Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          pC9TrjHH6t6fShamIIOrJ2TxVR+j9khOkv0Qd6e69yE=
Subject key identifier:   D1:2A:ED:61:1C:99:20:3C:05:EF:45:A0:B1:FB:E1:56:B5:18:85:AB
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       0199FEEBAD5FD2BCC5A6B61E0722D60E48D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          1012
Signing time:             Mon 20 Oct 2025 00:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:22 +0000
Files and hashes:         1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
                          2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
                          3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: XbbD+2B3suk8cxrCmVHI6Y1tYKKCjTwP+NC718xs53I=)
                          4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:ad:5f:d2:bc:c5:a6:b6:1e:07:22:d6:0e:48:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Oct 20 00:01:22 2025 GMT
            Not After : Oct 21 00:01:22 2025 GMT
        Subject: CN=d12aed611c99203c05ef45a0b1fbe156b51885ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:82:34:ea:8b:4d:fe:f1:1b:c0:dc:4f:77:
                    87:9a:ff:5e:b0:cc:c1:6b:8d:e6:d6:c9:bf:49:19:
                    50:4e:fa:7d:01:6b:54:0a:cb:9b:7d:d1:65:94:85:
                    67:c5:98:d4:c8:54:29:03:b5:5f:9c:25:f6:95:6a:
                    6c:70:70:b2:c8:f2:24:01:ea:30:5c:70:1d:d6:7a:
                    ba:ac:f3:d8:91:a5:07:9e:13:cf:a4:bc:f4:5e:55:
                    59:43:9d:bb:3b:5a:da:0b:ab:1a:2d:d0:ae:f3:c9:
                    79:c2:4d:3c:c9:a1:bd:6c:eb:38:1e:a6:2c:56:63:
                    59:63:79:0c:4a:8d:8a:8b:60:45:d1:97:29:68:ac:
                    46:8b:27:42:c8:16:1e:29:c3:0b:7f:16:b9:f2:82:
                    3b:f7:b7:0d:75:63:c1:98:d5:63:bd:5e:c3:3b:b2:
                    18:0d:08:a0:6d:5e:e2:f0:41:44:54:fb:47:91:a1:
                    75:23:e5:de:5e:06:66:55:0a:c1:10:ad:e8:8c:1c:
                    ca:57:a7:8b:69:8b:9e:8e:8c:d5:c8:5b:ed:7e:4b:
                    a4:d2:f6:1d:8d:77:94:5c:7f:75:51:27:3a:08:37:
                    4e:6b:37:26:f5:41:da:7e:2a:eb:dc:fd:74:1a:f9:
                    de:d5:02:1b:f1:ea:a2:89:24:31:51:72:0d:53:cf:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:2A:ED:61:1C:99:20:3C:05:EF:45:A0:B1:FB:E1:56:B5:18:85:AB
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b8:62:cd:2f:17:fa:34:93:3a:21:99:f9:b6:7b:60:61:a1:
         25:5d:fd:91:ba:fc:13:cb:33:af:03:47:a9:16:5c:ed:11:81:
         09:6f:d2:d8:d1:a6:f4:ee:4f:45:aa:86:09:be:05:2e:f6:89:
         76:bc:e0:40:14:43:b5:04:c9:5c:74:29:a3:03:98:c0:a9:3a:
         15:9e:51:ad:15:40:65:9e:e7:34:73:08:91:15:ab:23:41:2f:
         a4:49:2e:ea:ce:fe:40:1c:9b:04:f5:0b:d5:96:7e:1d:c1:3b:
         0e:9a:de:97:49:4d:2e:58:b5:68:e1:0d:e5:28:c9:25:86:72:
         e2:fa:40:be:ed:e3:23:f8:8e:89:c0:42:e1:80:dd:b3:0f:c6:
         09:9e:55:a3:33:8a:61:39:71:be:29:e6:47:dd:2e:90:75:fe:
         e6:67:1d:35:94:f6:71:c6:b9:81:0b:9f:83:32:4e:84:fe:1a:
         23:8a:c6:a6:e0:81:08:14:0e:e3:6e:9b:67:5b:6a:08:ad:a8:
         ea:5f:fc:e7:0a:10:4a:e0:ee:73:e5:02:68:73:91:43:b8:d2:
         e3:28:7a:4d:e9:52:91:4b:6c:12:2f:96:71:91:ca:85:8b:c6:
         6a:11:04:a9:3d:ac:e1:53:38:48:29:19:6b:bd:93:0f:61:29:
         31:96:44:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+661f0rzFprYeByLWDkjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlY2VjNTMxZTVjMzc3NTZiODI4NjYzZjljYzIwYWQ2MjE3
NzEzYWMwHhcNMjUxMDIwMDAwMTIyWhcNMjUxMDIxMDAwMTIyWjAzMTEwLwYDVQQD
EyhkMTJhZWQ2MTFjOTkyMDNjMDVlZjQ1YTBiMWZiZTE1NmI1MTg4NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ6CNOqLTf7xG8DcT3eHmv9esMzB
a43m1sm/SRlQTvp9AWtUCsubfdFllIVnxZjUyFQpA7VfnCX2lWpscHCyyPIkAeow
XHAd1nq6rPPYkaUHnhPPpLz0XlVZQ527O1raC6saLdCu88l5wk08yaG9bOs4HqYs
VmNZY3kMSo2Ki2BF0ZcpaKxGiydCyBYeKcMLfxa58oI797cNdWPBmNVjvV7DO7IY
DQigbV7i8EFEVPtHkaF1I+XeXgZmVQrBEK3ojBzKV6eLaYuejozVyFvtfkuk0vYd
jXeUXH91USc6CDdOazcm9UHafirr3P10Gvne1QIb8eqiiSQxUXINU8+iKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEq7WEcmSA8Be9FoLH74Va1GIWrMB8GA1UdIwQY
MBaAFL7OxTHlw3dWuChmP5zCCtYhdxOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjkt
M2RmOWUyMWY0YmNjLzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8xYmNiOGItYTNmOC00OGNjLThkYjktM2RmOWUyMWY0YmNj
LzEvdnM3Rk1lWERkMWE0S0dZX25NSUsxaUYzRTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7hizS8X
+jSTOiGZ+bZ7YGGhJV39kbr8E8szrwNHqRZc7RGBCW/S2NGm9O5PRaqGCb4FLvaJ
drzgQBRDtQTJXHQpowOYwKk6FZ5RrRVAZZ7nNHMIkRWrI0EvpEku6s7+QBybBPUL
1ZZ+HcE7Dprel0lNLli1aOEN5SjJJYZy4vpAvu3jI/iOicBC4YDdsw/GCZ5VozOK
YTlxvinmR90ukHX+5mcdNZT2cca5gQufgzJOhP4aI4rGpuCBCBQO426bZ1tqCK2o
6l/85woQSuDuc+UCaHORQ7jS4yh6TelSkUtsEi+WcZHKhYvGahEEqT2s4VM4SCkZ
a72TD2EpMZZEuQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:28 2025 by rpki-client