Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          a6p+t3tqeRURffumOt6F6M6HJolBNkABl6lNQn96Q58=
Subject key identifier:   35:FE:0F:BD:DA:02:E9:9B:25:19:9C:6F:CC:FE:97:37:17:1B:C2:76
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       0198D69863123A6ADD65A191B0799F0186A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          12BA
Signing time:             Sat 23 Aug 2025 11:02:47 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:47 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:47 +0000
Files and hashes:         1: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: g6KvyplF2T+NZdqMuEn+mUDheGgDbF8++GtrLKaBzTc=)
                          2: zAJ4z_rLfNTVDiMWL6ncN_yYa24.roa (hash: EtILhqnqDOPzVUQWUC5GlrRe7wnUPr/w8yX9c4PVZr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:63:12:3a:6a:dd:65:a1:91:b0:79:9f:01:86:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: Aug 23 11:02:47 2025 GMT
            Not After : Aug 24 11:02:47 2025 GMT
        Subject: CN=35fe0fbdda02e99b25199c6fccfe9737171bc276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:ba:0a:84:3a:cb:3c:a0:a4:47:0d:40:1c:
                    7b:07:fe:0a:d5:3f:52:94:36:bb:9b:3b:89:d4:6f:
                    81:b1:e3:79:0e:4b:03:49:fd:84:29:9b:48:97:af:
                    b8:d2:02:45:48:e3:17:36:d1:45:5e:38:12:cf:78:
                    fb:f3:3d:06:8a:d1:cd:6a:44:a6:7d:cb:1d:f0:1c:
                    7e:6c:28:36:a7:71:c1:56:df:53:df:48:5c:0c:27:
                    83:85:db:94:f2:6d:d0:af:d7:ac:b6:92:d8:31:84:
                    cf:ab:66:fb:ab:86:96:da:12:73:02:9e:47:43:e3:
                    c4:8f:3b:20:c2:d9:5c:91:81:52:6d:c7:0c:cd:35:
                    f0:a3:d6:24:f4:69:43:d0:9a:fa:b3:8a:14:7a:a9:
                    ae:df:49:e2:de:5d:df:a9:83:89:44:d2:08:56:9a:
                    2e:bd:1f:e3:e2:e3:11:45:19:9c:eb:04:44:78:e9:
                    bc:4f:37:0f:aa:8a:58:90:72:0a:fa:0b:75:be:29:
                    54:1c:0a:d0:84:97:61:92:8b:e6:d7:10:09:dd:92:
                    8c:aa:21:e6:b1:e7:dc:e9:4f:80:00:d3:d2:26:99:
                    99:b2:fa:c1:c1:e0:c0:a8:4a:44:48:f7:f3:1e:76:
                    a1:ad:3f:79:71:eb:8f:28:72:6b:ec:5e:e2:30:b1:
                    18:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FE:0F:BD:DA:02:E9:9B:25:19:9C:6F:CC:FE:97:37:17:1B:C2:76
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cf:61:90:b8:16:e5:62:ce:bf:50:ad:3d:97:fb:10:95:7b:
         93:cd:3a:03:50:05:11:ea:55:89:79:5d:a6:b2:07:02:53:40:
         89:d6:95:df:7c:fe:61:71:f9:2c:6e:1a:8b:e8:fd:e2:d8:fd:
         40:74:dc:47:6b:89:d2:1c:e9:5d:77:a4:c2:fa:e1:e9:c2:f1:
         9c:d7:d4:c3:a2:d7:6c:f5:52:ed:d4:11:28:8d:c1:dc:88:22:
         4d:3c:47:6b:f7:ea:50:22:49:3c:b6:cd:e2:99:19:79:9b:d6:
         cb:dd:95:b1:ba:1f:a8:da:0a:9b:ac:a8:bc:0d:3d:cd:94:10:
         66:ae:ac:c8:c9:d0:65:f0:27:dc:1f:79:34:b1:1a:4e:df:b9:
         90:b0:74:91:32:91:4c:b1:64:eb:c9:ff:31:f4:c4:dc:73:20:
         12:c0:8a:14:a1:55:dc:9e:b1:34:0b:51:74:96:a6:64:2a:90:
         c4:ad:56:47:8d:fe:81:57:7b:31:9e:2c:e0:1e:4a:20:00:ea:
         34:4e:d9:cf:0f:33:4b:34:8d:a8:d1:68:b0:86:61:3e:3d:83:
         a0:4b:92:5f:86:5c:e6:cf:ff:90:69:e2:bc:7a:cb:1d:e8:e0:
         21:f7:85:7d:83:8f:b8:ff:ff:6c:37:02:b2:2a:6b:b1:91:49:
         7e:b3:98:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmGMSOmrdZaGRsHmfAYajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTQzYmVlN2E3Y2NmNDc4MDJmNTVlYWU1NTdiYTVmY2Y5
Zjc5NWUwHhcNMjUwODIzMTEwMjQ3WhcNMjUwODI0MTEwMjQ3WjAzMTEwLwYDVQQD
EygzNWZlMGZiZGRhMDJlOTliMjUxOTljNmZjY2ZlOTczNzE3MWJjMjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWu6CoQ6yzygpEcNQBx7B/4K1T9S
lDa7mzuJ1G+BseN5DksDSf2EKZtIl6+40gJFSOMXNtFFXjgSz3j78z0GitHNakSm
fcsd8Bx+bCg2p3HBVt9T30hcDCeDhduU8m3Qr9estpLYMYTPq2b7q4aW2hJzAp5H
Q+PEjzsgwtlckYFSbccMzTXwo9Yk9GlD0Jr6s4oUeqmu30ni3l3fqYOJRNIIVpou
vR/j4uMRRRmc6wREeOm8TzcPqopYkHIK+gt1vilUHArQhJdhkovm1xAJ3ZKMqiHm
sefc6U+AANPSJpmZsvrBweDAqEpESPfzHnahrT95ceuPKHJr7F7iMLEY1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX+D73aAumbJRmcb8z+lzcXG8J2MB8GA1UdIwQY
MBaAFFQUO+56fM9HgC9V6uVXul/Pn3leMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEt
Yjc1YjVmMzdkYjA5LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NWUyMTgtZDc1MS00MTc2LTgxYWEtYjc1YjVmMzdkYjA5
LzEvVkJRNzducDh6MGVBTDFYcTVWZTZYOC1mZVY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi89hkLgW
5WLOv1CtPZf7EJV7k806A1AFEepViXldprIHAlNAidaV33z+YXH5LG4ai+j94tj9
QHTcR2uJ0hzpXXekwvrh6cLxnNfUw6LXbPVS7dQRKI3B3IgiTTxHa/fqUCJJPLbN
4pkZeZvWy92VsbofqNoKm6yovA09zZQQZq6syMnQZfAn3B95NLEaTt+5kLB0kTKR
TLFk68n/MfTE3HMgEsCKFKFV3J6xNAtRdJamZCqQxK1WR43+gVd7MZ4s4B5KIADq
NE7Zzw8zSzSNqNFosIZhPj2DoEuSX4Zc5s//kGnivHrLHejgIfeFfYOPuP//bDcC
siprsZFJfrOYyA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:38 2025 by rpki-client