Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File:                     vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier:          M+VbVZ4MJ5/CJJNAEXy37UsO9urRo+5QkQ24qap4ecE=
Subject key identifier:   61:EB:9E:F9:8E:B5:46:63:F8:2C:A3:94:49:77:C1:1B:BD:E8:AF:D9
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer:       /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial:       0199FBEB895591837F7BFEEF6B60A7318905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number:          0661
Signing time:             Sun 19 Oct 2025 10:02:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:21 +0000
Files and hashes:         1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: fSj68EHtf1ZoZu1cv13ZV+XLaFCFlO0cWAIax0g9+6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:89:55:91:83:7f:7b:fe:ef:6b:60:a7:31:89:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
        Validity
            Not Before: Oct 19 10:02:21 2025 GMT
            Not After : Oct 20 10:02:21 2025 GMT
        Subject: CN=61eb9ef98eb54663f82ca3944977c11bbde8afd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:33:65:2c:3e:5a:b1:1f:8d:32:6a:25:63:c0:
                    b9:da:3a:3a:d4:ba:e8:4d:dd:68:09:7a:1a:c9:f6:
                    23:a3:bc:cc:34:47:ad:e2:c3:99:66:15:35:52:df:
                    46:5a:5e:3e:69:30:4d:1e:ff:38:f7:4a:58:6f:97:
                    05:b8:3a:2a:44:47:d5:36:4b:b2:fe:33:3e:5a:c9:
                    f3:05:c3:d8:32:df:e1:c3:48:4b:48:1b:b2:fa:9e:
                    39:71:c7:3b:77:64:fc:e7:f5:ea:28:f4:82:cc:51:
                    54:d7:54:01:de:a0:50:c6:8c:ad:82:20:8e:32:a7:
                    8e:a4:f6:b8:f7:99:d9:55:42:35:08:24:64:ca:e2:
                    ce:9c:29:31:a4:2e:bc:02:86:74:46:c0:db:0b:19:
                    b0:ed:47:8a:aa:1b:61:f0:09:fe:90:5f:c2:29:85:
                    72:23:4b:b9:7b:d8:86:b8:25:57:86:35:d3:a9:58:
                    a4:66:cf:3c:0f:21:c6:54:87:ae:c7:a3:51:7b:d5:
                    98:79:d3:31:6a:7a:32:35:62:dc:b2:0f:30:44:2d:
                    6c:c6:0c:42:ce:55:6e:2a:6d:8a:aa:ab:01:14:91:
                    9c:8a:ae:e2:97:5a:5e:2e:cf:1a:2d:30:93:7a:46:
                    a3:6c:da:9a:57:dd:61:de:29:f4:9b:95:fb:35:0b:
                    b6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:9E:F9:8E:B5:46:63:F8:2C:A3:94:49:77:C1:1B:BD:E8:AF:D9
            X509v3 Authority Key Identifier:
                keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:72:74:b4:68:d8:1f:ee:b1:58:9d:e5:94:aa:9a:42:c4:
         c5:7c:07:f2:3b:b6:57:5a:3b:d0:87:8e:13:3f:65:e4:35:b6:
         5e:4e:6b:c6:07:dc:0e:68:22:93:e4:ee:76:25:04:c5:47:40:
         08:36:1c:d4:1e:cd:1d:49:86:4b:f1:89:b2:e6:46:c6:f3:45:
         8e:c7:4f:93:fb:11:db:32:96:19:28:d9:5f:e8:3a:d7:c8:b5:
         fb:83:7b:60:fc:10:f0:fe:9e:ac:f2:0d:d4:8f:a3:c0:79:08:
         7a:60:01:be:de:ff:d1:9d:40:0a:7b:54:b2:ec:0a:9f:86:5b:
         ff:e4:f1:04:89:1e:d8:48:3f:cc:82:3b:26:bd:02:b4:f9:70:
         bb:46:ff:df:4d:cb:00:e3:c2:d5:1e:43:bc:2f:78:5f:fb:61:
         d7:17:75:1e:0a:95:97:7b:03:ed:a5:b0:8a:30:9b:ec:a8:bf:
         54:fd:0d:7d:04:c8:51:76:93:63:a5:ff:93:d2:ba:c5:e4:d2:
         c6:30:3c:e4:0e:29:61:74:1b:70:b6:a1:d0:3d:34:da:e8:e4:
         70:df:41:8f:e6:2e:b2:f4:57:cc:3a:13:b3:2e:1e:84:98:43:
         5c:5b:fe:d7:7b:49:89:f8:28:10:bc:73:40:81:ec:5c:9c:86:
         87:e4:c3:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764lVkYN/e/7va2CnMYkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUxMDE5MTAwMjIxWhcNMjUxMDIwMTAwMjIxWjAzMTEwLwYDVQQD
Eyg2MWViOWVmOThlYjU0NjYzZjgyY2EzOTQ0OTc3YzExYmJkZThhZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jNlLD5asR+NMmolY8C52jo61Lro
Td1oCXoayfYjo7zMNEet4sOZZhU1Ut9GWl4+aTBNHv8490pYb5cFuDoqREfVNkuy
/jM+WsnzBcPYMt/hw0hLSBuy+p45ccc7d2T85/XqKPSCzFFU11QB3qBQxoytgiCO
MqeOpPa495nZVUI1CCRkyuLOnCkxpC68AoZ0RsDbCxmw7UeKqhth8An+kF/CKYVy
I0u5e9iGuCVXhjXTqVikZs88DyHGVIeux6NRe9WYedMxanoyNWLcsg8wRC1sxgxC
zlVuKm2KqqsBFJGciq7il1peLs8aLTCTekajbNqaV91h3in0m5X7NQu27wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHrnvmOtUZj+CyjlEl3wRu96K/ZMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4tydLRo
2B/usVid5ZSqmkLExXwH8ju2V1o70IeOEz9l5DW2Xk5rxgfcDmgik+TudiUExUdA
CDYc1B7NHUmGS/GJsuZGxvNFjsdPk/sR2zKWGSjZX+g618i1+4N7YPwQ8P6erPIN
1I+jwHkIemABvt7/0Z1ACntUsuwKn4Zb/+TxBIke2Eg/zII7Jr0CtPlwu0b/303L
AOPC1R5DvC94X/th1xd1HgqVl3sD7aWwijCb7Ki/VP0NfQTIUXaTY6X/k9K6xeTS
xjA85A4pYXQbcLah0D002ujkcN9Bj+YusvRXzDoTsy4ehJhDXFv+13tJifgoELxz
QIHsXJyGh+TDpw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:07 2025 by rpki-client