Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File:                     vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier:          UNqrG736DwoBclAgZ8zUa7LsYtOWjaQYXT4rb/e4ewY=
Subject key identifier:   85:47:4A:A0:E7:B5:8C:21:12:9F:E5:66:83:14:26:3A:8A:78:B7:A9
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer:       /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial:       0196B10E7F12FC4D2375218104919283582C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number:          1531
Signing time:             Thu 08 May 2025 18:00:39 +0000
Manifest this update:     Thu 08 May 2025 18:00:39 +0000
Manifest next update:     Fri 09 May 2025 18:00:39 +0000
Files and hashes:         1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
                          2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: 3FLziSYA37RLtc7d7VyUd+9QzUPDqtPFMePISy+u69Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:7f:12:fc:4d:23:75:21:81:04:91:92:83:58:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
        Validity
            Not Before: May  8 18:00:39 2025 GMT
            Not After : May  9 18:00:39 2025 GMT
        Subject: CN=85474aa0e7b58c21129fe5668314263a8a78b7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:8d:3a:8a:fd:bb:2a:2d:12:64:e3:39:ff:
                    aa:9c:c7:35:bd:b4:f2:bc:e4:f2:f6:94:38:5c:9e:
                    7f:69:65:05:80:5a:b6:37:88:1d:33:2f:f2:47:f5:
                    e5:2f:a3:3f:48:e2:a2:68:36:47:ec:1f:16:82:5e:
                    54:de:0a:59:30:58:f0:91:29:0b:4d:d1:34:6e:5d:
                    ad:11:07:a7:df:47:ac:02:89:79:72:f1:58:fd:20:
                    1e:20:ab:95:0c:1d:78:0b:e4:4c:8f:7e:e8:eb:e8:
                    29:92:27:87:54:f9:8b:a6:9b:e5:eb:39:a4:22:d4:
                    95:07:93:55:83:b9:97:71:4a:cd:d2:10:e7:e3:52:
                    19:c2:fb:c7:86:8b:7a:1d:e9:3e:92:7c:57:e9:09:
                    f5:6b:c4:10:98:25:3e:bd:32:52:f9:c7:0d:80:7a:
                    58:58:7b:20:33:2e:0e:58:ec:c0:5f:db:b2:c3:0d:
                    ee:74:ca:42:9b:24:e5:28:ea:d6:80:a5:7b:3d:36:
                    eb:8e:59:99:ab:5e:7a:41:f1:3f:31:3d:aa:80:64:
                    5a:83:fb:bd:58:f4:75:51:dc:02:0a:a4:53:82:3b:
                    a4:e0:3d:9c:7c:cb:dc:7b:8e:90:a6:87:8d:22:d2:
                    2a:e3:3e:30:a7:92:9f:01:11:40:ce:43:65:19:6d:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:47:4A:A0:E7:B5:8C:21:12:9F:E5:66:83:14:26:3A:8A:78:B7:A9
            X509v3 Authority Key Identifier:
                keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:49:51:fd:ce:a6:ac:7e:78:21:d1:1d:ba:40:7c:3a:1c:66:
         76:e7:1c:71:8e:45:c4:24:a1:90:af:e8:fd:97:13:75:f6:a4:
         9d:f0:ad:37:4b:56:11:19:47:0d:c3:0b:a2:44:88:6d:6d:70:
         73:ba:a7:ea:ce:4c:0b:2c:59:89:de:1a:2c:3e:09:04:d3:88:
         44:cf:41:2d:45:67:5e:30:76:82:77:40:0a:8c:e2:ba:73:c7:
         f9:3d:26:11:98:63:73:d4:11:88:11:28:d4:f6:14:72:aa:2c:
         ae:bd:c6:2f:0d:b2:56:17:a0:10:64:2d:ec:10:ac:3b:50:c6:
         30:53:20:f9:6b:c7:d7:6f:8f:90:b7:7e:00:50:74:d1:4e:ec:
         f0:0b:85:b2:7a:85:e8:50:ea:ec:d0:b4:93:91:12:c8:40:19:
         bd:91:48:ad:52:cc:81:44:21:21:83:79:60:2f:1f:d3:97:f8:
         b6:7c:34:55:65:5f:50:6a:01:69:d4:45:94:1f:06:d7:b5:0d:
         87:b8:55:55:4d:2f:8b:47:af:b4:7f:fc:7f:f3:4b:92:22:93:
         13:33:b2:e2:ca:09:70:b3:d8:75:79:09:3a:e0:c1:98:53:5e:
         f0:59:7e:5a:79:c3:28:1a:0c:eb:5d:59:2d:40:18:cc:c0:b7:
         71:00:ae:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaxDn8S/E0jdSGBBJGSg1gsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj
OWM3YzYwHhcNMjUwNTA4MTgwMDM5WhcNMjUwNTA5MTgwMDM5WjAzMTEwLwYDVQQD
Eyg4NTQ3NGFhMGU3YjU4YzIxMTI5ZmU1NjY4MzE0MjYzYThhNzhiN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKmNOor9uyotEmTjOf+qnMc1vbTy
vOTy9pQ4XJ5/aWUFgFq2N4gdMy/yR/XlL6M/SOKiaDZH7B8Wgl5U3gpZMFjwkSkL
TdE0bl2tEQen30esAol5cvFY/SAeIKuVDB14C+RMj37o6+gpkieHVPmLppvl6zmk
ItSVB5NVg7mXcUrN0hDn41IZwvvHhot6Hek+knxX6Qn1a8QQmCU+vTJS+ccNgHpY
WHsgMy4OWOzAX9uyww3udMpCmyTlKOrWgKV7PTbrjlmZq156QfE/MT2qgGRag/u9
WPR1UdwCCqRTgjuk4D2cfMvce46QpoeNItIq4z4wp5KfARFAzkNlGW2e5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVHSqDntYwhEp/lZoMUJjqKeLepMB8GA1UdIwQY
MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt
Y2Q3YjI4OGQ2ZWEwLzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw
LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUlR/c6m
rH54IdEdukB8OhxmducccY5FxCShkK/o/ZcTdfaknfCtN0tWERlHDcMLokSIbW1w
c7qn6s5MCyxZid4aLD4JBNOIRM9BLUVnXjB2gndACoziunPH+T0mEZhjc9QRiBEo
1PYUcqosrr3GLw2yVhegEGQt7BCsO1DGMFMg+WvH12+PkLd+AFB00U7s8AuFsnqF
6FDq7NC0k5ESyEAZvZFIrVLMgUQhIYN5YC8f05f4tnw0VWVfUGoBadRFlB8G17UN
h7hVVU0vi0evtH/8f/NLkiKTEzOy4soJcLPYdXkJOuDBmFNe8Fl+WnnDKBoM611Z
LUAYzMC3cQCucQ==
-----END CERTIFICATE-----
Generated at Fri May 9 03:55:53 2025 by rpki-client