Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
File:                     vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft (raw, json)
Hash identifier:          iZBBp39A1G/J7llkPA+60cXv28rd2g4FmiJ6T0dSE2s=
Subject key identifier:   09:B2:54:C6:AF:5C:53:C7:B7:77:56:15:68:A9:9D:49:93:33:C6:CD
Authority key identifier: BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1
Certificate issuer:       /CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
Certificate serial:       0198D473D9FC1637E41D382D64EA37227AD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
Manifest number:          0C7A
Signing time:             Sat 23 Aug 2025 01:03:38 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:38 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:38 +0000
Files and hashes:         1: 5xqkx7rxr0A4ZoZWTCOMeWbUwt0.roa (hash: 4Hck3JY+pm1ENmjLoSNCLwI2ygQA04QrM7UO64TPQ/E=)
                          2: Tf-7kei6W8Gb1yTlztC-z7hqkGM.roa (hash: A3Jg7NsFsBNEFPdV1BOzgwIAFoCzktMr6ou5P5ENzQU=)
                          3: vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl (hash: 9wk6ZTqFs6iy2oLGqyBrJLVVOeBvjhYYjgs8BNeSq+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:d9:fc:16:37:e4:1d:38:2d:64:ea:37:22:7a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc663c6e779dae9bdb046854f189fe8c5c3c32e1
        Validity
            Not Before: Aug 23 01:03:38 2025 GMT
            Not After : Aug 24 01:03:38 2025 GMT
        Subject: CN=09b254c6af5c53c7b777561568a99d499333c6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:7c:ec:ac:52:f6:e5:4e:72:3c:7a:b1:87:
                    67:d4:7b:b3:e0:0b:19:a6:85:48:86:47:b1:81:28:
                    35:aa:58:3b:a1:47:9a:30:f5:5c:b6:6a:a7:b0:7d:
                    6d:2d:db:a5:ba:7d:43:7b:39:3e:09:07:95:1e:b1:
                    4f:b5:e6:51:c7:cf:5e:11:ba:7b:c1:af:40:98:0a:
                    c1:ca:fb:09:cb:97:bf:1c:b3:4f:76:11:de:23:9e:
                    80:9b:b1:6d:eb:5a:04:64:0f:48:47:42:b0:ea:46:
                    4b:23:bd:8c:43:8d:77:01:1c:05:f2:80:b6:e9:a8:
                    04:bd:f5:9d:7a:41:62:7e:31:09:2b:9b:fe:97:95:
                    d1:a2:6a:f8:51:79:40:96:6a:4f:fa:b8:9b:d9:5d:
                    2b:d3:17:05:a0:44:57:99:43:c2:2b:49:0a:82:92:
                    d4:4f:48:24:b4:98:a5:6a:ce:d8:0f:03:8d:97:0f:
                    3f:58:7f:44:ab:61:32:18:2d:4a:75:2c:ce:9b:c0:
                    bb:1a:7b:ea:7d:9f:55:f5:4e:e1:c6:fa:70:52:08:
                    8c:10:da:2c:43:76:30:c1:dc:6a:da:75:3e:74:aa:
                    29:20:81:3f:18:cf:ba:53:0e:f6:07:50:25:bf:5a:
                    44:7b:9a:95:89:25:48:77:b1:a6:7a:9e:87:f0:37:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B2:54:C6:AF:5C:53:C7:B7:77:56:15:68:A9:9D:49:93:33:C6:CD
            X509v3 Authority Key Identifier:
                keyid:BC:66:3C:6E:77:9D:AE:9B:DB:04:68:54:F1:89:FE:8C:5C:3C:32:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY8bnedrpvbBGhU8Yn-jFw8MuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7a8f3f-304c-4a26-aeca-18bdfe8cc0cd/1/vGY8bnedrpvbBGhU8Yn-jFw8MuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a8:e3:21:d2:8d:8a:d2:12:06:76:bc:f9:58:9d:3a:17:d8:
         32:6f:eb:84:15:df:c5:4c:8b:53:05:f2:77:aa:12:5b:26:75:
         89:49:6a:ee:e8:fc:18:f7:1f:a2:68:1a:ab:71:02:10:fa:c8:
         89:ba:da:4c:30:3e:08:e4:c0:f7:6e:06:9e:ec:4e:78:26:9a:
         16:6f:80:eb:82:07:94:25:af:1e:21:62:67:64:b0:87:68:52:
         ea:66:4d:4c:7f:6a:d6:47:36:da:95:5c:45:52:7d:f6:e5:5a:
         68:3b:aa:e6:d0:ed:e5:1c:8a:63:ee:84:63:26:ce:ee:41:3e:
         d5:9b:d8:9e:39:50:da:ec:2b:dd:57:32:a5:60:eb:e5:0b:b4:
         4c:c2:37:96:18:91:67:2f:25:ae:b4:71:53:7c:4e:74:ed:bb:
         67:19:60:b5:29:2e:db:0d:68:d7:f0:73:ab:76:34:b5:ad:d6:
         3c:c5:9a:58:5f:6a:6c:2d:53:61:5a:79:b5:8c:cd:70:b9:98:
         48:05:00:5a:8e:1f:fb:53:be:64:9a:d2:d4:11:c5:86:b3:9c:
         e9:e4:b3:b1:4b:da:77:cd:e3:30:e5:bd:1a:e5:49:ac:be:ea:
         ad:26:8a:fe:da:f8:57:14:0b:ab:54:63:48:6a:4c:bb:b9:03:
         df:fa:95:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9n8FjfkHTgtZOo3InrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzYzZlNzc5ZGFlOWJkYjA0Njg1NGYxODlmZThjNWMz
YzMyZTEwHhcNMjUwODIzMDEwMzM4WhcNMjUwODI0MDEwMzM4WjAzMTEwLwYDVQQD
EygwOWIyNTRjNmFmNWM1M2M3Yjc3NzU2MTU2OGE5OWQ0OTkzMzNjNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhF87KxS9uVOcjx6sYdn1Huz4AsZ
poVIhkexgSg1qlg7oUeaMPVctmqnsH1tLdulun1Dezk+CQeVHrFPteZRx89eEbp7
wa9AmArByvsJy5e/HLNPdhHeI56Am7Ft61oEZA9IR0Kw6kZLI72MQ413ARwF8oC2
6agEvfWdekFifjEJK5v+l5XRomr4UXlAlmpP+rib2V0r0xcFoERXmUPCK0kKgpLU
T0gktJilas7YDwONlw8/WH9Eq2EyGC1KdSzOm8C7GnvqfZ9V9U7hxvpwUgiMENos
Q3Ywwdxq2nU+dKopIIE/GM+6Uw72B1Alv1pEe5qViSVId7Gmep6H8DfxyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmyVMavXFPHt3dWFWipnUmTM8bNMB8GA1UdIwQY
MBaAFLxmPG53na6b2wRoVPGJ/oxcPDLhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2Et
MThiZGZlOGNjMGNkLzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83YThmM2YtMzA0Yy00YTI2LWFlY2EtMThiZGZlOGNjMGNk
LzEvdkdZOGJuZWRycHZiQkdoVThZbi1qRnc4TXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKjjIdKN
itISBna8+VidOhfYMm/rhBXfxUyLUwXyd6oSWyZ1iUlq7uj8GPcfomgaq3ECEPrI
ibraTDA+COTA924GnuxOeCaaFm+A64IHlCWvHiFiZ2Swh2hS6mZNTH9q1kc22pVc
RVJ99uVaaDuq5tDt5RyKY+6EYybO7kE+1ZvYnjlQ2uwr3VcypWDr5Qu0TMI3lhiR
Zy8lrrRxU3xOdO27ZxlgtSku2w1o1/Bzq3Y0ta3WPMWaWF9qbC1TYVp5tYzNcLmY
SAUAWo4f+1O+ZJrS1BHFhrOc6eSzsUvad83jMOW9GuVJrL7qrSaK/tr4VxQLq1Rj
SGpMu7kD3/qV5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:40 2025 by rpki-client