Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File:                     vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier:          ad2J+Tr7H4Em9zJSAn3ywfPLvhp27BOhv5t+zDa6hWg=
Subject key identifier:   77:0F:1F:7F:3C:9B:50:BE:7D:E2:06:26:41:30:04:56:F9:BF:15:A5
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer:       /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial:       0199FB0EE94B0A146C5FF6EDF20F2AF34B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number:          14AF
Signing time:             Sun 19 Oct 2025 06:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:22 +0000
Files and hashes:         1: Whjew0yK_XkX-CXlS_WNrILKiv0.roa (hash: SmkvTH7lLMGdIP5blssOJRhGTxEwF9y5k4ODBxTnWqc=)
                          2: r2up5PJgZjybD9vWfNuYIFaqnJY.roa (hash: GFLQGnpUdlWj7rWSa6w4p4+P1f3jR1CWJhiBGbeS5kc=)
                          3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: q++heXLbxGW/PsqCLPn/Pq9lVV+TKMGGVhtsUfW1pcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:e9:4b:0a:14:6c:5f:f6:ed:f2:0f:2a:f3:4b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
        Validity
            Not Before: Oct 19 06:01:22 2025 GMT
            Not After : Oct 20 06:01:22 2025 GMT
        Subject: CN=770f1f7f3c9b50be7de2062641300456f9bf15a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:14:64:56:57:e3:be:e6:5b:32:eb:8f:40:
                    d1:ba:a9:bd:a0:2a:b2:99:02:eb:5a:70:f5:1e:73:
                    02:23:bf:05:5f:21:ad:9e:3b:a3:8b:bd:ff:71:99:
                    64:45:21:60:44:71:e6:5b:0c:94:6a:2d:67:b6:a3:
                    d9:cf:d1:2a:28:b9:a8:71:3d:0b:01:54:64:f3:fb:
                    99:ff:4d:9b:be:73:a6:ed:6c:a0:cb:b2:9c:f5:88:
                    5a:78:8d:b1:1e:0b:03:5c:d6:c6:50:33:b1:7f:e0:
                    b1:0a:ed:f7:a6:e9:bf:ed:95:26:ae:95:d6:d0:cb:
                    42:df:e8:f8:af:4e:85:dd:d6:d1:8b:2e:15:9d:77:
                    db:20:a9:2a:16:11:8b:59:71:d1:a7:70:81:70:51:
                    e7:9c:8e:16:de:e5:73:eb:4e:5b:15:dd:6b:18:5a:
                    1b:93:9f:5c:ed:48:13:ed:b8:d3:a1:49:51:4e:35:
                    3f:73:3b:4c:32:a4:ed:24:03:ce:64:42:9d:e8:5f:
                    61:17:6a:61:3c:90:af:27:a2:ac:da:bc:63:7d:ef:
                    4f:af:e0:47:59:b3:3f:e0:62:e5:c3:95:65:0c:81:
                    29:d2:d3:7b:a7:2d:f2:52:ca:41:f0:4b:4c:ce:d5:
                    f7:da:59:4a:b5:e1:e2:0b:28:ce:5b:ca:58:6e:73:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0F:1F:7F:3C:9B:50:BE:7D:E2:06:26:41:30:04:56:F9:BF:15:A5
            X509v3 Authority Key Identifier:
                keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:94:fb:93:d9:5e:2c:f7:3d:eb:ee:f9:49:2a:84:2c:b4:ad:
         ca:8c:11:8c:4d:10:25:e5:7a:ac:f4:1f:da:11:81:4a:92:57:
         05:a0:71:eb:41:bd:8e:e0:4e:75:91:6b:6d:01:f9:c2:07:29:
         e3:0a:ed:6b:42:1c:e4:9e:b4:1f:f6:42:68:a3:3f:e8:72:a6:
         54:20:cc:a4:00:ba:7b:ad:b6:09:e0:04:a4:11:b6:95:8b:f8:
         55:cd:6c:0d:15:df:05:8c:b6:e1:f6:e8:b1:fc:ad:b8:33:44:
         cf:e7:ca:af:9b:80:ba:17:fa:8c:a3:ea:c2:7f:a3:c9:03:59:
         6c:78:d3:1c:01:5d:07:a7:39:ee:8d:36:8b:5c:a2:16:47:89:
         f0:bd:44:75:25:c3:68:36:4e:e5:f2:60:93:8a:40:d2:0b:f3:
         98:ca:6c:6b:54:e9:b1:f7:4a:d8:25:2a:83:af:a1:9c:07:cb:
         6b:6b:cc:a5:d3:e9:d3:3b:ac:4c:0a:e6:13:6b:d9:ee:d4:e1:
         9e:0a:95:76:69:1e:95:45:af:74:0a:a5:76:02:7a:a8:4c:5c:
         19:35:1d:e9:c4:6b:6a:da:d6:c5:aa:e9:be:54:69:d3:b3:67:
         9d:af:b6:fe:c4:a9:42:50:07:71:9d:d6:bc:2a:28:85:6a:8a:
         8b:4e:51:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7DulLChRsX/bt8g8q80uRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj
YjQ0MzAwHhcNMjUxMDE5MDYwMTIyWhcNMjUxMDIwMDYwMTIyWjAzMTEwLwYDVQQD
Eyg3NzBmMWY3ZjNjOWI1MGJlN2RlMjA2MjY0MTMwMDQ1NmY5YmYxNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDwUZFZX477mWzLrj0DRuqm9oCqy
mQLrWnD1HnMCI78FXyGtnjuji73/cZlkRSFgRHHmWwyUai1ntqPZz9EqKLmocT0L
AVRk8/uZ/02bvnOm7Wygy7Kc9YhaeI2xHgsDXNbGUDOxf+CxCu33pum/7ZUmrpXW
0MtC3+j4r06F3dbRiy4VnXfbIKkqFhGLWXHRp3CBcFHnnI4W3uVz605bFd1rGFob
k59c7UgT7bjToUlRTjU/cztMMqTtJAPOZEKd6F9hF2phPJCvJ6Ks2rxjfe9Pr+BH
WbM/4GLlw5VlDIEp0tN7py3yUspB8EtMztX32llKteHiCyjOW8pYbnPtkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcPH388m1C+feIGJkEwBFb5vxWlMB8GA1UdIwQY
MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt
MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4
LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZT7k9le
LPc96+75SSqELLStyowRjE0QJeV6rPQf2hGBSpJXBaBx60G9juBOdZFrbQH5wgcp
4wrta0Ic5J60H/ZCaKM/6HKmVCDMpAC6e622CeAEpBG2lYv4Vc1sDRXfBYy24fbo
sfytuDNEz+fKr5uAuhf6jKPqwn+jyQNZbHjTHAFdB6c57o02i1yiFkeJ8L1EdSXD
aDZO5fJgk4pA0gvzmMpsa1TpsfdK2CUqg6+hnAfLa2vMpdPp0zusTArmE2vZ7tTh
ngqVdmkelUWvdAqldgJ6qExcGTUd6cRratrWxarpvlRp07Nnna+2/sSpQlAHcZ3W
vCoohWqKi05RPg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:21 2025 by rpki-client