:e5:f3:fe:f1:93:c1:f6:ce:ca:
         b0:35:a9:3e:be:9f:be:ed:a1:7a:54:d4:d8:4f:7b:b5:26:54:
         88:61:4b:2e:b0:c3:29:83:95:c2:ed:f5:de:eb:8c:5a:be:a4:
         ab:a3:c1:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4PaGFGSUE40jUfbYOMjSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU1MDU1MGQ1NjQxODBiMWRmN2RlYjViNThkM2E2YjEx
MmU3ZTMwHhcNMjUwODIzMDMwMjQ5WhcNMjUwODI0MDMwMjQ5WjAzMTEwLwYDVQQD
EyhmM2JhN2I2OWNhMzZjZDI2MDc4YWJmNGVmODkwNDQ2NmMzODAxZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOsrwIEHlYfVPfe5ifiPbEnrCULA
N88vlMW/3bNQ7jXMGOwOaF3gZDnwwMy+GqvUOIF8thnU8pKIZnHEf1edKHiKd3Qh
kYnHmr6/7+8w2U4Ng/uFlZTl91JSC30Siah7M/HfL3yqwnwnHVdZ0lfkKsMs99Wh
Tnk+SH2gBQmeTYf5Tzwon3LMZc5Og2V+Di54f7ANW+Hog9fRrI8+055j3kzCAiLw
Ch+CmoY20++t7R4gq1QF5UL98Hi0T4Ype5VOZ2syh32bZ4U90u6Jlc6EtemskjSE
UnWaVXzNgHTIqf76Zh2Hha+QJ/yLkRKLV5ZiovB98MYhh+6nK5++O0LrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPO6e2nKNs0mB4q/TviQRGbDgB8kMB8GA1UdIwQY
MBaAFFa1UFUNVkGAsd9961tY06axEufjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2Qt
ZjBlYjEzMTBlN2E3LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9iZWFkN2YtNDgwZC00ODQxLWI3N2QtZjBlYjEzMTBlN2E3
LzEvVnJWUVZRMVdRWUN4MzMzclcxalRwckVTNS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaS4wDsMT
hq0m28gfCCkxuUCnSbmfHMP5QujaI7kasVWssxkGEWtqdRZXmiaAIgwD0HgrNM75
+Bk9CVwpUZ1DODd953XU+30hBSf96UfsSTfebRPsVOpYpMDnY2v6PuLj4/KhTn1f
nJFANwViabDidaYk1ZH0crdV/tjQcDoBuouie6QtPubDDFc/ly33jwweIeknCfMF
N+GgeMvLjGS0Jk6eVWIukgWZuy0lRUMnqKqZkBs1V2CYEeuji/Lm0evXwNis4OLd
8dmtLbnHs+um5fP+8ZPB9s7KsDWpPr6fvu2helTU2E97tSZUiGFLLrDDKYOVwu31
3uuMWr6kq6PBaA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:13 2025 by rpki-client