Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          jXtBLOk4RMoRUaFBD2DhyIB1ifEth3Mlrv1SYHUjccw=
Subject key identifier:   94:ED:A1:1B:AD:64:F1:F7:CB:A3:7B:3D:C2:ED:9A:8F:D1:BC:6A:BD
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       0199FC8F70A13BB516C8D04C3BB012760E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:22 +0000
Files and hashes:         1: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: DiG8l5h+i2vDtwdD5RTnkPkxqeJGkGejE0cj4ujlnGk=)
                          2: bOIrh8o4MvR1wd4C84En4JCn0L4.roa (hash: DG81fv6EP9+XjNFDQGRmy+cQGfBXw0VPtgzqJ5IZAq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:70:a1:3b:b5:16:c8:d0:4c:3b:b0:12:76:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Oct 19 13:01:22 2025 GMT
            Not After : Oct 20 13:01:22 2025 GMT
        Subject: CN=94eda11bad64f1f7cba37b3dc2ed9a8fd1bc6abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c1:71:1f:fa:ff:49:86:55:8e:38:f9:fb:66:
                    47:fe:42:80:66:90:7f:11:73:72:5d:b9:a1:42:12:
                    3f:1b:80:f4:f3:95:17:b8:82:51:bf:08:46:ef:19:
                    d1:f4:c7:3e:96:8c:39:7c:8f:1d:30:da:b6:8e:a9:
                    01:fd:95:01:4b:c8:c5:95:9a:40:0a:9e:ec:32:08:
                    3f:1c:2b:1a:29:56:49:f4:e5:09:60:be:97:1b:34:
                    9f:0f:a5:a6:72:ea:9f:60:50:52:60:36:a1:a7:c1:
                    ca:75:d5:95:e8:4f:4f:d9:c8:e5:92:fc:2a:3c:d9:
                    04:4e:49:27:ef:ce:27:b5:28:f9:d6:b6:f8:e1:1a:
                    ca:97:d5:e6:4e:99:6d:e8:e3:66:92:20:31:98:40:
                    20:dd:0b:6d:8d:3c:54:ef:5a:7d:d9:f7:07:a3:ef:
                    b8:ea:f9:99:97:c8:d6:02:59:dc:2f:f8:6d:8a:cd:
                    8b:85:a6:b1:14:05:f8:1b:f0:f9:07:28:f2:5e:16:
                    fd:a6:7e:1d:f6:dd:ab:74:7f:4c:ed:6b:b1:55:80:
                    20:c0:cc:64:f0:79:c4:3f:9e:8a:8b:d7:f2:b0:f5:
                    04:c6:88:5d:a2:3a:87:fd:06:ca:30:1b:97:95:de:
                    cd:bf:ff:7d:7a:db:43:9f:87:34:a9:1c:a5:0d:03:
                    66:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:A1:1B:AD:64:F1:F7:CB:A3:7B:3D:C2:ED:9A:8F:D1:BC:6A:BD
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e8:e2:59:4e:92:5d:28:51:2f:6e:44:29:6d:77:96:fa:e4:
         dc:ee:c5:ad:a6:ac:96:45:ec:3d:59:c5:41:b1:49:62:b8:d8:
         5d:5b:ac:48:26:63:42:91:5a:23:28:c9:b0:66:17:7b:a3:5b:
         2e:aa:18:cc:af:d7:21:6e:11:d6:fb:88:35:b1:ae:9e:98:2b:
         ba:f6:09:e1:50:e9:d4:ff:64:ce:2b:43:b7:c4:c8:ba:2e:14:
         3c:29:57:49:50:65:fa:5c:35:90:17:d0:b1:72:28:8f:a9:4c:
         a8:b6:90:2a:6b:02:f9:e4:43:9e:79:38:df:63:53:24:6b:15:
         f9:67:40:9f:c2:59:27:c4:81:50:27:75:ce:9e:63:b8:73:4d:
         53:eb:1a:27:83:82:e9:f9:e7:cf:07:ef:1f:db:e4:eb:ae:7a:
         a7:37:29:af:fe:ef:4c:34:14:be:36:79:af:09:2e:d6:ee:a6:
         eb:c4:f1:8c:d4:f6:db:d6:3f:ee:b4:4d:d6:88:48:56:10:03:
         49:90:18:5d:3c:28:a7:3a:a5:1a:bb:af:c9:91:b4:72:69:7d:
         0d:33:2f:30:d8:fb:8f:3f:6e:fb:a7:d2:9d:a6:21:8b:74:51:
         ec:67:c8:fd:01:2d:f7:d4:24:8a:6a:a1:cc:a5:b5:18:66:ab:
         11:b6:31:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3ChO7UWyNBMO7ASdg4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODgyYjE0MTMyMjFlOWI1ZDNiYzhhNzMyOWI3NjQ5Zjli
MWVjMmMwHhcNMjUxMDE5MTMwMTIyWhcNMjUxMDIwMTMwMTIyWjAzMTEwLwYDVQQD
Eyg5NGVkYTExYmFkNjRmMWY3Y2JhMzdiM2RjMmVkOWE4ZmQxYmM2YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cFxH/r/SYZVjjj5+2ZH/kKAZpB/
EXNyXbmhQhI/G4D085UXuIJRvwhG7xnR9Mc+low5fI8dMNq2jqkB/ZUBS8jFlZpA
Cp7sMgg/HCsaKVZJ9OUJYL6XGzSfD6WmcuqfYFBSYDahp8HKddWV6E9P2cjlkvwq
PNkETkkn784ntSj51rb44RrKl9XmTplt6ONmkiAxmEAg3QttjTxU71p92fcHo++4
6vmZl8jWAlncL/htis2LhaaxFAX4G/D5ByjyXhb9pn4d9t2rdH9M7WuxVYAgwMxk
8HnEP56Ki9fysPUExohdojqH/QbKMBuXld7Nv/99ettDn4c0qRylDQNmYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTtoRutZPH3y6N7PcLtmo/RvGq9MB8GA1UdIwQY
MBaAFFSIKxQTIh6bXTvIpzKbdkn5sewsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTIt
NGJkNThkYjEwZWQyLzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNzYwYTktYWI1ZS00YWNmLWE4ZTItNGJkNThkYjEwZWQy
LzEvVklnckZCTWlIcHRkTzhpbk1wdDJTZm14N0N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMujiWU6S
XShRL25EKW13lvrk3O7FraaslkXsPVnFQbFJYrjYXVusSCZjQpFaIyjJsGYXe6Nb
LqoYzK/XIW4R1vuINbGunpgruvYJ4VDp1P9kzitDt8TIui4UPClXSVBl+lw1kBfQ
sXIoj6lMqLaQKmsC+eRDnnk432NTJGsV+WdAn8JZJ8SBUCd1zp5juHNNU+saJ4OC
6fnnzwfvH9vk6656pzcpr/7vTDQUvjZ5rwku1u6m68TxjNT229Y/7rRN1ohIVhAD
SZAYXTwopzqlGruvyZG0cml9DTMvMNj7jz9u+6fSnaYhi3RR7GfI/QEt99Qkimqh
zKW1GGarEbYxxA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:32 2025 by rpki-client