Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          gZuw3Z7HKmUPS5Iays0dvkmScPqQK8+rjhJHuQz/7wg=
Subject key identifier:   0D:1A:63:9F:DC:C6:81:99:5E:69:9C:3A:1C:8C:D8:4C:2F:98:8D:0A
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       0198D54DC16AB8FC84E62F978DEE91044595
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          0264
Signing time:             Sat 23 Aug 2025 05:01:39 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:39 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:39 +0000
Files and hashes:         1: l_d8GmTWs7fC-DqkKIN-YYLDZHQ.roa (hash: bn8+7DUFYeBX/KvUpOKKsXGjyr0Z1jGCfiXQ85NTHVY=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: H2mzrOyNv8eu0VQsSaO8GBE3WlcsagLTguTOeZouq64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:c1:6a:b8:fc:84:e6:2f:97:8d:ee:91:04:45:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Aug 23 05:01:39 2025 GMT
            Not After : Aug 24 05:01:39 2025 GMT
        Subject: CN=0d1a639fdcc681995e699c3a1c8cd84c2f988d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f9:96:60:46:28:43:48:b2:45:58:30:16:a9:
                    61:a2:32:dd:c4:bf:ec:61:dc:a8:1c:e9:ff:70:c1:
                    e2:5f:f0:9a:2c:72:f9:ef:2d:9d:b0:97:10:6a:b6:
                    68:35:9b:26:15:2c:48:94:b9:e2:37:d2:c0:4a:2f:
                    9b:f8:96:07:b7:b9:ac:12:90:eb:85:70:c4:2c:56:
                    59:c8:e0:46:57:6d:74:66:50:4e:e3:94:2d:ab:9f:
                    cb:3d:60:65:b5:b5:fd:64:2d:28:22:a3:41:8e:09:
                    68:96:5c:9d:ea:70:80:94:51:69:6c:79:81:67:ec:
                    a0:b3:76:77:69:06:b7:53:42:8d:57:56:95:3f:e3:
                    8a:64:cd:8d:ee:b8:35:0e:b4:b0:e7:47:86:2f:39:
                    31:a4:dc:0c:0c:b9:58:8d:ae:3f:85:82:ce:72:72:
                    de:3e:c5:f4:98:18:55:1f:7d:58:19:d0:2c:35:9d:
                    ef:12:17:45:2c:04:2f:44:18:7d:01:33:02:6a:96:
                    30:29:a7:a5:96:6a:7d:ae:c2:2f:d2:85:2e:77:fb:
                    31:86:eb:c6:bb:1c:12:40:7a:6d:f7:f1:cc:30:93:
                    a7:0b:1e:54:19:3b:de:10:6c:6e:da:d0:56:b8:ed:
                    43:f0:b4:2e:91:01:68:a3:1e:7c:5b:bd:e9:4e:8a:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1A:63:9F:DC:C6:81:99:5E:69:9C:3A:1C:8C:D8:4C:2F:98:8D:0A
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f8:a6:21:a1:22:14:ea:f9:db:55:a1:c5:b0:ec:92:10:e9:
         45:a7:81:31:30:21:fe:27:89:86:2b:52:8c:61:ae:77:73:77:
         0f:bf:10:4c:90:af:63:57:c0:8e:59:53:23:d6:43:41:8e:b8:
         f9:59:5f:fd:bb:9a:7a:fc:e8:18:66:63:02:ac:95:0b:69:f4:
         b1:c0:d8:c5:f6:ab:48:8b:01:61:a9:1a:c4:c7:8b:34:96:77:
         42:f4:e1:15:77:14:46:d9:97:3a:08:a7:1f:6f:a4:68:0e:e0:
         a4:b3:78:2a:5b:12:8e:0a:d6:a5:53:4a:52:f3:ee:e4:51:95:
         36:d6:de:73:69:17:3a:b8:26:ec:98:25:fd:2d:e7:43:c8:5c:
         1e:ef:0a:c9:e8:19:4d:b8:03:86:40:98:44:56:80:58:b6:34:
         b9:42:21:5b:9a:94:98:90:c3:26:f8:71:83:44:e3:ef:e1:6d:
         a0:4f:d3:25:cf:cd:75:ae:0f:ba:30:f3:8b:66:76:30:69:e2:
         d6:26:22:ef:0c:33:d6:44:6b:3a:6b:1e:8d:52:fe:61:31:c7:
         b7:5e:c9:ad:63:0c:fb:f5:96:06:7c:e7:c1:65:5d:de:a5:38:
         f9:42:56:c1:3e:5d:39:90:e6:ae:7f:24:f6:f4:82:78:04:09:
         c0:43:84:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcFquPyE5i+Xje6RBEWVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZWYxMzhjNjJiODE3NGM2YTgwODMwNmVkYTU3ZTkyODA1
ZGU5ODUwHhcNMjUwODIzMDUwMTM5WhcNMjUwODI0MDUwMTM5WjAzMTEwLwYDVQQD
EygwZDFhNjM5ZmRjYzY4MTk5NWU2OTljM2ExYzhjZDg0YzJmOTg4ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfmWYEYoQ0iyRVgwFqlhojLdxL/s
YdyoHOn/cMHiX/CaLHL57y2dsJcQarZoNZsmFSxIlLniN9LASi+b+JYHt7msEpDr
hXDELFZZyOBGV210ZlBO45Qtq5/LPWBltbX9ZC0oIqNBjglollyd6nCAlFFpbHmB
Z+ygs3Z3aQa3U0KNV1aVP+OKZM2N7rg1DrSw50eGLzkxpNwMDLlYja4/hYLOcnLe
PsX0mBhVH31YGdAsNZ3vEhdFLAQvRBh9ATMCapYwKaellmp9rsIv0oUud/sxhuvG
uxwSQHpt9/HMMJOnCx5UGTveEGxu2tBWuO1D8LQukQFoox58W73pTopF9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0aY5/cxoGZXmmcOhyM2EwvmI0KMB8GA1UdIwQY
MBaAFL7vE4xiuBdMaoCDBu2lfpKAXemFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYt
NTcyNzAwODJmZTBiLzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mNGU0ZjEtYjdmZi00NzgxLWI5NzYtNTcyNzAwODJmZTBi
LzEvdnU4VGpHSzRGMHhxZ0lNRzdhVi1rb0JkNllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfimIaEi
FOr521WhxbDskhDpRaeBMTAh/ieJhitSjGGud3N3D78QTJCvY1fAjllTI9ZDQY64
+Vlf/buaevzoGGZjAqyVC2n0scDYxfarSIsBYakaxMeLNJZ3QvThFXcURtmXOgin
H2+kaA7gpLN4KlsSjgrWpVNKUvPu5FGVNtbec2kXOrgm7Jgl/S3nQ8hcHu8KyegZ
TbgDhkCYRFaAWLY0uUIhW5qUmJDDJvhxg0Tj7+FtoE/TJc/Nda4PujDzi2Z2MGni
1iYi7wwz1kRrOmsejVL+YTHHt17JrWMM+/WWBnznwWVd3qU4+UJWwT5dOZDmrn8k
9vSCeAQJwEOE5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:50 2025 by rpki-client