Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
File:                     VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json)
Hash identifier:          7Xrfn0c0E1IscL4vMH4DNgEiZjTfwZnzsQEkR6xje2Q=
Subject key identifier:   7B:18:FE:99:56:D9:D3:4D:E2:20:45:1E:B8:42:A9:CA:AC:46:25:2F
Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6
Certificate issuer:       /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
Certificate serial:       0198D65F5973485396B9A4C08623E53AFF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
Manifest number:          0E11
Signing time:             Sat 23 Aug 2025 10:00:29 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:29 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:29 +0000
Files and hashes:         1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: DUMKbYLM54s0W2FIiv1zD8L3eBkwQb3Jve37nazOcY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:59:73:48:53:96:b9:a4:c0:86:23:e5:3a:ff:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6
        Validity
            Not Before: Aug 23 10:00:29 2025 GMT
            Not After : Aug 24 10:00:29 2025 GMT
        Subject: CN=7b18fe9956d9d34de220451eb842a9caac46252f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:93:fb:dd:93:49:90:9c:e1:3b:fe:2c:51:
                    8e:e2:b5:df:b2:16:35:1e:e3:40:e1:ba:88:db:64:
                    06:43:68:ef:48:61:40:2f:5a:f2:ee:5a:a0:66:70:
                    54:8d:8b:84:b2:86:aa:52:3d:e1:ce:ac:23:69:0b:
                    71:a9:05:2d:a1:c4:66:4a:29:b3:2c:7e:a2:ab:9b:
                    df:46:8f:12:c0:26:8b:d9:24:4e:26:57:0e:6a:a7:
                    ce:a3:e7:c3:ee:c4:6f:a5:63:aa:4d:b5:29:23:e9:
                    19:b9:40:8c:fe:e7:ed:24:4e:3c:80:7d:f6:51:ba:
                    05:82:dc:cc:01:34:74:49:10:6f:0c:e1:0e:0b:8f:
                    42:e5:34:c0:70:b8:be:ff:e8:f6:bd:83:66:7a:a4:
                    9a:1a:56:db:2d:b6:aa:5d:2e:84:c4:c0:c1:c1:e4:
                    b9:51:da:ad:89:05:53:e8:7f:5e:57:c6:2f:78:53:
                    7f:94:21:76:5c:70:ec:95:49:4b:53:bd:8f:79:95:
                    17:e1:c4:c3:95:61:1e:3a:c7:c8:04:1a:38:9e:27:
                    b5:cc:da:d8:8f:7b:15:e8:53:2f:62:6e:c2:4b:51:
                    32:75:34:90:8a:a0:dd:41:7d:ac:b1:46:cc:a0:51:
                    d4:c6:77:55:0c:32:17:a0:67:4f:bb:f7:8e:32:5c:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:FE:99:56:D9:D3:4D:E2:20:45:1E:B8:42:A9:CA:AC:46:25:2F
            X509v3 Authority Key Identifier:
                keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a1:b2:43:c8:fa:83:8c:6e:92:54:8a:2f:6a:fd:13:a6:d7:
         32:54:4f:b4:09:4e:da:84:22:62:52:cd:3e:67:02:ae:9c:da:
         ca:9c:33:12:23:98:bd:22:83:8f:5e:72:25:5f:f7:22:9c:4b:
         f0:60:0c:37:25:87:c8:34:8d:92:dd:2c:5f:07:a6:79:6c:06:
         f2:a0:1b:6d:22:cc:da:89:c5:fe:ba:85:d4:7b:b2:5a:e3:eb:
         04:79:4e:e6:1e:ff:bf:0c:58:2b:f8:e8:05:0c:fd:02:71:c1:
         1f:89:26:cb:dd:76:0f:97:85:a1:78:69:03:8a:5e:17:ec:a1:
         e8:99:ee:3b:e1:f5:5a:af:11:62:7c:87:29:fe:4a:f1:bc:78:
         ad:1e:18:0b:d7:95:c0:b9:0b:9d:c1:73:61:08:38:09:fa:a7:
         a2:d9:f8:17:ba:05:14:ea:12:b3:d5:fb:4f:f7:04:5e:e5:c3:
         e9:49:c2:10:a4:da:bb:10:6a:95:c3:bb:de:ed:38:90:ba:70:
         10:34:a4:07:ba:65:06:05:86:0e:29:a9:cb:bf:fa:ac:b4:81:
         45:26:76:df:4f:97:ce:39:fa:68:7d:b8:ab:02:0f:08:8b:ad:
         25:75:d4:f7:24:28:e3:f4:50:61:da:5d:de:27:22:fc:c7:71:
         a2:5f:c3:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX1lzSFOWuaTAhiPlOv8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTZmMmU5MGRiMmJkMzVkNTRjNmQyM2VlZDliMGY5OWY5
NjYzYTYwHhcNMjUwODIzMTAwMDI5WhcNMjUwODI0MTAwMDI5WjAzMTEwLwYDVQQD
Eyg3YjE4ZmU5OTU2ZDlkMzRkZTIyMDQ1MWViODQyYTljYWFjNDYyNTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBWT+92TSZCc4Tv+LFGO4rXfshY1
HuNA4bqI22QGQ2jvSGFAL1ry7lqgZnBUjYuEsoaqUj3hzqwjaQtxqQUtocRmSimz
LH6iq5vfRo8SwCaL2SROJlcOaqfOo+fD7sRvpWOqTbUpI+kZuUCM/uftJE48gH32
UboFgtzMATR0SRBvDOEOC49C5TTAcLi+/+j2vYNmeqSaGlbbLbaqXS6ExMDBweS5
UdqtiQVT6H9eV8YveFN/lCF2XHDslUlLU72PeZUX4cTDlWEeOsfIBBo4nie1zNrY
j3sV6FMvYm7CS1EydTSQiqDdQX2ssUbMoFHUxndVDDIXoGdPu/eOMlwkaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsY/plW2dNN4iBFHrhCqcqsRiUvMB8GA1UdIwQY
MBaAFFSW8ukNsr011UxtI+7ZsPmflmOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYt
M2JiZmUyYmU2MmFiLzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYtM2JiZmUyYmU2MmFi
LzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqGyQ8j6
g4xuklSKL2r9E6bXMlRPtAlO2oQiYlLNPmcCrpzaypwzEiOYvSKDj15yJV/3IpxL
8GAMNyWHyDSNkt0sXwemeWwG8qAbbSLM2onF/rqF1HuyWuPrBHlO5h7/vwxYK/jo
BQz9AnHBH4kmy912D5eFoXhpA4peF+yh6JnuO+H1Wq8RYnyHKf5K8bx4rR4YC9eV
wLkLncFzYQg4Cfqnotn4F7oFFOoSs9X7T/cEXuXD6UnCEKTauxBqlcO73u04kLpw
EDSkB7plBgWGDimpy7/6rLSBRSZ230+Xzjn6aH24qwIPCIutJXXU9yQo4/RQYdpd
3ici/Mdxol/DfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:37 2025 by rpki-client