Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier:          BnSAMruqstsKKbJkJpA3VFCohj74VGBO3NSRw0Ml7rg=
Subject key identifier:   C9:55:81:A1:48:28:0A:F7:9F:76:71:FA:60:79:5F:C7:FE:A4:02:7B
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer:       /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial:       0198D7E1438C9BD1D19309FF01F1212A61B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number:          1279
Signing time:             Sat 23 Aug 2025 17:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:00 +0000
Files and hashes:         1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
                          2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: 6P+M8ulPKcmI6CqZLnYY6FE3U2P+g70Cfw1KQXvSLbA=)
                          3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:43:8c:9b:d1:d1:93:09:ff:01:f1:21:2a:61:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Validity
            Not Before: Aug 23 17:02:00 2025 GMT
            Not After : Aug 24 17:02:00 2025 GMT
        Subject: CN=c95581a148280af79f7671fa60795fc7fea4027b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fe:ba:f7:0f:5f:c2:23:55:f8:75:d4:16:59:
                    b1:c3:0c:34:20:1d:90:49:5b:4b:cd:ce:c4:2f:97:
                    15:3c:63:82:ae:fe:9b:4f:06:76:50:b6:c6:1a:78:
                    bb:97:90:e5:34:b8:d1:80:b1:a7:63:f0:66:27:ae:
                    18:c2:e6:ca:85:d8:6f:40:19:78:8f:b1:48:e7:6b:
                    40:40:1d:21:2c:ab:d0:8a:22:16:00:2a:4f:09:6a:
                    75:6a:f7:c7:bc:da:59:63:2f:18:8d:9f:9b:ab:36:
                    9e:e4:c4:12:60:a2:62:66:56:c0:ab:5f:96:9e:1a:
                    4d:f5:b0:7c:16:cf:e3:9b:c3:54:d4:ce:4c:a0:fa:
                    c1:dc:50:8a:03:e9:68:5e:ab:52:bf:8a:8a:90:65:
                    53:c6:8f:1e:c5:fb:87:b4:49:7e:36:7b:ad:f2:fa:
                    86:fe:50:6f:01:f4:63:7b:d3:61:ba:87:8c:35:fc:
                    ee:90:b5:64:39:d0:93:b2:84:78:bc:d0:9a:2e:f8:
                    07:8b:bf:aa:a4:f7:ce:16:23:2f:0e:d2:c9:24:38:
                    bd:de:41:28:7d:17:19:9a:69:79:e1:b2:20:c0:d1:
                    8d:23:54:f4:d9:da:59:68:3d:b5:f6:fb:9b:a6:4d:
                    77:49:76:4a:d0:50:3f:f6:d3:62:2d:85:87:21:c7:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:55:81:A1:48:28:0A:F7:9F:76:71:FA:60:79:5F:C7:FE:A4:02:7B
            X509v3 Authority Key Identifier:
                keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:d0:0c:75:fe:aa:49:d9:ab:a6:6e:8d:ca:00:a9:24:4c:
         99:af:84:b9:ba:5c:cc:dd:94:b3:e8:4b:df:11:e3:c3:e8:75:
         ba:df:3b:a4:7d:f1:b2:8e:88:37:45:86:99:91:44:99:75:c9:
         94:fb:52:fe:26:98:49:9d:06:11:cc:a1:d3:b5:bf:00:a2:36:
         50:89:04:c1:66:f9:a0:f0:6b:ba:cb:78:af:6c:f2:3b:e2:66:
         5f:75:66:1a:9d:34:1f:24:57:41:20:3c:d3:8f:a0:37:7c:62:
         8a:c7:d7:88:73:e4:b2:68:1e:52:96:18:5b:77:60:9a:da:5b:
         be:e8:51:56:3f:11:38:38:89:27:7a:72:b7:82:74:1d:9e:e0:
         d6:25:00:4f:7c:15:93:b0:97:f8:28:bd:57:58:ec:9a:7a:1b:
         33:0a:c9:af:63:ec:eb:06:0f:70:cc:92:61:96:a5:55:cf:92:
         01:a3:a0:3b:51:8b:4d:9e:56:9c:36:bb:db:62:36:ca:c3:36:
         55:99:5b:ec:d4:a6:c6:60:60:8a:4b:e6:59:b1:b9:0a:c2:72:
         96:eb:78:6d:13:d7:54:c7:b7:d2:40:7a:d9:6d:d9:ac:fb:9f:
         84:72:b6:34:28:15:e5:73:0d:c7:ce:ba:cb:22:82:ab:bc:9c:
         02:72:68:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjX4UOMm9HRkwn/AfEhKmGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi
NjlhMmMwHhcNMjUwODIzMTcwMjAwWhcNMjUwODI0MTcwMjAwWjAzMTEwLwYDVQQD
EyhjOTU1ODFhMTQ4MjgwYWY3OWY3NjcxZmE2MDc5NWZjN2ZlYTQwMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6P669w9fwiNV+HXUFlmxwww0IB2Q
SVtLzc7EL5cVPGOCrv6bTwZ2ULbGGni7l5DlNLjRgLGnY/BmJ64YwubKhdhvQBl4
j7FI52tAQB0hLKvQiiIWACpPCWp1avfHvNpZYy8YjZ+bqzae5MQSYKJiZlbAq1+W
nhpN9bB8Fs/jm8NU1M5MoPrB3FCKA+loXqtSv4qKkGVTxo8exfuHtEl+Nnut8vqG
/lBvAfRje9NhuoeMNfzukLVkOdCTsoR4vNCaLvgHi7+qpPfOFiMvDtLJJDi93kEo
fRcZmml54bIgwNGNI1T02dpZaD219vubpk13SXZK0FA/9tNiLYWHIcfXrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlVgaFIKAr3n3Zx+mB5X8f+pAJ7MB8GA1UdIwQY
MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt
NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm
LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGfQDHX+
qknZq6ZujcoAqSRMma+EubpczN2Us+hL3xHjw+h1ut87pH3xso6IN0WGmZFEmXXJ
lPtS/iaYSZ0GEcyh07W/AKI2UIkEwWb5oPBrust4r2zyO+JmX3VmGp00HyRXQSA8
04+gN3xiisfXiHPksmgeUpYYW3dgmtpbvuhRVj8RODiJJ3pyt4J0HZ7g1iUAT3wV
k7CX+Ci9V1jsmnobMwrJr2Ps6wYPcMySYZalVc+SAaOgO1GLTZ5WnDa722I2ysM2
VZlb7NSmxmBgikvmWbG5CsJylut4bRPXVMe30kB62W3ZrPufhHK2NCgV5XMNx866
yyKCq7ycAnJo/w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:06 2025 by rpki-client