Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File:                     vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier:          lcwBJecMyoDJntDSv8ZyAFtMcrQ+YdvRwRFaHp7XnKs=
Subject key identifier:   67:B8:BA:B4:DC:F5:C1:18:AB:F3:45:4B:EE:B5:85:63:7C:C0:E7:16
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer:       /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial:       0198D515AD53C0627D537CABBCAF86CCD5D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number:          0A44
Signing time:             Sat 23 Aug 2025 04:00:24 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:24 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:24 +0000
Files and hashes:         1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: shm0m/5o1qGiw2BKET2UlDNIg3dd4n5dOq6kSlFW8AU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:ad:53:c0:62:7d:53:7c:ab:bc:af:86:cc:d5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
        Validity
            Not Before: Aug 23 04:00:24 2025 GMT
            Not After : Aug 24 04:00:24 2025 GMT
        Subject: CN=67b8bab4dcf5c118abf3454beeb585637cc0e716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:dd:54:7e:4b:91:63:1b:ad:6e:b7:a0:36:
                    ee:ce:ea:80:f5:2e:bc:26:ad:38:26:6c:14:8a:38:
                    c8:c2:92:82:42:a0:d7:5a:22:b4:5a:36:bd:2b:82:
                    11:0a:32:68:4f:06:ec:aa:86:45:99:f2:58:ab:c7:
                    63:42:5a:79:36:3e:60:44:b5:6d:45:0f:63:f1:66:
                    ec:5e:d2:16:d6:b7:b7:e2:3a:fd:53:61:2c:55:cf:
                    7d:f9:73:f6:5b:d7:e7:01:b0:ce:65:86:c1:a4:24:
                    71:76:c7:88:0d:25:b2:94:35:4f:9f:1b:18:cd:23:
                    b0:b7:f4:43:71:62:fc:eb:f5:05:8f:e2:ed:26:de:
                    38:51:0a:e1:be:5d:40:14:a0:09:56:7b:00:54:bd:
                    7f:fb:64:16:e2:56:bd:b5:da:ca:26:0b:5b:6b:df:
                    07:df:6c:d6:c0:99:03:6b:99:57:cc:12:3d:57:3f:
                    6d:bb:95:e3:76:e6:11:c2:b4:a8:ab:33:b6:59:68:
                    fe:a2:64:62:1c:58:c7:90:70:69:54:4a:ba:7f:40:
                    10:99:90:a0:18:89:19:ed:d1:af:f8:8b:2b:75:d7:
                    a8:d6:f3:b4:91:5f:03:53:ec:29:6d:e3:76:97:ba:
                    13:f2:c1:63:d3:d5:36:8f:32:85:5d:7a:cf:03:ba:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:BA:B4:DC:F5:C1:18:AB:F3:45:4B:EE:B5:85:63:7C:C0:E7:16
            X509v3 Authority Key Identifier:
                keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4d:35:e3:50:a6:63:57:d0:67:1e:d9:29:17:93:15:0e:39:
         ba:f3:39:3c:99:b6:80:cd:02:4d:7c:55:e3:0c:91:9e:1a:07:
         fe:97:63:be:cc:81:7f:ae:41:af:f5:3f:fd:2d:1f:e3:ec:36:
         68:f5:dd:a5:24:44:77:b7:8c:18:5c:27:a3:de:a1:43:2c:6e:
         08:cf:ff:d3:3c:3a:85:2e:e1:82:46:09:68:88:2d:8e:9c:b1:
         d3:76:d2:75:80:bc:1b:83:20:c7:5f:02:71:fd:14:88:ba:cd:
         69:62:a9:97:34:03:38:ec:da:fb:5c:53:55:96:55:db:7d:c8:
         10:5d:3d:17:92:95:48:1a:2e:ea:b6:79:c1:00:ba:72:79:38:
         58:56:82:e8:e7:e9:ab:56:a7:bc:a4:bb:84:66:28:2b:1e:a8:
         9f:f4:6b:8f:37:3b:4d:93:57:41:1e:0e:5a:2b:47:29:59:0a:
         ab:fc:4f:c4:14:97:ee:76:9b:a3:00:47:b2:39:c4:25:c8:f5:
         2f:3d:6a:36:4d:a0:ce:1f:1c:44:5a:3b:12:fa:de:bf:0d:0a:
         e1:e9:83:68:89:24:9f:0b:d2:38:40:c2:50:02:17:af:37:6d:
         a3:0a:a6:ed:70:f0:7c:03:6b:66:dd:85:92:c0:4a:3c:bf:80:
         e0:4d:50:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFa1TwGJ9U3yrvK+GzNXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi
ZWUzNjgwHhcNMjUwODIzMDQwMDI0WhcNMjUwODI0MDQwMDI0WjAzMTEwLwYDVQQD
Eyg2N2I4YmFiNGRjZjVjMTE4YWJmMzQ1NGJlZWI1ODU2MzdjYzBlNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy3dVH5LkWMbrW63oDbuzuqA9S68
Jq04JmwUijjIwpKCQqDXWiK0Wja9K4IRCjJoTwbsqoZFmfJYq8djQlp5Nj5gRLVt
RQ9j8WbsXtIW1re34jr9U2EsVc99+XP2W9fnAbDOZYbBpCRxdseIDSWylDVPnxsY
zSOwt/RDcWL86/UFj+LtJt44UQrhvl1AFKAJVnsAVL1/+2QW4la9tdrKJgtba98H
32zWwJkDa5lXzBI9Vz9tu5XjduYRwrSoqzO2WWj+omRiHFjHkHBpVEq6f0AQmZCg
GIkZ7dGv+Isrddeo1vO0kV8DU+wpbeN2l7oT8sFj09U2jzKFXXrPA7r+ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe4urTc9cEYq/NFS+61hWN8wOcWMB8GA1UdIwQY
MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt
OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl
LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE0141Cm
Y1fQZx7ZKReTFQ45uvM5PJm2gM0CTXxV4wyRnhoH/pdjvsyBf65Br/U//S0f4+w2
aPXdpSREd7eMGFwno96hQyxuCM//0zw6hS7hgkYJaIgtjpyx03bSdYC8G4Mgx18C
cf0UiLrNaWKplzQDOOza+1xTVZZV233IEF09F5KVSBou6rZ5wQC6cnk4WFaC6Ofp
q1anvKS7hGYoKx6on/Rrjzc7TZNXQR4OWitHKVkKq/xPxBSX7nabowBHsjnEJcj1
Lz1qNk2gzh8cRFo7Evrevw0K4emDaIkknwvSOEDCUAIXrzdtowqm7XDwfANrZt2F
ksBKPL+A4E1Qvg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:51 2025 by rpki-client