Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          fOsccHeP/DKdn4xdDzLh9sxo4gbiDh0lhd/qXhBmtmc=
Subject key identifier:   F3:F0:4D:43:86:E9:E9:E5:41:A5:29:A4:7E:D0:49:DA:E6:FB:04:23
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       0198D473CDE0484B5FFCA961DCF0CE6D5852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          05C8
Signing time:             Sat 23 Aug 2025 01:03:35 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:35 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:35 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: Lzv5OJDxX747AhiG85gNklMvNiyk7gqS0JbLe5UPp7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:cd:e0:48:4b:5f:fc:a9:61:dc:f0:ce:6d:58:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Aug 23 01:03:35 2025 GMT
            Not After : Aug 24 01:03:35 2025 GMT
        Subject: CN=f3f04d4386e9e9e541a529a47ed049dae6fb0423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:a3:b5:b0:97:fb:0e:84:ed:61:5b:a0:d0:
                    96:1d:b4:b6:e1:08:eb:bc:44:87:0a:2c:0a:33:a8:
                    27:43:c2:d4:36:fb:10:ff:2a:5d:31:ae:fc:35:27:
                    e3:3f:ef:ac:60:c5:d2:db:e6:c1:1a:59:f5:a2:c5:
                    a5:c7:35:42:89:c5:1f:cf:f2:09:4f:f9:2f:03:69:
                    8b:9a:be:7a:14:03:5e:26:33:55:5c:bc:da:b0:10:
                    2b:0c:13:79:ad:24:7a:5b:f0:08:bd:bb:a1:ad:62:
                    84:a8:91:4d:72:89:fa:d5:ef:bc:a1:7e:58:ac:10:
                    10:33:cd:09:ad:c3:16:cf:c7:29:cc:34:e9:cc:cc:
                    13:92:9e:12:97:07:94:72:40:f4:84:e2:cd:d6:a8:
                    73:43:99:9b:22:bc:77:b8:34:4a:43:e3:bc:11:be:
                    7e:71:a4:99:01:a3:be:fc:dd:03:ae:3a:1b:62:35:
                    f6:53:2f:e4:40:27:d0:b0:d2:3b:0f:c1:b4:b0:f6:
                    88:bf:29:75:dd:74:09:83:f6:7e:62:4f:d4:ac:07:
                    22:d1:ec:5e:bb:19:a4:55:27:76:98:f7:11:4d:f6:
                    bb:4f:73:e4:31:36:de:51:f7:8e:b2:17:09:8c:c1:
                    28:83:6b:e1:e6:ae:d3:54:99:eb:5f:f6:64:38:64:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:4D:43:86:E9:E9:E5:41:A5:29:A4:7E:D0:49:DA:E6:FB:04:23
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:03:aa:3e:53:4e:4f:c9:11:57:c3:55:cb:95:a6:9b:cf:9e:
         00:0e:9a:f2:68:1a:4b:28:b3:d8:4f:a2:31:c8:e6:3f:cf:57:
         48:6f:96:1e:4b:91:4f:c1:9a:03:39:e6:51:d6:a3:d2:76:9e:
         3d:2f:d7:11:5f:ee:02:67:2b:8e:23:4a:a8:61:59:dc:1c:3b:
         7a:47:12:9d:f4:d0:8b:c4:b5:fc:8f:bb:25:ee:c1:0d:a4:ae:
         53:0f:48:21:87:d7:91:c9:48:02:c6:37:74:2a:19:24:d6:9c:
         fa:85:e7:0d:43:e7:48:3e:e6:ae:9a:c4:4d:ab:b1:fe:f2:f7:
         17:bc:04:7f:b3:07:d8:01:2f:69:a4:58:1a:46:42:58:90:6e:
         46:57:bb:26:df:d4:fd:4a:67:79:84:43:10:97:58:5e:02:10:
         73:4e:b0:10:17:85:1c:39:f2:15:b3:3f:36:77:1c:68:68:e1:
         b5:2f:f7:7f:5d:2a:e6:01:b1:98:29:38:22:90:7c:83:60:88:
         71:da:77:af:0d:9d:60:8f:09:70:70:df:7a:8f:c5:f8:e7:ab:
         f5:de:1f:c9:5d:f6:19:0a:9b:48:1a:a0:4a:0e:33:61:54:5d:
         b7:b5:87:29:49:e8:ae:b0:62:48:ee:7b:14:e2:02:97:62:d4:
         2a:5f:ad:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc83gSEtf/Klh3PDObVhSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUwODIzMDEwMzM1WhcNMjUwODI0MDEwMzM1WjAzMTEwLwYDVQQD
EyhmM2YwNGQ0Mzg2ZTllOWU1NDFhNTI5YTQ3ZWQwNDlkYWU2ZmIwNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iGjtbCX+w6E7WFboNCWHbS24Qjr
vESHCiwKM6gnQ8LUNvsQ/ypdMa78NSfjP++sYMXS2+bBGln1osWlxzVCicUfz/IJ
T/kvA2mLmr56FANeJjNVXLzasBArDBN5rSR6W/AIvbuhrWKEqJFNcon61e+8oX5Y
rBAQM80JrcMWz8cpzDTpzMwTkp4SlweUckD0hOLN1qhzQ5mbIrx3uDRKQ+O8Eb5+
caSZAaO+/N0DrjobYjX2Uy/kQCfQsNI7D8G0sPaIvyl13XQJg/Z+Yk/UrAci0exe
uxmkVSd2mPcRTfa7T3PkMTbeUfeOshcJjMEog2vh5q7TVJnrX/ZkOGR2UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPwTUOG6enlQaUppH7QSdrm+wQjMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgOqPlNO
T8kRV8NVy5Wmm8+eAA6a8mgaSyiz2E+iMcjmP89XSG+WHkuRT8GaAznmUdaj0nae
PS/XEV/uAmcrjiNKqGFZ3Bw7ekcSnfTQi8S1/I+7Je7BDaSuUw9IIYfXkclIAsY3
dCoZJNac+oXnDUPnSD7mrprETaux/vL3F7wEf7MH2AEvaaRYGkZCWJBuRle7Jt/U
/UpneYRDEJdYXgIQc06wEBeFHDnyFbM/NnccaGjhtS/3f10q5gGxmCk4IpB8g2CI
cdp3rw2dYI8JcHDfeo/F+Oer9d4fyV32GQqbSBqgSg4zYVRdt7WHKUnorrBiSO57
FOICl2LUKl+tig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:34 2025 by rpki-client