Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
File:                     VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft (raw, json)
Hash identifier:          KmbIxOEvvO3jEE3lZbiFAW/w4JrKSyQjiM0dRxK8cgE=
Subject key identifier:   5C:0E:1F:24:A4:4A:6E:51:8B:69:ED:27:79:76:7E:CC:98:6A:B0:64
Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4
Certificate issuer:       /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
Certificate serial:       0197B88F64A704A29AC80CB179CB8C5C263C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 22:01:34 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:34 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:34 +0000
Files and hashes:         1: HbLrWYvpZ3oR_JlftkugbPFu1sg.roa (hash: hyVYRW9dEIvcdUsfvs+O6FvP8/Ig+3miBLv5dJqVY64=)
                          2: VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl (hash: opCU79MgcLjghnOhqnJusjW92x+VoUGlZ2nT04VEWsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:64:a7:04:a2:9a:c8:0c:b1:79:cb:8c:5c:26:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4
        Validity
            Not Before: Jun 28 22:01:34 2025 GMT
            Not After : Jun 29 22:01:34 2025 GMT
        Subject: CN=5c0e1f24a44a6e518b69ed2779767ecc986ab064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5a:68:b6:ef:f4:7e:94:cf:01:08:4c:19:26:
                    4a:4f:de:b0:53:bd:3d:bb:e5:4b:ef:97:8f:dd:c2:
                    dc:d4:bd:de:01:5b:3e:03:a0:d1:28:67:bd:0f:a6:
                    63:c2:95:6a:2f:5a:fe:86:2c:b8:27:ad:d3:78:6a:
                    5e:c3:51:38:c4:e3:49:7f:b0:73:62:d2:e7:62:6b:
                    8b:d9:cf:09:2e:16:78:32:4e:84:89:b8:63:06:d3:
                    f5:d6:2b:a4:5b:39:1b:72:08:f0:cd:86:01:d7:1d:
                    f0:ca:fb:ea:d8:f7:bf:de:f2:e5:ea:c2:80:98:d1:
                    d6:4f:3f:eb:c6:60:60:d7:ac:40:41:cf:a5:5c:ac:
                    46:1d:97:10:8b:62:2f:d6:fc:48:bd:5a:05:d7:c5:
                    c7:28:02:59:fe:bf:0d:4e:ca:ce:30:26:9e:89:bc:
                    13:7c:e3:23:53:34:da:f5:04:76:ab:e6:5a:d2:cf:
                    f3:03:b9:3b:55:d5:8a:c9:7d:d4:c8:e1:db:15:46:
                    ce:41:c0:31:92:7d:c0:57:d2:18:92:f6:5c:a5:98:
                    10:8d:9f:76:21:0a:0e:86:e9:9b:b9:2e:fc:e3:e5:
                    2c:46:10:f3:61:66:7e:97:03:be:4d:bc:d5:93:77:
                    b8:8b:5e:69:0f:eb:30:6d:16:a6:cd:ea:13:56:c6:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:1F:24:A4:4A:6E:51:8B:69:ED:27:79:76:7E:CC:98:6A:B0:64
            X509v3 Authority Key Identifier:
                keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:77:b8:6e:d0:37:61:82:fc:bf:9b:c8:7a:99:54:d1:ee:cc:
         a5:5d:76:b9:bb:60:b2:55:1f:0c:78:b2:e6:e9:b4:98:3d:6a:
         49:59:c3:57:6c:ca:dc:85:50:75:14:ae:a3:f3:53:5b:62:7a:
         98:db:a3:73:63:a2:e6:44:c6:a9:ed:5f:9b:e5:15:8b:64:d1:
         d2:75:6d:c2:48:ec:28:98:d9:4a:02:b0:7a:b6:7a:62:42:e1:
         79:c1:32:e7:0b:9d:e2:55:73:cb:99:13:91:e7:0e:50:b2:57:
         32:f0:54:af:1f:46:9c:00:0d:65:45:0f:29:fe:f4:32:9c:58:
         21:97:bc:12:ad:81:29:5e:61:ce:c0:01:f6:65:34:2f:8a:64:
         98:e9:30:54:54:4b:e6:36:e1:72:e7:4a:11:bf:54:f1:ff:bf:
         d4:50:ce:db:90:2d:d2:00:b3:bf:55:ef:04:d6:8a:2a:bb:ba:
         5b:26:b4:ee:33:b6:11:6d:74:48:44:1e:c7:01:3b:ec:19:f6:
         a7:cc:df:69:82:8a:79:73:8b:6c:d6:3e:77:8a:47:52:c9:b6:
         57:1b:f0:51:92:fa:32:51:fc:49:cd:21:0f:31:9d:3c:48:ab:
         a7:51:4e:7e:b9:25:1a:d4:ef:11:99:e5:83:c9:36:ee:3d:04:
         97:a7:61:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j2SnBKKayAyxecuMXCY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OTBlZmEyM2M3NzhlZjc0NzBmM2FjMGE5MDU2MTliYzdj
Mjc3ZTQwHhcNMjUwNjI4MjIwMTM0WhcNMjUwNjI5MjIwMTM0WjAzMTEwLwYDVQQD
Eyg1YzBlMWYyNGE0NGE2ZTUxOGI2OWVkMjc3OTc2N2VjYzk4NmFiMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1potu/0fpTPAQhMGSZKT96wU709
u+VL75eP3cLc1L3eAVs+A6DRKGe9D6ZjwpVqL1r+hiy4J63TeGpew1E4xONJf7Bz
YtLnYmuL2c8JLhZ4Mk6EibhjBtP11iukWzkbcgjwzYYB1x3wyvvq2Pe/3vLl6sKA
mNHWTz/rxmBg16xAQc+lXKxGHZcQi2Iv1vxIvVoF18XHKAJZ/r8NTsrOMCaeibwT
fOMjUzTa9QR2q+Za0s/zA7k7VdWKyX3UyOHbFUbOQcAxkn3AV9IYkvZcpZgQjZ92
IQoOhumbuS784+UsRhDzYWZ+lwO+TbzVk3e4i15pD+swbRamzeoTVsYDwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwOHySkSm5Ri2ntJ3l2fsyYarBkMB8GA1UdIwQY
MBaAFFaQ76I8d473Rw86wKkFYZvHwnfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2It
ODNhZTJmMjE0MTIxLzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2ItODNhZTJmMjE0MTIx
LzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHe4btA3
YYL8v5vIeplU0e7MpV12ubtgslUfDHiy5um0mD1qSVnDV2zK3IVQdRSuo/NTW2J6
mNujc2Oi5kTGqe1fm+UVi2TR0nVtwkjsKJjZSgKwerZ6YkLhecEy5wud4lVzy5kT
kecOULJXMvBUrx9GnAANZUUPKf70MpxYIZe8Eq2BKV5hzsAB9mU0L4pkmOkwVFRL
5jbhcudKEb9U8f+/1FDO25At0gCzv1XvBNaKKru6Wya07jO2EW10SEQexwE77Bn2
p8zfaYKKeXOLbNY+d4pHUsm2VxvwUZL6MlH8Sc0hDzGdPEirp1FOfrklGtTvEZnl
g8k27j0El6dh4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:38 2025 by rpki-client