Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
File:                     VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft (raw, json)
Hash identifier:          6p8g3oFyJGEw09lZ/2pFsdAYsfN/ziGskuZjdLWDiz4=
Subject key identifier:   16:BB:D4:C1:3E:33:C9:44:17:5B:A9:0D:9C:E6:E1:AB:83:9F:73:03
Authority key identifier: 55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC
Certificate issuer:       /CN=5503251db69693362a927e2b130467945c54f0fc
Certificate serial:       0197BF35C52E085F318CD2E16FA554A3244A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
Manifest number:          02FC
Signing time:             Mon 30 Jun 2025 05:01:01 +0000
Manifest this update:     Mon 30 Jun 2025 05:01:01 +0000
Manifest next update:     Tue 01 Jul 2025 05:01:01 +0000
Files and hashes:         1: GuhdpgwH5YJ7xnpdA6s24QpX49w.roa (hash: ZdCnAlacsr9A9vO1RGVJCjuUMPmhV5WqNBmLQuVkobQ=)
                          2: N1Onrv7nhAaOvq7SUfOQEHI1u0Q.roa (hash: XfPvZiSzA2jPJQaFVfWcm0/MZ4kiyCO7Rw1NAz93uXo=)
                          3: VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl (hash: E2PwfCvKDndxBrFE5uXsTl5bD3PFeFZ9yO+rPbNbotI=)
                          4: aIMl2nH6T8k5Za7RRf3fbO4Z9H4.roa (hash: DxFTCtRP8/1hWRr6LwNW53ADiW5FOSC5/Tf05YObbU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bf:35:c5:2e:08:5f:31:8c:d2:e1:6f:a5:54:a3:24:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5503251db69693362a927e2b130467945c54f0fc
        Validity
            Not Before: Jun 30 05:01:01 2025 GMT
            Not After : Jul  1 05:01:01 2025 GMT
        Subject: CN=16bbd4c13e33c944175ba90d9ce6e1ab839f7303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:da:fe:6f:dc:20:2c:62:c0:93:ff:de:3f:ce:
                    34:54:3d:1f:53:25:13:f0:04:c1:a4:73:53:4c:49:
                    40:d3:99:c5:fa:be:7c:f0:0e:bd:6b:da:35:2a:9c:
                    67:69:c0:3b:a9:35:46:1a:c8:56:f2:25:0f:08:35:
                    49:35:70:88:73:b9:e2:77:7d:20:3f:da:88:8f:9a:
                    ec:b7:0c:b9:e4:22:b5:dc:98:46:65:f9:65:84:27:
                    28:49:39:5d:ff:6f:7e:49:50:ec:bc:37:28:8e:cc:
                    df:97:96:11:40:73:9a:c8:31:f7:e3:8c:af:95:4c:
                    62:4c:1d:60:c0:d6:30:dd:33:d6:d7:d6:09:7b:6f:
                    12:92:08:44:d0:e9:fd:4b:2e:9a:ce:00:b0:fa:1c:
                    76:a0:0a:f7:f7:c6:0f:7a:f0:d8:a7:05:1f:b5:26:
                    c0:4b:7a:c3:d4:61:65:91:83:d8:57:26:14:c7:47:
                    fa:f8:5b:ed:a0:17:3a:e0:ca:e1:b9:22:bb:c9:01:
                    b2:33:e0:9e:1b:c0:bb:29:fb:0d:db:b0:b7:2a:a6:
                    30:57:1d:9a:01:8d:6f:5b:a9:6e:6f:82:59:25:ec:
                    cf:a2:fd:39:3a:a8:19:39:1e:d6:d3:6c:f5:0b:eb:
                    0b:15:15:10:26:36:ff:1f:82:ee:c1:5f:aa:27:48:
                    c2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:D4:C1:3E:33:C9:44:17:5B:A9:0D:9C:E6:E1:AB:83:9F:73:03
            X509v3 Authority Key Identifier:
                keyid:55:03:25:1D:B6:96:93:36:2A:92:7E:2B:13:04:67:94:5C:54:F0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c7b9dc-7ac6-4aca-a43b-3cbad5b904b5/1/VQMlHbaWkzYqkn4rEwRnlFxU8Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7a:37:db:a7:85:ff:c2:c5:9e:19:68:63:4e:6a:d6:2f:39:
         11:67:e5:5c:85:f3:1b:cc:e7:82:23:56:05:e6:ac:5d:3f:89:
         52:ba:0e:a7:de:5b:ce:be:82:42:08:03:7e:b0:e0:bc:26:98:
         fe:9e:87:cb:76:6c:58:e2:92:61:23:ff:bb:23:9c:bb:9e:0e:
         54:86:86:dc:1b:c0:ae:ce:e6:6b:7c:fe:43:23:9d:b1:8e:e9:
         d6:05:e7:f4:21:92:53:a9:92:1b:50:5c:00:71:80:ce:4b:cd:
         db:81:f2:0a:10:bb:7c:c8:d2:a4:cd:14:e1:63:95:5f:f2:a5:
         43:b8:d7:71:a0:b3:af:a6:77:d6:da:b7:ae:52:24:50:8d:21:
         0f:18:2b:c9:f6:a7:c9:3b:65:28:26:79:ff:45:2d:33:d6:e3:
         9d:59:be:32:b9:45:6f:0d:39:e8:bf:ff:aa:ee:d8:f1:f2:32:
         b7:3d:96:3f:c8:dd:8d:13:6a:52:17:6d:72:7c:ff:41:0c:9c:
         a6:a7:4f:13:88:71:e2:92:d6:b2:ce:9e:54:84:a8:07:51:62:
         b7:9c:05:f1:15:01:6b:e5:7a:ee:8d:51:85:b3:13:bf:34:6f:
         03:49:9b:d9:8a:84:fd:fa:8d:db:b7:3e:8a:20:93:48:fe:a6:
         e2:4e:42:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/NcUuCF8xjNLhb6VUoyRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MDMyNTFkYjY5NjkzMzYyYTkyN2UyYjEzMDQ2Nzk0NWM1
NGYwZmMwHhcNMjUwNjMwMDUwMTAxWhcNMjUwNzAxMDUwMTAxWjAzMTEwLwYDVQQD
EygxNmJiZDRjMTNlMzNjOTQ0MTc1YmE5MGQ5Y2U2ZTFhYjgzOWY3MzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdr+b9wgLGLAk//eP840VD0fUyUT
8ATBpHNTTElA05nF+r588A69a9o1KpxnacA7qTVGGshW8iUPCDVJNXCIc7nid30g
P9qIj5rstwy55CK13JhGZfllhCcoSTld/29+SVDsvDcojszfl5YRQHOayDH344yv
lUxiTB1gwNYw3TPW19YJe28SkghE0On9Sy6azgCw+hx2oAr398YPevDYpwUftSbA
S3rD1GFlkYPYVyYUx0f6+FvtoBc64MrhuSK7yQGyM+CeG8C7KfsN27C3KqYwVx2a
AY1vW6lub4JZJezPov05OqgZOR7W02z1C+sLFRUQJjb/H4LuwV+qJ0jCNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBa71ME+M8lEF1upDZzm4auDn3MDMB8GA1UdIwQY
MBaAFFUDJR22lpM2KpJ+KxMEZ5RcVPD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2It
M2NiYWQ1YjkwNGI1LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jN2I5ZGMtN2FjNi00YWNhLWE0M2ItM2NiYWQ1YjkwNGI1
LzEvVlFNbEhiYVdrellxa240ckV3Um5sRnhVOFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3o326eF
/8LFnhloY05q1i85EWflXIXzG8zngiNWBeasXT+JUroOp95bzr6CQggDfrDgvCaY
/p6Hy3ZsWOKSYSP/uyOcu54OVIaG3BvArs7ma3z+QyOdsY7p1gXn9CGSU6mSG1Bc
AHGAzkvN24HyChC7fMjSpM0U4WOVX/KlQ7jXcaCzr6Z31tq3rlIkUI0hDxgryfan
yTtlKCZ5/0UtM9bjnVm+MrlFbw056L//qu7Y8fIytz2WP8jdjRNqUhdtcnz/QQyc
pqdPE4hx4pLWss6eVISoB1Fit5wF8RUBa+V67o1RhbMTvzRvA0mb2YqE/fqN27c+
iiCTSP6m4k5C8w==
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:44:27 2025 by rpki-client