Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File:                     VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier:          q1QVbleFonKnRE3rqgat5+kzxWK1Te3GlXxZOLeFR0c=
Subject key identifier:   D7:AA:6E:73:AC:80:75:3D:91:8C:37:8E:BD:28:DA:86:10:25:AB:24
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer:       /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial:       01987E663DB231451E5C154DB554B6CD9C2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number:          29
Signing time:             Wed 06 Aug 2025 08:01:26 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:26 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:26 +0000
Files and hashes:         1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: tvWIECpbxWwdPmU9UIQhKIKtbKwj729lE0Lv7kY/L+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:3d:b2:31:45:1e:5c:15:4d:b5:54:b6:cd:9c:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
        Validity
            Not Before: Aug  6 08:01:26 2025 GMT
            Not After : Aug  7 08:01:26 2025 GMT
        Subject: CN=d7aa6e73ac80753d918c378ebd28da861025ab24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:9a:8c:f1:32:84:ea:62:55:38:bd:d2:4c:
                    56:6b:97:bc:e3:ee:6f:ab:bc:bb:39:58:0a:cd:5f:
                    d4:5e:c8:f4:ae:28:c7:30:42:05:5c:58:f5:ed:21:
                    46:0e:c1:b6:96:6a:e0:9d:28:03:eb:8f:a4:95:81:
                    49:ba:c3:22:55:bb:c4:fb:34:fd:76:28:c6:fa:21:
                    e3:19:b7:80:13:f6:ed:45:6e:8b:76:37:5b:0d:f5:
                    fe:b2:21:85:b1:33:97:e3:75:00:59:54:7b:0d:01:
                    66:fd:fe:18:52:8f:52:2f:17:7c:6a:97:11:9c:ed:
                    00:ae:d8:2e:2a:14:bc:49:13:a0:c9:bd:08:67:82:
                    c1:6e:e4:14:55:62:8c:6a:97:d6:cb:3d:3e:54:9b:
                    5d:58:4c:cd:d7:76:e3:22:31:92:5a:73:29:1f:33:
                    bc:8a:84:a9:49:3e:df:7f:d1:4b:02:06:d0:60:5a:
                    8d:c2:ee:63:6c:12:d4:b0:d7:97:cd:6d:64:8a:61:
                    e8:22:ba:f0:ed:18:ca:8c:d9:0f:41:99:a5:2f:da:
                    45:b3:6b:8c:a2:10:74:71:c0:60:81:b6:3c:23:66:
                    a3:04:60:a2:ad:c1:c1:48:e0:b7:c5:80:2b:4f:cc:
                    c7:43:d7:2d:fe:d5:d6:8b:40:12:7a:f3:36:88:c1:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AA:6E:73:AC:80:75:3D:91:8C:37:8E:BD:28:DA:86:10:25:AB:24
            X509v3 Authority Key Identifier:
                keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:89:28:58:8d:7a:b8:b8:e6:c6:03:d8:e0:68:48:22:44:91:
         8e:46:a6:75:06:b3:31:9d:78:e4:bc:44:e5:7c:93:56:40:50:
         fc:a5:e3:20:07:99:9d:e1:2e:dd:13:de:b3:9b:97:89:7a:f6:
         f4:3b:0e:bd:9d:be:3d:06:06:26:c4:82:f4:ad:11:b6:bb:5e:
         70:36:fc:df:87:a7:11:f2:1e:30:72:06:26:1b:d1:09:24:17:
         a5:e7:fa:cd:20:12:07:05:ca:61:e4:cb:98:2b:fc:e5:e4:2d:
         00:31:25:7e:9c:21:3b:e2:82:45:83:55:7f:37:dc:69:a1:82:
         ff:30:83:ca:e8:18:21:97:35:76:e7:33:77:9b:8b:91:b2:dd:
         33:cc:2c:e0:cb:6d:96:31:9f:e2:ba:8d:e3:f8:d5:f9:b7:cc:
         18:87:86:f1:43:ff:98:7b:62:ad:2a:a7:7d:0a:fc:c1:1b:c2:
         d0:3b:ec:ac:9c:40:c4:40:8c:fb:85:81:b2:6c:17:93:fa:3a:
         d8:cc:9f:6a:4e:4c:40:88:36:72:57:93:f4:be:98:30:b7:9d:
         09:b5:85:80:ce:a5:62:98:c9:5d:8b:31:54:17:fd:58:1d:5a:
         60:a6:0d:84:86:1d:a5:e3:9a:73:9f:09:9a:b1:79:c9:b0:46:
         b9:6e:e2:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+Zj2yMUUeXBVNtVS2zZwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODE3YWUyZmI1MTNlNWUwMGQ2MWJmZDMyOTNhZTRlZjdi
ZjIyNmUwHhcNMjUwODA2MDgwMTI2WhcNMjUwODA3MDgwMTI2WjAzMTEwLwYDVQQD
EyhkN2FhNmU3M2FjODA3NTNkOTE4YzM3OGViZDI4ZGE4NjEwMjVhYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqryajPEyhOpiVTi90kxWa5e84+5v
q7y7OVgKzV/UXsj0rijHMEIFXFj17SFGDsG2lmrgnSgD64+klYFJusMiVbvE+zT9
dijG+iHjGbeAE/btRW6LdjdbDfX+siGFsTOX43UAWVR7DQFm/f4YUo9SLxd8apcR
nO0ArtguKhS8SROgyb0IZ4LBbuQUVWKMapfWyz0+VJtdWEzN13bjIjGSWnMpHzO8
ioSpST7ff9FLAgbQYFqNwu5jbBLUsNeXzW1kimHoIrrw7RjKjNkPQZmlL9pFs2uM
ohB0ccBggbY8I2ajBGCircHBSOC3xYArT8zHQ9ct/tXWi0ASevM2iMHGkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeqbnOsgHU9kYw3jr0o2oYQJaskMB8GA1UdIwQY
MBaAFFaBeuL7UT5eANYb/TKTrk73vyJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYt
Mzg2MmI3MjQwODk1LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYtMzg2MmI3MjQwODk1
LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4koWI16
uLjmxgPY4GhIIkSRjkamdQazMZ145LxE5XyTVkBQ/KXjIAeZneEu3RPes5uXiXr2
9DsOvZ2+PQYGJsSC9K0RtrtecDb834enEfIeMHIGJhvRCSQXpef6zSASBwXKYeTL
mCv85eQtADElfpwhO+KCRYNVfzfcaaGC/zCDyugYIZc1duczd5uLkbLdM8ws4Mtt
ljGf4rqN4/jV+bfMGIeG8UP/mHtirSqnfQr8wRvC0DvsrJxAxECM+4WBsmwXk/o6
2Myfak5MQIg2cleT9L6YMLedCbWFgM6lYpjJXYsxVBf9WB1aYKYNhIYdpeOac58J
mrF5ybBGuW7ijQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:17:22 2025 by rpki-client