Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          F3a4Q0AE07s8oO1pnd+X5Ou5noGOSWbOS5xmhTWC0MY=
Subject key identifier:   04:F0:11:B4:E6:74:13:4B:1F:53:F5:7D:2A:39:6F:8D:FE:42:57:BF
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       0198D474635687C739357B446C3A9B0C6595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 01:04:14 +0000
Manifest this update:     Sat 23 Aug 2025 01:04:14 +0000
Manifest next update:     Sun 24 Aug 2025 01:04:14 +0000
Files and hashes:         1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: ogMul/eSpd8xapH62c2APSf35jwVpsbDA3ciISasy4I=)
                          3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
                          4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:63:56:87:c7:39:35:7b:44:6c:3a:9b:0c:65:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Aug 23 01:04:14 2025 GMT
            Not After : Aug 24 01:04:14 2025 GMT
        Subject: CN=04f011b4e674134b1f53f57d2a396f8dfe4257bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:3d:b4:8c:f4:21:6d:9c:3e:1c:70:32:37:
                    78:2b:66:5d:4f:d9:b0:2b:a4:6b:31:65:37:37:6f:
                    60:73:e1:ac:5e:ed:e2:20:96:06:ca:be:28:ff:3a:
                    7d:32:70:bb:32:0c:2d:4b:ea:58:c3:40:89:5f:7f:
                    10:ad:cd:af:d9:f5:b0:95:39:00:8e:c1:49:2a:37:
                    b3:98:ef:4b:e4:de:38:11:de:04:87:c2:63:03:e8:
                    66:c7:76:bf:6d:08:31:aa:64:4c:c2:9d:f2:bf:24:
                    9c:a4:3f:91:63:6b:f6:ff:8f:39:d2:79:36:c7:4b:
                    14:65:04:87:4c:84:b5:b0:c5:25:67:e2:04:08:82:
                    d7:22:bb:b1:67:40:cb:41:1d:9a:c1:59:95:f6:e4:
                    a6:d7:e8:14:0f:05:26:9f:5e:a9:a6:f0:e7:c3:11:
                    c2:5b:45:8e:5d:64:6c:c2:6e:d1:27:90:fc:19:7d:
                    6c:d1:0c:48:e9:18:e8:13:da:a2:04:94:50:bf:f0:
                    5e:c5:f4:7f:38:4d:18:ac:2b:ee:88:2e:11:a2:93:
                    f0:1c:40:06:5d:bf:2d:7c:37:e4:2c:b5:8c:eb:04:
                    d8:9f:22:44:fb:ae:de:54:64:96:16:83:ce:7b:24:
                    3f:6a:a8:9a:ee:35:33:a9:eb:22:cd:42:5b:19:34:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:11:B4:E6:74:13:4B:1F:53:F5:7D:2A:39:6F:8D:FE:42:57:BF
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:68:59:4a:35:a0:65:1c:dd:b2:38:9c:62:69:55:a7:f4:
         d6:bd:90:6a:d8:d6:bd:d5:f7:dc:0d:75:c3:5f:a8:2a:57:a4:
         b8:8a:00:bb:34:98:9f:97:6d:5b:95:af:ab:69:c4:69:af:a1:
         1e:4d:7d:07:98:eb:4d:7b:cc:90:39:4a:d4:14:e5:96:d9:2a:
         ec:66:77:7c:95:f2:42:7f:6e:7f:3f:b2:34:ae:7d:32:7e:46:
         f5:34:2a:43:7a:72:69:d6:3d:d1:c1:4a:9c:ab:da:4a:ab:b6:
         89:d0:90:b4:f8:94:5f:02:48:d3:73:1d:a9:55:4b:3f:69:ea:
         d5:f1:eb:f7:07:51:a2:27:3f:ad:4f:21:63:80:03:20:8d:7b:
         eb:04:cd:db:5e:47:74:2f:6d:08:83:33:c7:b9:ed:02:d0:e3:
         b3:52:10:d8:52:90:eb:f3:84:3b:b1:9b:d0:22:c0:64:22:6c:
         df:5c:d9:31:9e:f9:d0:c8:7d:54:8f:be:6f:ca:d4:1f:2f:da:
         5c:b4:79:39:53:23:bb:d3:47:e0:06:ab:2d:7e:d6:ae:a6:bb:
         98:38:7a:5d:16:21:78:cf:df:f3:47:b4:24:c0:a1:2c:80:3c:
         60:91:ad:df:10:39:b7:ba:70:21:0a:98:c9:a5:06:70:9d:3a:
         f1:fc:2b:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUdGNWh8c5NXtEbDqbDGWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDA0ZGE2MDJkYWIwNjI1YmU3MjIzZDA5MzIwYjFjZDdh
YWZjZWQwHhcNMjUwODIzMDEwNDE0WhcNMjUwODI0MDEwNDE0WjAzMTEwLwYDVQQD
EygwNGYwMTFiNGU2NzQxMzRiMWY1M2Y1N2QyYTM5NmY4ZGZlNDI1N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaA9tIz0IW2cPhxwMjd4K2ZdT9mw
K6RrMWU3N29gc+GsXu3iIJYGyr4o/zp9MnC7MgwtS+pYw0CJX38Qrc2v2fWwlTkA
jsFJKjezmO9L5N44Ed4Eh8JjA+hmx3a/bQgxqmRMwp3yvyScpD+RY2v2/4850nk2
x0sUZQSHTIS1sMUlZ+IECILXIruxZ0DLQR2awVmV9uSm1+gUDwUmn16ppvDnwxHC
W0WOXWRswm7RJ5D8GX1s0QxI6RjoE9qiBJRQv/BexfR/OE0YrCvuiC4RopPwHEAG
Xb8tfDfkLLWM6wTYnyJE+67eVGSWFoPOeyQ/aqia7jUzqesizUJbGTSOiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATwEbTmdBNLH1P1fSo5b43+Qle/MB8GA1UdIwQY
MBaAFFRATaYC2rBiW+ciPQkyCxzXqvztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgt
MWIyNDQ4NGU1NWVjLzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83ZDJjYjUtYmRkZi00MjAxLWJhZjgtMWIyNDQ4NGU1NWVj
LzEvVkVCTnBnTGFzR0piNXlJOUNUSUxITmVxX08wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMdoWUo1
oGUc3bI4nGJpVaf01r2QatjWvdX33A11w1+oKlekuIoAuzSYn5dtW5Wvq2nEaa+h
Hk19B5jrTXvMkDlK1BTlltkq7GZ3fJXyQn9ufz+yNK59Mn5G9TQqQ3pyadY90cFK
nKvaSqu2idCQtPiUXwJI03MdqVVLP2nq1fHr9wdRoic/rU8hY4ADII176wTN215H
dC9tCIMzx7ntAtDjs1IQ2FKQ6/OEO7Gb0CLAZCJs31zZMZ750Mh9VI++b8rUHy/a
XLR5OVMju9NH4AarLX7Wrqa7mDh6XRYheM/f80e0JMChLIA8YJGt3xA5t7pwIQqY
yaUGcJ068fwrNA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:10 2025 by rpki-client