Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File:                     vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier:          bKxWO4J5+qRk9ZZgioogAmZ9UO3z9d+zjAd+j7JPub0=
Subject key identifier:   9C:DB:0E:F1:C1:22:6A:5A:2F:F6:98:E2:4F:71:E9:32:24:C6:30:4F
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer:       /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial:       01988B100EA0B26D3E33F21EFDEBAE2598B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number:          0C14
Signing time:             Fri 08 Aug 2025 19:02:21 +0000
Manifest this update:     Fri 08 Aug 2025 19:02:21 +0000
Manifest next update:     Sat 09 Aug 2025 19:02:21 +0000
Files and hashes:         1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
                          2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: gjyvBb0FE13CC79wWIwsXPABCwwmZomS4WkY72nFMCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:10:0e:a0:b2:6d:3e:33:f2:1e:fd:eb:ae:25:98:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
        Validity
            Not Before: Aug  8 19:02:21 2025 GMT
            Not After : Aug  9 19:02:21 2025 GMT
        Subject: CN=9cdb0ef1c1226a5a2ff698e24f71e93224c6304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:e0:19:48:7e:82:95:4b:c4:dc:46:7f:f4:
                    d9:47:66:74:05:c8:19:80:3c:f5:fd:4b:9d:ce:e0:
                    11:e1:c3:b6:f1:45:49:e4:20:2b:fe:f1:a6:ff:cc:
                    40:40:16:ad:60:c8:69:69:2b:f4:f3:ae:e3:57:96:
                    d1:8a:65:02:93:65:0b:e6:c4:af:2c:32:2a:97:a7:
                    d1:ee:9a:c1:77:4f:59:60:23:4e:d8:22:aa:17:bd:
                    1e:5e:d0:e6:75:9e:26:75:83:d9:99:c2:ea:11:60:
                    1b:c0:e9:f6:4f:1a:3f:fc:64:ca:83:00:7e:f6:f1:
                    16:73:79:2d:3c:36:3a:56:5e:97:6b:74:08:b8:83:
                    24:be:bb:5a:14:5f:db:f6:f6:02:e2:7d:23:ac:cf:
                    42:25:5c:68:1d:f1:f5:8a:b8:ef:32:a1:b1:46:19:
                    7a:9d:ad:7d:85:dc:45:13:03:e7:76:28:20:8a:67:
                    2f:a2:56:68:97:b8:42:0c:68:92:97:62:fa:c0:77:
                    d0:03:d1:2b:81:fb:0f:9c:5a:63:2f:0c:25:78:8f:
                    85:cd:85:df:2e:f3:8f:15:d4:3d:21:56:c0:53:17:
                    4c:32:ae:fb:2e:12:19:09:20:8c:2e:ae:3b:19:b3:
                    d2:d4:72:e0:e4:f7:b2:1f:6f:81:ac:ea:57:09:c2:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DB:0E:F1:C1:22:6A:5A:2F:F6:98:E2:4F:71:E9:32:24:C6:30:4F
            X509v3 Authority Key Identifier:
                keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:26:28:1a:dc:09:d6:93:af:0b:a9:b6:8d:22:b1:1d:5b:8a:
         6a:47:23:3e:b6:80:e2:52:e5:27:63:12:a1:2a:72:61:56:ff:
         b9:d0:6d:66:7d:0e:82:90:4b:4c:1b:94:9b:1c:81:f4:ea:6e:
         72:92:dd:fb:a4:2a:0d:78:9d:3d:71:0b:e5:5f:49:fd:3c:42:
         22:cd:22:f3:ab:eb:64:26:4c:56:92:3b:92:7b:8b:f0:8a:ef:
         19:4a:1a:31:e2:df:b4:46:6e:33:f5:50:ae:42:63:50:42:5d:
         c1:46:d0:8e:6f:f6:c9:55:0f:d9:da:59:d6:ae:db:7a:6e:e8:
         78:29:21:de:47:c1:f1:02:d0:d9:6a:92:12:81:47:1d:14:3e:
         cf:93:4e:b6:f5:5c:0c:b1:83:1a:7f:61:f5:e1:8b:64:f5:b0:
         a7:4e:58:67:56:43:50:39:8d:db:58:53:f3:3e:3c:3e:db:7f:
         66:38:4d:3f:64:2f:9e:48:c7:a7:a9:2d:80:24:be:f8:65:64:
         e4:20:41:48:9e:33:e7:c8:b8:3c:9b:ee:a3:fc:8b:e9:d2:f4:
         70:ea:d6:5f:68:10:a3:40:08:44:9b:fb:26:1b:ee:b5:79:1a:
         60:ca:4e:31:a5:0c:97:8b:bc:c1:30:25:90:49:64:f2:f1:c5:
         eb:9e:ac:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLEA6gsm0+M/Ie/euuJZi4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDQ4YzY3YTNhYjBlYTM3NWZiYTg0OGM5ZmU4YzhlYjFl
ODRkNmYwHhcNMjUwODA4MTkwMjIxWhcNMjUwODA5MTkwMjIxWjAzMTEwLwYDVQQD
Eyg5Y2RiMGVmMWMxMjI2YTVhMmZmNjk4ZTI0ZjcxZTkzMjI0YzYzMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AzgGUh+gpVLxNxGf/TZR2Z0BcgZ
gDz1/UudzuAR4cO28UVJ5CAr/vGm/8xAQBatYMhpaSv0867jV5bRimUCk2UL5sSv
LDIql6fR7prBd09ZYCNO2CKqF70eXtDmdZ4mdYPZmcLqEWAbwOn2Txo//GTKgwB+
9vEWc3ktPDY6Vl6Xa3QIuIMkvrtaFF/b9vYC4n0jrM9CJVxoHfH1irjvMqGxRhl6
na19hdxFEwPndiggimcvolZol7hCDGiSl2L6wHfQA9ErgfsPnFpjLwwleI+FzYXf
LvOPFdQ9IVbAUxdMMq77LhIZCSCMLq47GbPS1HLg5PeyH2+BrOpXCcLxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzbDvHBImpaL/aY4k9x6TIkxjBPMB8GA1UdIwQY
MBaAFL5EjGejqw6jdfuoSMn+jI6x6E1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUt
OWQ3NDdkOWEyNTBhLzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUtOWQ3NDdkOWEyNTBh
LzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiYoGtwJ
1pOvC6m2jSKxHVuKakcjPraA4lLlJ2MSoSpyYVb/udBtZn0OgpBLTBuUmxyB9Opu
cpLd+6QqDXidPXEL5V9J/TxCIs0i86vrZCZMVpI7knuL8IrvGUoaMeLftEZuM/VQ
rkJjUEJdwUbQjm/2yVUP2dpZ1q7bem7oeCkh3kfB8QLQ2WqSEoFHHRQ+z5NOtvVc
DLGDGn9h9eGLZPWwp05YZ1ZDUDmN21hT8z48Ptt/ZjhNP2QvnkjHp6ktgCS++GVk
5CBBSJ4z58i4PJvuo/yL6dL0cOrWX2gQo0AIRJv7JhvutXkaYMpOMaUMl4u8wTAl
kElk8vHF656sVg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:49 2025 by rpki-client