Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File:                     VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier:          veoszPaQEGbFPT9z0WU0jUrEgklgDO7mtRgng0CIAg4=
Subject key identifier:   B6:D8:5B:9A:B3:9B:93:2B:E5:6C:5E:58:78:C6:B4:92:6C:DF:84:2E
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer:       /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial:       0199FC2195AC54D4408C4D1AFA145C333D7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number:          69
Signing time:             Sun 19 Oct 2025 11:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:23 +0000
Files and hashes:         1: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: mchzwxMOeKM+a/P7l8c9Uf3y6gRdshXAtTSytlF03VE=)
                          2: c5KTqi8Nppw4iBusDEEIOmLUG-E.roa (hash: P9QcxEVErHbCPZK93Fj+ercSMy5NY3qU2Mt1bLXX3+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:95:ac:54:d4:40:8c:4d:1a:fa:14:5c:33:3d:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
        Validity
            Not Before: Oct 19 11:01:23 2025 GMT
            Not After : Oct 20 11:01:23 2025 GMT
        Subject: CN=b6d85b9ab39b932be56c5e5878c6b4926cdf842e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:f5:bc:5b:45:0d:ef:89:7f:f1:be:95:7a:
                    eb:58:ed:5f:24:ff:4b:89:b1:04:17:99:c9:8e:a1:
                    85:38:88:f0:e4:dc:bf:e5:ad:f0:f1:86:89:0c:2b:
                    ee:48:d5:3b:5a:f3:06:1e:06:aa:cc:c9:b8:8f:2e:
                    81:e9:ac:cf:1e:c3:7e:68:25:11:5e:df:ad:0c:1c:
                    a4:7a:49:e5:c4:0d:08:53:3d:f3:58:cd:ef:ec:e1:
                    5e:5f:1b:e1:e8:47:1a:dd:c1:f0:08:e9:19:0f:1f:
                    30:0c:61:89:87:b5:c9:55:42:92:0c:fc:e8:25:34:
                    7d:a2:36:47:7f:c8:15:79:c0:6b:11:86:3a:87:5a:
                    56:c1:00:38:95:a2:c6:d7:50:43:67:fd:e8:a6:75:
                    41:41:d2:c4:19:26:58:6a:35:2f:af:4b:29:2c:aa:
                    17:2d:ba:51:40:74:45:66:36:61:83:c0:a5:da:23:
                    e5:c4:09:cf:51:d8:a2:3c:24:93:28:a9:4c:a6:14:
                    5e:46:9b:0a:d3:a8:1e:d3:b7:b5:97:27:ed:72:ef:
                    57:82:5b:2c:1b:af:0c:c3:d8:34:ee:58:83:29:1d:
                    c4:8d:2e:62:bb:80:35:ef:4e:b5:ba:87:38:13:12:
                    5d:9d:8c:d1:cf:1f:86:5c:bc:68:f4:57:68:b1:05:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D8:5B:9A:B3:9B:93:2B:E5:6C:5E:58:78:C6:B4:92:6C:DF:84:2E
            X509v3 Authority Key Identifier:
                keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1c:2c:75:cb:6b:b5:02:26:52:a1:b3:a8:81:b7:fa:a6:a2:
         94:65:5c:4c:4c:8e:d0:34:42:33:6d:67:66:a5:0a:ba:01:8c:
         08:63:83:d1:db:9c:28:ea:c4:7f:e2:2a:0d:5d:ca:32:45:a7:
         20:b2:4b:3a:f1:22:29:56:11:f4:28:ac:f8:36:0a:cb:9d:2c:
         67:f5:26:fd:69:7a:df:79:a1:9c:4d:36:36:5f:60:80:c9:6e:
         eb:97:37:9e:60:e9:b8:b4:74:d7:48:8d:4d:09:fa:fb:7a:06:
         f9:6d:48:5e:f1:ec:4c:cc:c6:cd:85:41:68:13:bf:69:95:86:
         67:2f:f5:17:43:44:0f:ba:c6:3b:02:1a:3d:8b:aa:12:2c:c2:
         a0:65:81:09:29:69:a9:8e:63:67:fe:c4:19:bc:4f:5f:51:90:
         6c:40:cd:4e:a2:18:75:69:6c:3d:ba:10:ef:76:d6:c7:ed:53:
         e3:aa:a5:ee:4d:0c:cb:03:02:97:6d:02:05:42:cf:64:81:1d:
         9e:39:6b:0c:58:1c:8f:bd:29:3a:72:cd:ab:0d:2e:9d:f9:8e:
         db:36:54:29:da:69:ac:0a:2e:45:50:6f:c7:bc:f0:87:29:5a:
         c1:ab:eb:e3:fd:23:94:bc:71:89:69:7b:e4:cd:35:fd:0a:e6:
         a5:ba:5c:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZWsVNRAjE0a+hRcMz1/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTM3YzMyMjQ5MTA3ZjI2YjE3NDE0NTFjZjEwMDM5Mzgw
YjhiYzMwHhcNMjUxMDE5MTEwMTIzWhcNMjUxMDIwMTEwMTIzWjAzMTEwLwYDVQQD
EyhiNmQ4NWI5YWIzOWI5MzJiZTU2YzVlNTg3OGM2YjQ5MjZjZGY4NDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAj1vFtFDe+Jf/G+lXrrWO1fJP9L
ibEEF5nJjqGFOIjw5Ny/5a3w8YaJDCvuSNU7WvMGHgaqzMm4jy6B6azPHsN+aCUR
Xt+tDBykeknlxA0IUz3zWM3v7OFeXxvh6Eca3cHwCOkZDx8wDGGJh7XJVUKSDPzo
JTR9ojZHf8gVecBrEYY6h1pWwQA4laLG11BDZ/3opnVBQdLEGSZYajUvr0spLKoX
LbpRQHRFZjZhg8Cl2iPlxAnPUdiiPCSTKKlMphReRpsK06ge07e1lyftcu9Xglss
G68Mw9g07liDKR3EjS5iu4A17061uoc4ExJdnYzRzx+GXLxo9FdosQWgwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbYW5qzm5Mr5WxeWHjGtJJs34QuMB8GA1UdIwQY
MBaAFFQTfDIkkQfyaxdBRRzxADk4C4vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQt
YzhlMTU1NDBjODA2LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQtYzhlMTU1NDBjODA2
LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxwsdctr
tQImUqGzqIG3+qailGVcTEyO0DRCM21nZqUKugGMCGOD0ducKOrEf+IqDV3KMkWn
ILJLOvEiKVYR9Cis+DYKy50sZ/Um/Wl633mhnE02Nl9ggMlu65c3nmDpuLR010iN
TQn6+3oG+W1IXvHsTMzGzYVBaBO/aZWGZy/1F0NED7rGOwIaPYuqEizCoGWBCSlp
qY5jZ/7EGbxPX1GQbEDNTqIYdWlsPboQ73bWx+1T46ql7k0MywMCl20CBULPZIEd
njlrDFgcj70pOnLNqw0unfmO2zZUKdpprAouRVBvx7zwhylawavr4/0jlLxxiWl7
5M01/QrmpbpcMg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:58 2025 by rpki-client