Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
File:                     VkmqAU6M8795JOd1h9CnyMqhxJc.mft (raw, json)
Hash identifier:          Nq8pXz8cSk/6ivjTisqoGT+f88xOvYNEBU5SicyCTv0=
Subject key identifier:   17:3B:4F:01:10:4B:12:97:64:36:68:1C:8C:00:A7:51:A1:7E:C0:68
Authority key identifier: 56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97
Certificate issuer:       /CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
Certificate serial:       0199FC58EB8FA1959EDCD3560C3D7E330BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
Manifest number:          0B4C
Signing time:             Sun 19 Oct 2025 12:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:49 +0000
Files and hashes:         1: VkmqAU6M8795JOd1h9CnyMqhxJc.crl (hash: HXAijACFFZSAY/d7me8tx2Ko/Ve1XWmdUVJPMmrVcDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:eb:8f:a1:95:9e:dc:d3:56:0c:3d:7e:33:0b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5649aa014e8cf3bf7924e77587d0a7c8caa1c497
        Validity
            Not Before: Oct 19 12:01:49 2025 GMT
            Not After : Oct 20 12:01:49 2025 GMT
        Subject: CN=173b4f01104b12976436681c8c00a751a17ec068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:bc:ac:72:0c:e0:24:4e:e7:48:0e:d9:4b:
                    b8:d2:4c:83:7d:95:09:87:d2:73:ec:d4:b3:39:8b:
                    b2:82:43:c2:97:74:64:b1:83:ee:80:ae:b0:88:f9:
                    ef:78:e6:7d:56:e2:10:a2:c1:0f:59:bf:37:0d:01:
                    0d:e5:74:b1:0e:29:87:90:0b:08:7e:df:35:6a:4b:
                    2e:0e:99:52:90:7a:c8:1a:14:a3:a9:48:69:bb:66:
                    91:bc:c8:c8:73:82:57:30:2e:8c:63:78:9d:e9:a6:
                    7e:f1:5c:32:dd:44:64:80:2b:33:13:3f:8e:1f:60:
                    3d:1e:bb:73:ee:49:9f:80:3a:d1:e1:5d:40:fe:c5:
                    16:3f:02:70:64:73:4a:36:08:2f:6e:b5:43:02:4f:
                    f5:ab:51:2f:f6:95:c7:21:3c:8e:7f:78:8c:ff:ac:
                    c1:fd:a4:67:60:1c:64:55:1b:ca:e2:41:70:a9:74:
                    3f:a6:25:cd:a5:23:3d:54:9f:42:60:78:eb:60:da:
                    5b:85:63:a0:33:7c:b6:04:0a:d7:0d:00:83:19:fd:
                    a6:15:30:28:af:02:7c:6a:5a:47:9c:1f:f8:23:65:
                    18:5b:f2:ef:2d:fa:a9:ee:32:34:28:9b:10:02:a0:
                    c7:08:e7:17:c9:f9:67:17:e9:ae:6b:2b:94:1c:5c:
                    e8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3B:4F:01:10:4B:12:97:64:36:68:1C:8C:00:A7:51:A1:7E:C0:68
            X509v3 Authority Key Identifier:
                keyid:56:49:AA:01:4E:8C:F3:BF:79:24:E7:75:87:D0:A7:C8:CA:A1:C4:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkmqAU6M8795JOd1h9CnyMqhxJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9d2907-0a9c-4e23-a8f8-e8860da10038/1/VkmqAU6M8795JOd1h9CnyMqhxJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:64:bb:3a:09:c9:67:41:d8:91:47:91:e1:05:30:41:e3:81:
         26:7b:30:fa:0c:a2:a5:e5:fc:6f:63:1d:26:6c:6b:1d:f6:82:
         d2:b0:17:25:fd:ae:8a:c4:e3:fa:cb:2c:63:1f:81:e5:0c:8a:
         c2:a7:3e:ff:d5:cd:c9:ad:a0:d2:9d:6a:c9:22:f4:09:60:df:
         91:62:68:20:18:e1:63:d4:fc:a4:93:85:4c:35:92:44:c1:e9:
         64:2f:c6:1e:c5:f6:e1:fd:50:4c:9e:0f:c5:f3:04:a7:f9:29:
         4c:95:df:83:f2:9c:6c:ce:47:ca:b1:15:0a:38:b7:54:c7:8c:
         dc:64:69:dd:76:21:bd:0c:a9:ae:c1:e8:57:10:89:4e:b7:e7:
         42:b5:9e:f7:2e:b4:f5:0f:02:53:c6:58:8f:5c:6f:fb:78:d6:
         35:9d:ca:f4:36:16:44:1f:78:8a:f4:83:dd:7a:57:f7:83:b9:
         20:6e:f3:15:5a:f6:a9:d4:d3:56:dc:fe:25:54:7f:13:c2:53:
         6a:94:26:26:5f:05:26:c0:ee:96:f9:f4:dc:35:54:43:90:bb:
         56:75:34:a3:97:5a:53:cb:0e:0d:a4:56:a7:1d:5a:04:94:3e:
         e5:74:ca:ec:3a:d5:65:56:b1:69:89:27:df:98:0c:69:c6:28:
         d7:4f:94:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WOuPoZWe3NNWDD1+MwutMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDlhYTAxNGU4Y2YzYmY3OTI0ZTc3NTg3ZDBhN2M4Y2Fh
MWM0OTcwHhcNMjUxMDE5MTIwMTQ5WhcNMjUxMDIwMTIwMTQ5WjAzMTEwLwYDVQQD
EygxNzNiNGYwMTEwNGIxMjk3NjQzNjY4MWM4YzAwYTc1MWExN2VjMDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzK8rHIM4CRO50gO2Uu40kyDfZUJ
h9Jz7NSzOYuygkPCl3RksYPugK6wiPnveOZ9VuIQosEPWb83DQEN5XSxDimHkAsI
ft81aksuDplSkHrIGhSjqUhpu2aRvMjIc4JXMC6MY3id6aZ+8Vwy3URkgCszEz+O
H2A9Hrtz7kmfgDrR4V1A/sUWPwJwZHNKNggvbrVDAk/1q1Ev9pXHITyOf3iM/6zB
/aRnYBxkVRvK4kFwqXQ/piXNpSM9VJ9CYHjrYNpbhWOgM3y2BArXDQCDGf2mFTAo
rwJ8alpHnB/4I2UYW/LvLfqp7jI0KJsQAqDHCOcXyflnF+muayuUHFzokwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc7TwEQSxKXZDZoHIwAp1GhfsBoMB8GA1UdIwQY
MBaAFFZJqgFOjPO/eSTndYfQp8jKocSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4Zjgt
ZTg4NjBkYTEwMDM4LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZDI5MDctMGE5Yy00ZTIzLWE4ZjgtZTg4NjBkYTEwMDM4
LzEvVmttcUFVNk04Nzk1Sk9kMWg5Q255TXFoeEpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmS7OgnJ
Z0HYkUeR4QUwQeOBJnsw+gyipeX8b2MdJmxrHfaC0rAXJf2uisTj+sssYx+B5QyK
wqc+/9XNya2g0p1qySL0CWDfkWJoIBjhY9T8pJOFTDWSRMHpZC/GHsX24f1QTJ4P
xfMEp/kpTJXfg/KcbM5HyrEVCji3VMeM3GRp3XYhvQyprsHoVxCJTrfnQrWe9y60
9Q8CU8ZYj1xv+3jWNZ3K9DYWRB94ivSD3XpX94O5IG7zFVr2qdTTVtz+JVR/E8JT
apQmJl8FJsDulvn03DVUQ5C7VnU0o5daU8sODaRWpx1aBJQ+5XTK7DrVZVaxaYkn
35gMacYo10+Umw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:24 2025 by rpki-client