Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          evqjpZpJ4o7XwJVwVVPF7FCFU1tgD04U6hkKiX9vR3U=
Subject key identifier:   CC:6B:65:CD:5B:61:0C:3C:34:49:F9:92:EF:65:7D:FF:D8:35:48:6D
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       0198D697EDF5DBDDBCECAFD7527BC78E6EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          11E4
Signing time:             Sat 23 Aug 2025 11:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:17 +0000
Files and hashes:         1: SPOdZUKsCzIXgJOCF_UL7n1RilU.roa (hash: AvcsY0IcsdeApRna15WxWc9F7nJGA8l55JTs96Qf9tg=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: WUouZ4+YCLnkeAgUhH8kRLbiFY+yhEp6L7DU6RkSz/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:97:ed:f5:db:dd:bc:ec:af:d7:52:7b:c7:8e:6e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Aug 23 11:02:17 2025 GMT
            Not After : Aug 24 11:02:17 2025 GMT
        Subject: CN=cc6b65cd5b610c3c3449f992ef657dffd835486d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:71:e2:d6:69:81:00:8b:15:8f:2b:89:fc:40:
                    67:6f:88:5d:35:11:c6:bc:23:71:75:76:73:4a:c1:
                    d8:6c:53:f4:72:08:9d:0e:36:b1:f4:7b:d4:ef:19:
                    f5:c5:4d:df:d0:84:5a:b6:b5:67:35:ed:7b:e8:82:
                    eb:64:55:10:e1:00:fc:87:2a:83:8a:7c:05:ee:ae:
                    e9:05:73:5f:87:68:7c:68:96:3a:36:29:d4:43:ff:
                    2a:1d:78:f9:c9:7c:41:b6:f1:b0:c0:34:0c:b9:8c:
                    eb:d9:8a:e9:7f:5e:ea:49:44:bd:d3:1d:48:e0:6a:
                    5e:dd:65:69:87:00:db:c5:b6:ff:03:7b:ab:47:93:
                    86:e4:c0:d1:57:20:10:51:57:60:cd:f5:95:c6:72:
                    29:90:0a:62:5a:0d:29:1d:6d:da:0d:fd:5c:8b:f3:
                    98:2b:c3:20:3e:86:b7:15:34:b4:c0:08:97:2e:5c:
                    10:01:10:82:60:45:8f:9c:cc:bf:9c:fe:3d:0a:50:
                    cf:5a:c3:c1:fe:5a:05:59:a4:ef:a4:21:f0:07:57:
                    55:ab:3c:4b:f3:c8:a8:0f:14:db:04:04:62:bd:c6:
                    69:c0:67:45:62:c0:f5:e1:67:2d:ad:72:70:9c:fe:
                    06:3a:ad:13:d8:f0:d3:87:85:49:12:13:b4:7e:b8:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:65:CD:5B:61:0C:3C:34:49:F9:92:EF:65:7D:FF:D8:35:48:6D
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f3:72:5d:7f:d7:34:69:12:94:0a:3e:c3:ef:55:8c:29:52:
         1f:95:63:69:52:ef:b2:a6:1e:af:8a:fc:cd:70:db:8a:4f:a9:
         e1:af:2e:2d:31:d2:e0:f2:4c:e7:5a:8a:f7:76:55:a0:03:60:
         55:04:56:6d:44:0b:78:73:9f:45:ba:2c:24:16:6d:9a:5e:2e:
         b9:29:c2:10:bf:8a:70:e5:32:f9:9c:59:2a:42:a1:58:96:9a:
         32:31:59:a8:3b:95:ae:12:84:4d:e8:29:7a:25:d6:f1:ce:90:
         93:1f:96:97:66:10:24:49:f4:24:44:32:45:98:c4:60:f0:a1:
         9d:cc:83:a6:0b:4a:54:aa:36:62:20:e7:37:c4:de:20:f2:62:
         c1:21:16:e5:61:d8:96:1b:c6:9d:a3:1a:55:1e:2c:97:26:8d:
         61:ee:2e:b6:38:fd:76:41:65:59:4e:44:2b:4b:40:d4:e0:81:
         03:9d:0e:71:ab:9f:6d:94:40:c9:a6:b8:55:86:31:49:fb:7b:
         18:3d:4a:cc:c4:a0:ec:c0:d1:a1:c8:fc:e9:db:eb:e4:7c:ac:
         52:f5:8a:08:13:39:86:7a:72:4c:f7:48:34:24:69:93:ab:63:
         d5:a5:c5:91:37:18:ed:29:fc:f9:43:11:5e:55:e1:1f:8b:53:
         e1:45:dc:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWl+3129287K/XUnvHjm7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm
Y2IzYTYwHhcNMjUwODIzMTEwMjE3WhcNMjUwODI0MTEwMjE3WjAzMTEwLwYDVQQD
EyhjYzZiNjVjZDViNjEwYzNjMzQ0OWY5OTJlZjY1N2RmZmQ4MzU0ODZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nHi1mmBAIsVjyuJ/EBnb4hdNRHG
vCNxdXZzSsHYbFP0cgidDjax9HvU7xn1xU3f0IRatrVnNe176ILrZFUQ4QD8hyqD
inwF7q7pBXNfh2h8aJY6NinUQ/8qHXj5yXxBtvGwwDQMuYzr2Yrpf17qSUS90x1I
4Gpe3WVphwDbxbb/A3urR5OG5MDRVyAQUVdgzfWVxnIpkApiWg0pHW3aDf1ci/OY
K8MgPoa3FTS0wAiXLlwQARCCYEWPnMy/nP49ClDPWsPB/loFWaTvpCHwB1dVqzxL
88ioDxTbBARivcZpwGdFYsD14WctrXJwnP4GOq0T2PDTh4VJEhO0frgdTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxrZc1bYQw8NEn5ku9lff/YNUhtMB8GA1UdIwQY
MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt
MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi
LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvNyXX/X
NGkSlAo+w+9VjClSH5VjaVLvsqYer4r8zXDbik+p4a8uLTHS4PJM51qK93ZVoANg
VQRWbUQLeHOfRbosJBZtml4uuSnCEL+KcOUy+ZxZKkKhWJaaMjFZqDuVrhKETegp
eiXW8c6Qkx+Wl2YQJEn0JEQyRZjEYPChncyDpgtKVKo2YiDnN8TeIPJiwSEW5WHY
lhvGnaMaVR4slyaNYe4utjj9dkFlWU5EK0tA1OCBA50OcaufbZRAyaa4VYYxSft7
GD1KzMSg7MDRocj86dvr5HysUvWKCBM5hnpyTPdINCRpk6tj1aXFkTcY7Sn8+UMR
XlXhH4tT4UXclw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:53 2025 by rpki-client