Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          MHsEfNiC/xC9DVkgtjnW6qc8E0oZ1pPTlyI7lvIyZzM=
Subject key identifier:   43:68:E1:9F:C9:2E:DB:C6:80:FC:2F:5E:EB:D7:C3:F8:A5:7E:17:58
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       0198D5BBD5053CB144B4C6A7B773B7828341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          0308
Signing time:             Sat 23 Aug 2025 07:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:53 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:53 +0000
Files and hashes:         1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: g8Ks+e1DgOzvXuriCTr1gD3vB4EtdfaLMhsFr2K/Mpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:d5:05:3c:b1:44:b4:c6:a7:b7:73:b7:82:83:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: Aug 23 07:01:53 2025 GMT
            Not After : Aug 24 07:01:53 2025 GMT
        Subject: CN=4368e19fc92edbc680fc2f5eebd7c3f8a57e1758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:18:93:ee:bc:77:84:31:68:92:d9:05:0b:
                    e5:14:c8:51:51:69:32:15:2a:df:e3:c2:89:3c:e7:
                    7f:1b:dd:49:be:93:a6:1b:96:c3:29:e7:15:99:ac:
                    58:4c:c8:54:3f:18:42:b3:00:48:76:8f:1b:d5:aa:
                    c6:be:03:e0:03:55:96:b7:30:57:f2:bc:87:25:59:
                    27:be:f7:1e:1d:e3:88:c6:4d:39:e7:4c:45:3f:9f:
                    ad:3f:bb:da:9e:38:a3:15:69:e7:a4:19:0c:0d:2d:
                    ab:56:c3:f2:30:40:b2:62:e4:c0:00:2e:99:ea:6a:
                    43:e0:1a:25:a1:ee:d8:74:ac:45:9e:dc:2c:33:8c:
                    e7:6a:c0:6e:d1:77:fe:43:98:90:a5:a7:2f:41:4c:
                    c0:58:fe:de:32:6c:41:79:2a:be:7e:e4:11:05:2d:
                    ba:7f:28:0f:f2:eb:e1:5d:39:e6:f2:7c:22:cd:9e:
                    97:43:42:10:ac:53:5c:f4:01:35:ef:cf:7a:22:4c:
                    64:24:a4:da:cb:be:60:a9:2b:3c:fa:7a:44:50:a3:
                    bb:40:8a:22:66:c2:96:70:98:a3:f0:a3:c4:fb:ac:
                    97:88:4a:28:d8:d7:b9:1c:b7:a8:a8:e0:a2:60:e0:
                    39:73:7d:b8:2f:55:94:2a:b8:43:9b:9c:74:ec:53:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:68:E1:9F:C9:2E:DB:C6:80:FC:2F:5E:EB:D7:C3:F8:A5:7E:17:58
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:69:3b:0f:dc:7a:9b:8c:2b:6d:52:a8:3b:a9:c4:4c:f2:ef:
         52:93:84:5e:2f:a2:67:e7:d7:20:95:dc:6d:4f:4a:9a:dc:eb:
         48:4d:71:91:f5:58:09:b2:2b:e9:6e:ec:6a:73:4d:f3:05:9a:
         97:06:8c:2b:c5:2e:61:49:42:b5:a2:90:cb:af:bb:94:8f:ff:
         47:f2:69:a8:bd:52:49:f2:18:2d:5d:33:65:3e:cb:d3:6f:e9:
         96:cf:84:91:1c:f9:f8:8c:41:b8:0b:30:cc:81:d5:c0:c0:0d:
         0e:8a:c8:a7:a8:52:ec:a8:45:41:b7:19:d7:a3:82:05:2a:eb:
         6e:0a:6b:df:85:d2:97:af:5d:93:d3:9a:23:0a:f2:ff:7d:e4:
         8a:71:9c:dc:45:a5:bc:4c:02:25:03:56:c2:3b:ab:b7:f0:74:
         0c:a9:58:34:1d:c1:0c:1c:1a:f2:7a:02:82:9e:39:39:87:88:
         e6:4e:ce:57:ce:67:13:70:ea:7b:8a:99:5c:c8:f1:1f:1c:4f:
         f1:18:07:84:91:23:eb:1c:0d:7e:0d:5c:47:9b:ba:14:84:f4:
         1b:ed:69:8e:49:dc:bb:bb:25:3b:de:87:95:e9:f1:c2:26:1c:
         d5:24:62:42:21:16:de:49:e9:28:a2:18:0b:2a:25:47:bf:de:
         c4:82:d3:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu9UFPLFEtMant3O3goNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlN2M3OWU5YTIxZGIyNmJkNmFlMDc1MDI3NmRiMWIwYWZh
N2VjZGIwHhcNMjUwODIzMDcwMTUzWhcNMjUwODI0MDcwMTUzWjAzMTEwLwYDVQQD
Eyg0MzY4ZTE5ZmM5MmVkYmM2ODBmYzJmNWVlYmQ3YzNmOGE1N2UxNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUYk+68d4QxaJLZBQvlFMhRUWky
FSrf48KJPOd/G91JvpOmG5bDKecVmaxYTMhUPxhCswBIdo8b1arGvgPgA1WWtzBX
8ryHJVknvvceHeOIxk0550xFP5+tP7vanjijFWnnpBkMDS2rVsPyMECyYuTAAC6Z
6mpD4Boloe7YdKxFntwsM4znasBu0Xf+Q5iQpacvQUzAWP7eMmxBeSq+fuQRBS26
fygP8uvhXTnm8nwizZ6XQ0IQrFNc9AE17896IkxkJKTay75gqSs8+npEUKO7QIoi
ZsKWcJij8KPE+6yXiEoo2Ne5HLeoqOCiYOA5c324L1WUKrhDm5x07FOkuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENo4Z/JLtvGgPwvXuvXw/ilfhdYMB8GA1UdIwQY
MBaAFL58eemiHbJr1q4HUCdtsbCvp+zbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMt
Y2ZlMmM3ZmYwMThiLzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNjMzOWEtMjYwMy00ZThmLTkwMWMtY2ZlMmM3ZmYwMThi
LzEvdm54NTZhSWRzbXZXcmdkUUoyMnhzSy1uN05zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmk7D9x6
m4wrbVKoO6nETPLvUpOEXi+iZ+fXIJXcbU9KmtzrSE1xkfVYCbIr6W7sanNN8wWa
lwaMK8UuYUlCtaKQy6+7lI//R/JpqL1SSfIYLV0zZT7L02/pls+EkRz5+IxBuAsw
zIHVwMANDorIp6hS7KhFQbcZ16OCBSrrbgpr34XSl69dk9OaIwry/33kinGc3EWl
vEwCJQNWwjurt/B0DKlYNB3BDBwa8noCgp45OYeI5k7OV85nE3Dqe4qZXMjxHxxP
8RgHhJEj6xwNfg1cR5u6FIT0G+1pjkncu7slO96HlenxwiYc1SRiQiEW3knpKKIY
CyolR7/exILTbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:24 2025 by rpki-client