Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
File:                     VB_cei8RpXZtOte99iXOXhGaj98.mft (raw, json)
Hash identifier:          61j9qQz+srWEd/oUhzVQG3p5ddDY9YY3Wy9r733z9+U=
Subject key identifier:   AC:BF:EA:10:A8:44:D5:41:02:37:18:80:EF:3F:2A:32:ED:BF:30:11
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Certificate issuer:       /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial:       0199FDD9F5BDBC35795A1CEC092ADBACF5CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
Manifest number:          14DE
Signing time:             Sun 19 Oct 2025 19:02:23 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:23 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:23 +0000
Files and hashes:         1: 7ksjm8HRjbK8Xa3kYQyBwHRt850.roa (hash: XJ/0D2qapy/GZTvclk6xwBlsvUF2Ej9o4SsIbQdnohY=)
                          2: VB_cei8RpXZtOte99iXOXhGaj98.crl (hash: w1bbrlqnrFhyE/Ss72P/MMI8P13L6poOlTVJ9KU6fAI=)
                          3: _O08NAMTRYiI66s3j5CAN1Tnfbs.roa (hash: tT0fH123IaRd9D3zuV26RbVwu75ai0sfSAd21oMJcLM=)
                          4: hBVN65EbayKmtq0nf_DrOmp4TK4.roa (hash: 8Z/abmaZZr7+4cnbsbtuQNaeAvpkyIfevg6c5+wi6wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:f5:bd:bc:35:79:5a:1c:ec:09:2a:db:ac:f5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
        Validity
            Not Before: Oct 19 19:02:23 2025 GMT
            Not After : Oct 20 19:02:23 2025 GMT
        Subject: CN=acbfea10a844d54102371880ef3f2a32edbf3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:a1:98:bc:55:6d:fd:18:39:b5:f7:1b:76:
                    57:25:25:07:39:be:d6:c2:73:e5:4d:e5:c9:5d:99:
                    8b:94:ba:e5:e3:07:f5:fe:41:26:54:89:29:e6:48:
                    7f:42:0f:80:5c:fb:cf:78:fc:32:86:84:d2:1f:b2:
                    e7:19:9a:0a:89:50:f8:a4:6e:57:b2:67:eb:21:f6:
                    45:c3:5c:62:cf:ea:ae:27:79:21:60:33:a7:0c:eb:
                    64:07:be:c9:4d:84:a0:17:db:d0:d7:b1:a0:0b:27:
                    79:94:28:7d:8c:09:86:f8:fd:2a:84:f4:ef:80:3b:
                    b6:95:6e:f8:a2:87:ca:10:37:8a:fa:7a:ee:37:28:
                    7f:30:8f:1f:85:d3:32:c5:96:e5:67:54:c3:77:55:
                    d5:26:6d:64:bf:86:94:80:12:5b:ab:d4:25:2b:24:
                    41:9a:67:3a:9d:80:4a:44:1e:9a:a5:ed:bd:96:27:
                    3f:93:fb:58:41:58:4d:cd:ce:1f:af:f6:0d:16:a6:
                    e8:19:ed:39:32:cf:03:49:d2:ba:25:20:3b:00:9c:
                    0e:35:74:1b:b0:37:91:79:6d:01:40:f5:70:cd:fe:
                    12:47:a1:0b:c3:37:8b:ed:49:27:8a:3f:b9:d0:81:
                    9e:76:30:c2:88:a4:9d:f9:62:51:20:90:89:55:5b:
                    6c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:EA:10:A8:44:D5:41:02:37:18:80:EF:3F:2A:32:ED:BF:30:11
            X509v3 Authority Key Identifier:
                keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f6:35:ad:fa:35:29:7f:97:37:3e:59:87:7e:6b:cd:c9:55:
         97:f3:df:4b:f8:49:b9:4c:70:a4:ea:de:ab:29:3c:c4:d6:af:
         c2:f5:37:ed:e5:aa:6c:b2:3f:e6:a2:5e:5d:5b:ff:b4:ad:55:
         69:81:40:30:ba:5f:b4:26:53:43:4f:e3:6e:bf:69:82:88:f0:
         26:8e:12:7e:e3:f8:66:13:75:40:7e:99:75:b1:e7:ed:d8:c2:
         30:2f:71:1d:98:66:34:b7:43:0a:84:0f:b3:09:18:a1:dc:11:
         b7:2d:d4:1b:51:4f:56:59:66:54:5f:f2:4f:25:32:fa:13:af:
         ad:8d:ca:6a:51:0b:c2:cd:15:80:20:76:0d:75:85:8a:c9:18:
         ae:35:67:24:81:f5:6c:32:3a:8b:c7:ef:8f:3b:14:b6:cd:7f:
         20:91:da:bc:5a:30:7d:1c:b6:65:39:69:49:56:f9:92:2e:60:
         38:f3:7a:43:f6:01:9a:ab:73:9d:b8:5f:f5:0e:ac:bb:7e:97:
         6a:7a:b1:94:9b:b0:16:ea:4f:3d:2e:64:a0:d0:83:4f:a9:9c:
         2a:c6:fe:71:f4:f4:9c:8f:4e:0c:fe:18:93:51:41:25:d8:c1:
         02:9b:35:c1:b7:be:5a:41:6d:9f:12:5a:bf:0d:06:3b:a5:2c:
         e4:4a:84:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92fW9vDV5WhzsCSrbrPXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5
YThmZGYwHhcNMjUxMDE5MTkwMjIzWhcNMjUxMDIwMTkwMjIzWjAzMTEwLwYDVQQD
EyhhY2JmZWExMGE4NDRkNTQxMDIzNzE4ODBlZjNmMmEzMmVkYmYzMDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2KhmLxVbf0YObX3G3ZXJSUHOb7W
wnPlTeXJXZmLlLrl4wf1/kEmVIkp5kh/Qg+AXPvPePwyhoTSH7LnGZoKiVD4pG5X
smfrIfZFw1xiz+quJ3khYDOnDOtkB77JTYSgF9vQ17GgCyd5lCh9jAmG+P0qhPTv
gDu2lW74oofKEDeK+nruNyh/MI8fhdMyxZblZ1TDd1XVJm1kv4aUgBJbq9QlKyRB
mmc6nYBKRB6ape29lic/k/tYQVhNzc4fr/YNFqboGe05Ms8DSdK6JSA7AJwONXQb
sDeReW0BQPVwzf4SR6ELwzeL7Uknij+50IGedjDCiKSd+WJRIJCJVVts7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy/6hCoRNVBAjcYgO8/KjLtvzARMB8GA1UdIwQY
MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt
YzkwMGE4OWYyMGYxLzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx
LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfY1rfo1
KX+XNz5Zh35rzclVl/PfS/hJuUxwpOreqyk8xNavwvU37eWqbLI/5qJeXVv/tK1V
aYFAMLpftCZTQ0/jbr9pgojwJo4SfuP4ZhN1QH6ZdbHn7djCMC9xHZhmNLdDCoQP
swkYodwRty3UG1FPVllmVF/yTyUy+hOvrY3KalELws0VgCB2DXWFiskYrjVnJIH1
bDI6i8fvjzsUts1/IJHavFowfRy2ZTlpSVb5ki5gOPN6Q/YBmqtznbhf9Q6su36X
anqxlJuwFupPPS5koNCDT6mcKsb+cfT0nI9ODP4Yk1FBJdjBAps1wbe+WkFtnxJa
vw0GO6Us5EqEZA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:38 2025 by rpki-client